v1alpha1

type AWSECRContainerImageDetails struct {
	LastInUseAt    *metav1.Time `json:"lastInUseAt,omitempty"`
	PushedAt       *metav1.Time `json:"pushedAt,omitempty"`
	Registry       *string      `json:"registry,omitempty"`
	RepositoryName *string      `json:"repositoryName,omitempty"`
}

type ArtifactStatus string

type ArtifactStatusFilter string

type EncryptionConfiguration struct {
	EncryptionType *string `json:"encryptionType,omitempty"`
	KMSKey         *string `json:"kmsKey,omitempty"`
	// Reference field for KMSKey
	KMSKeyRef *ackv1alpha1.AWSResourceReferenceWrapper `json:"kmsKeyRef,omitempty"`
}

type EncryptionConfigurationForRepositoryCreationTemplate struct {
	EncryptionType *string `json:"encryptionType,omitempty"`
	KMSKey         *string `json:"kmsKey,omitempty"`
	// Reference field for KMSKey
	KMSKeyRef *ackv1alpha1.AWSResourceReferenceWrapper `json:"kmsKeyRef,omitempty"`
}

type EncryptionType string

type EnhancedImageScanFinding struct {
	AWSAccountID    *string      `json:"awsAccountID,omitempty"`
	FirstObservedAt *metav1.Time `json:"firstObservedAt,omitempty"`
	LastObservedAt  *metav1.Time `json:"lastObservedAt,omitempty"`
	UpdatedAt       *metav1.Time `json:"updatedAt,omitempty"`
}

type FindingSeverity string

type Image struct {
	RegistryID     *string `json:"registryID,omitempty"`
	RepositoryName *string `json:"repositoryName,omitempty"`
}

type ImageActionType string

type ImageDetail struct {
	RegistryID     *string `json:"registryID,omitempty"`
	RepositoryName *string `json:"repositoryName,omitempty"`
}

type ImageFailureCode string

type ImageReplicationStatus struct {
	RegistryID *string `json:"registryID,omitempty"`
}

type ImageScanFinding struct {
	URI *string `json:"uri,omitempty"`
}

type ImageScanningConfiguration struct {
	ScanOnPush *bool `json:"scanOnPush,omitempty"`
}

type ImageStatus string

type ImageStatusFilter string

type ImageTagMutability string

type ImageTagMutabilityExclusionFilter struct {
	Filter     *string `json:"filter,omitempty"`
	FilterType *string `json:"filterType,omitempty"`
}

type ImageTagMutabilityExclusionFilterType string

type LayerAvailability string

type LayerFailureCode string

type LifecyclePolicyPreviewStatus string

type LifecyclePolicyStorageClass string

type LifecyclePolicyTargetStorageClass string

type PackageVulnerabilityDetails struct {
	SourceURL       *string      `json:"sourceURL,omitempty"`
	VendorCreatedAt *metav1.Time `json:"vendorCreatedAt,omitempty"`
	VendorUpdatedAt *metav1.Time `json:"vendorUpdatedAt,omitempty"`
}

type PullThroughCacheRule struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              PullThroughCacheRuleSpec   `json:"spec,omitempty"`
	Status            PullThroughCacheRuleStatus `json:"status,omitempty"`
}

type PullThroughCacheRuleList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []PullThroughCacheRule `json:"items"`
}

type PullThroughCacheRuleSpec struct {

	// The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager
	// secret that identifies the credentials to authenticate to the upstream registry.
	//
	// Regex Pattern: `^arn:aws(-\w+)*:secretsmanager:[a-zA-Z0-9-:]+:secret:ecr\-pullthroughcache\/[a-zA-Z0-9\/_+=.@-]+$`
	CredentialARN *string                                  `json:"credentialARN,omitempty"`
	CredentialRef *ackv1alpha1.AWSResourceReferenceWrapper `json:"credentialRef,omitempty"`
	// Amazon Resource Name (ARN) of the IAM role to be assumed by Amazon ECR to
	// authenticate to the ECR upstream registry. This role must be in the same
	// account as the registry that you are configuring.
	CustomRoleARN *string                                  `json:"customRoleARN,omitempty"`
	CustomRoleRef *ackv1alpha1.AWSResourceReferenceWrapper `json:"customRoleRef,omitempty"`
	// The repository name prefix to use when caching images from the source registry.
	//
	// There is always an assumed / applied to the end of the prefix. If you specify
	// ecr-public as the prefix, Amazon ECR treats that as ecr-public/.
	//
	// Regex Pattern: `^((?:[a-z0-9]+(?:[._-][a-z0-9]+)*/)*[a-z0-9]+(?:[._-][a-z0-9]+)*/?|ROOT)$`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
	// +kubebuilder:validation:Required
	ECRRepositoryPrefix *string `json:"ecrRepositoryPrefix"`
	// The Amazon Web Services account ID associated with the registry to create
	// the pull through cache rule for. If you do not specify a registry, the default
	// registry is assumed.
	//
	// Regex Pattern: `^[0-9]{12}$`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
	RegistryID *string `json:"registryID,omitempty"`
	// The name of the upstream registry.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
	UpstreamRegistry *string `json:"upstreamRegistry,omitempty"`
	// The registry URL of the upstream public registry to use as the source for
	// the pull through cache rule. The following is the syntax to use for each
	// supported upstream registry.
	//
	//   - Amazon ECR (ecr) – .dkr.ecr..amazonaws.com
	//
	//   - Amazon ECR Public (ecr-public) – public.ecr.aws
	//
	//   - Docker Hub (docker-hub) – registry-1.docker.io
	//
	//   - GitHub Container Registry (github-container-registry) – ghcr.io
	//
	//   - GitLab Container Registry (gitlab-container-registry) – registry.gitlab.com
	//
	//   - Kubernetes (k8s) – registry.k8s.io
	//
	//   - Microsoft Azure Container Registry (azure-container-registry) – .azurecr.io
	//
	//   - Quay (quay) – quay.io
	//
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
	// +kubebuilder:validation:Required
	UpstreamRegistryURL *string `json:"upstreamRegistryURL"`
	// The repository name prefix of the upstream registry to match with the upstream
	// repository name. When this field isn't specified, Amazon ECR will use the
	// ROOT.
	//
	// Regex Pattern: `^((?:[a-z0-9]+(?:[._-][a-z0-9]+)*/)*[a-z0-9]+(?:[._-][a-z0-9]+)*/?|ROOT)$`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
	UpstreamRepositoryPrefix *string `json:"upstreamRepositoryPrefix,omitempty"`
}

type PullThroughCacheRuleStatus struct {
	// All CRs managed by ACK have a common `Status.ACKResourceMetadata` member
	// that is used to contain resource sync state, account ownership,
	// constructed ARN for the resource
	// +kubebuilder:validation:Optional
	ACKResourceMetadata *ackv1alpha1.ResourceMetadata `json:"ackResourceMetadata"`
	// All CRs managed by ACK have a common `Status.Conditions` member that
	// contains a collection of `ackv1alpha1.Condition` objects that describe
	// the various terminal states of the CR and its backend AWS service API
	// resource
	// +kubebuilder:validation:Optional
	Conditions []*ackv1alpha1.Condition `json:"conditions"`
	// The date and time, in JavaScript date format, when the pull through cache
	// rule was created.
	// +kubebuilder:validation:Optional
	CreatedAt *metav1.Time `json:"createdAt,omitempty"`
}

type PullThroughCacheRule_SDK struct {
	CreatedAt                *metav1.Time `json:"createdAt,omitempty"`
	CredentialARN            *string      `json:"credentialARN,omitempty"`
	CustomRoleARN            *string      `json:"customRoleARN,omitempty"`
	ECRRepositoryPrefix      *string      `json:"ecrRepositoryPrefix,omitempty"`
	RegistryID               *string      `json:"registryID,omitempty"`
	UpdatedAt                *metav1.Time `json:"updatedAt,omitempty"`
	UpstreamRegistry         *string      `json:"upstreamRegistry,omitempty"`
	UpstreamRegistryURL      *string      `json:"upstreamRegistryURL,omitempty"`
	UpstreamRepositoryPrefix *string      `json:"upstreamRepositoryPrefix,omitempty"`
}

type RCTAppliedFor string

type Recommendation struct {
	URL *string `json:"url,omitempty"`
}

type ReplicationDestination struct {
	RegistryID *string `json:"registryID,omitempty"`
}

type ReplicationStatus string

type Repository struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              RepositorySpec   `json:"spec,omitempty"`
	Status            RepositoryStatus `json:"status,omitempty"`
}

type RepositoryCreationTemplate struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              RepositoryCreationTemplateSpec   `json:"spec,omitempty"`
	Status            RepositoryCreationTemplateStatus `json:"status,omitempty"`
}

type RepositoryCreationTemplateList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []RepositoryCreationTemplate `json:"items"`
}

type RepositoryCreationTemplateSpec struct {

	// A list of enumerable strings representing the Amazon ECR repository creation
	// scenarios that this template will apply towards. The two supported scenarios
	// are PULL_THROUGH_CACHE and REPLICATION
	// +kubebuilder:validation:Required
	AppliedFor []*string `json:"appliedFor"`
	// The ARN of the role to be assumed by Amazon ECR. This role must be in the
	// same account as the registry that you are configuring. Amazon ECR will assume
	// your supplied role when the customRoleArn is specified. When this field isn't
	// specified, Amazon ECR will use the service-linked role for the repository
	// creation template.
	CustomRoleARN *string                                  `json:"customRoleARN,omitempty"`
	CustomRoleRef *ackv1alpha1.AWSResourceReferenceWrapper `json:"customRoleRef,omitempty"`
	// A description for the repository creation template.
	Description *string `json:"description,omitempty"`
	// The encryption configuration to use for repositories created using the template.
	EncryptionConfiguration *EncryptionConfigurationForRepositoryCreationTemplate `json:"encryptionConfiguration,omitempty"`
	// The tag mutability setting for the repository. If this parameter is omitted,
	// the default setting of MUTABLE will be used which will allow image tags to
	// be overwritten. If IMMUTABLE is specified, all image tags within the repository
	// will be immutable which will prevent them from being overwritten.
	ImageTagMutability *string `json:"imageTagMutability,omitempty"`
	// A list of filters that specify which image tags should be excluded from the
	// repository creation template's image tag mutability setting.
	ImageTagMutabilityExclusionFilters []*ImageTagMutabilityExclusionFilter `json:"imageTagMutabilityExclusionFilters,omitempty"`
	// The lifecycle policy to use for repositories created using the template.
	LifecyclePolicy *string `json:"lifecyclePolicy,omitempty"`
	// The repository namespace prefix to associate with the template. All repositories
	// created using this namespace prefix will have the settings defined in this
	// template applied. For example, a prefix of prod would apply to all repositories
	// beginning with prod/. Similarly, a prefix of prod/team would apply to all
	// repositories beginning with prod/team/.
	//
	// To apply a template to all repositories in your registry that don't have
	// an associated creation template, you can use ROOT as the prefix.
	//
	// There is always an assumed / applied to the end of the prefix. If you specify
	// ecr-public as the prefix, Amazon ECR treats that as ecr-public/. When using
	// a pull through cache rule, the repository prefix you specify during rule
	// creation is what you should specify as your repository creation template
	// prefix as well.
	//
	// Regex Pattern: `^((?:[a-z0-9]+(?:[._-][a-z0-9]+)*/)*[a-z0-9]+(?:[._-][a-z0-9]+)*/?|ROOT)$`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
	// +kubebuilder:validation:Required
	Prefix *string `json:"prefix"`
	// The repository policy to apply to repositories created using the template.
	// A repository policy is a permissions policy associated with a repository
	// to control access permissions.
	RepositoryPolicy *string `json:"repositoryPolicy,omitempty"`
	// The metadata to apply to the repository to help you categorize and organize.
	// Each tag consists of a key and an optional value, both of which you define.
	// Tag keys can have a maximum character length of 128 characters, and tag values
	// can have a maximum length of 256 characters.
	ResourceTags []*Tag `json:"resourceTags,omitempty"`
}

type RepositoryCreationTemplateStatus struct {
	// All CRs managed by ACK have a common `Status.ACKResourceMetadata` member
	// that is used to contain resource sync state, account ownership,
	// constructed ARN for the resource
	// +kubebuilder:validation:Optional
	ACKResourceMetadata *ackv1alpha1.ResourceMetadata `json:"ackResourceMetadata"`
	// All CRs managed by ACK have a common `Status.Conditions` member that
	// contains a collection of `ackv1alpha1.Condition` objects that describe
	// the various terminal states of the CR and its backend AWS service API
	// resource
	// +kubebuilder:validation:Optional
	Conditions []*ackv1alpha1.Condition `json:"conditions"`
	// The date and time, in JavaScript date format, when the repository creation
	// template was created.
	// +kubebuilder:validation:Optional
	CreatedAt *metav1.Time `json:"createdAt,omitempty"`
	// The date and time, in JavaScript date format, when the repository creation
	// template was last updated.
	// +kubebuilder:validation:Optional
	UpdatedAt *metav1.Time `json:"updatedAt,omitempty"`
}

type RepositoryCreationTemplate_SDK struct {
	AppliedFor    []*string    `json:"appliedFor,omitempty"`
	CreatedAt     *metav1.Time `json:"createdAt,omitempty"`
	CustomRoleARN *string      `json:"customRoleARN,omitempty"`
	Description   *string      `json:"description,omitempty"`
	// The encryption configuration to associate with the repository creation template.
	EncryptionConfiguration            *EncryptionConfigurationForRepositoryCreationTemplate `json:"encryptionConfiguration,omitempty"`
	ImageTagMutability                 *string                                               `json:"imageTagMutability,omitempty"`
	ImageTagMutabilityExclusionFilters []*ImageTagMutabilityExclusionFilter                  `json:"imageTagMutabilityExclusionFilters,omitempty"`
	LifecyclePolicy                    *string                                               `json:"lifecyclePolicy,omitempty"`
	Prefix                             *string                                               `json:"prefix,omitempty"`
	RepositoryPolicy                   *string                                               `json:"repositoryPolicy,omitempty"`
	ResourceTags                       []*Tag                                                `json:"resourceTags,omitempty"`
	UpdatedAt                          *metav1.Time                                          `json:"updatedAt,omitempty"`
}

type RepositoryFilterType string

type RepositoryList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Repository `json:"items"`
}

type RepositoryScanningConfiguration struct {
	RepositoryARN  *string `json:"repositoryARN,omitempty"`
	RepositoryName *string `json:"repositoryName,omitempty"`
	ScanOnPush     *bool   `json:"scanOnPush,omitempty"`
}

type RepositoryScanningConfigurationFailure struct {
	RepositoryName *string `json:"repositoryName,omitempty"`
}

type RepositorySpec struct {

	// The encryption configuration for the repository. This determines how the
	// contents of your repository are encrypted at rest.
	EncryptionConfiguration *EncryptionConfiguration `json:"encryptionConfiguration,omitempty"`
	// The imageScanningConfiguration parameter is being deprecated, in favor of
	// specifying the image scanning configuration at the registry level. For more
	// information, see PutRegistryScanningConfiguration.
	//
	// The image scanning configuration for the repository. This determines whether
	// images are scanned for known vulnerabilities after being pushed to the repository.
	ImageScanningConfiguration *ImageScanningConfiguration `json:"imageScanningConfiguration,omitempty"`
	// The tag mutability setting for the repository. If this parameter is omitted,
	// the default setting of MUTABLE will be used which will allow image tags to
	// be overwritten. If IMMUTABLE is specified, all image tags within the repository
	// will be immutable which will prevent them from being overwritten.
	ImageTagMutability *string `json:"imageTagMutability,omitempty"`
	// A list of filters that specify which image tags should be excluded from the
	// repository's image tag mutability setting.
	ImageTagMutabilityExclusionFilters []*ImageTagMutabilityExclusionFilter `json:"imageTagMutabilityExclusionFilters,omitempty"`
	// The JSON repository policy text to apply to the repository.
	LifecyclePolicy *string `json:"lifecyclePolicy,omitempty"`
	// The name to use for the repository. The repository name may be specified
	// on its own (such as nginx-web-app) or it can be prepended with a namespace
	// to group the repository into a category (such as project-a/nginx-web-app).
	//
	// The repository name must start with a letter and can only contain lowercase
	// letters, numbers, hyphens, underscores, and forward slashes.
	//
	// Regex Pattern: `^(?:[a-z0-9]+(?:[._-][a-z0-9]+)*/)*[a-z0-9]+(?:[._-][a-z0-9]+)*$`
	// +kubebuilder:validation:Required
	Name *string `json:"name"`
	// The JSON repository policy text to apply to the repository. For more information,
	// see Amazon ECR repository policies (https://docs.aws.amazon.com/AmazonECR/latest/userguide/repository-policy-examples.html)
	// in the Amazon Elastic Container Registry User Guide.
	Policy *string `json:"policy,omitempty"`
	// The Amazon Web Services account ID associated with the registry to create
	// the repository. If you do not specify a registry, the default registry is
	// assumed.
	//
	// Regex Pattern: `^[0-9]{12}$`
	RegistryID *string `json:"registryID,omitempty"`
	// The metadata that you apply to the repository to help you categorize and
	// organize them. Each tag consists of a key and an optional value, both of
	// which you define. Tag keys can have a maximum character length of 128 characters,
	// and tag values can have a maximum length of 256 characters.
	Tags []*Tag `json:"tags,omitempty"`
}

type RepositoryStatus struct {
	// All CRs managed by ACK have a common `Status.ACKResourceMetadata` member
	// that is used to contain resource sync state, account ownership,
	// constructed ARN for the resource
	// +kubebuilder:validation:Optional
	ACKResourceMetadata *ackv1alpha1.ResourceMetadata `json:"ackResourceMetadata"`
	// All CRs managed by ACK have a common `Status.Conditions` member that
	// contains a collection of `ackv1alpha1.Condition` objects that describe
	// the various terminal states of the CR and its backend AWS service API
	// resource
	// +kubebuilder:validation:Optional
	Conditions []*ackv1alpha1.Condition `json:"conditions"`
	// The date and time, in JavaScript date format, when the repository was created.
	// +kubebuilder:validation:Optional
	CreatedAt *metav1.Time `json:"createdAt,omitempty"`
	// The URI for the repository. You can use this URI for container image push
	// and pull operations.
	// +kubebuilder:validation:Optional
	RepositoryURI *string `json:"repositoryURI,omitempty"`
}

type Repository_SDK struct {
	CreatedAt *metav1.Time `json:"createdAt,omitempty"`
	// The encryption configuration for the repository. This determines how the
	// contents of your repository are encrypted at rest.
	//
	// By default, when no encryption configuration is set or the AES256 encryption
	// type is used, Amazon ECR uses server-side encryption with Amazon S3-managed
	// encryption keys which encrypts your data at rest using an AES256 encryption
	// algorithm. This does not require any action on your part.
	//
	// For more control over the encryption of the contents of your repository,
	// you can use server-side encryption with Key Management Service key stored
	// in Key Management Service (KMS) to encrypt your images. For more information,
	// see Amazon ECR encryption at rest (https://docs.aws.amazon.com/AmazonECR/latest/userguide/encryption-at-rest.html)
	// in the Amazon Elastic Container Registry User Guide.
	EncryptionConfiguration *EncryptionConfiguration `json:"encryptionConfiguration,omitempty"`
	// The image scanning configuration for a repository.
	ImageScanningConfiguration         *ImageScanningConfiguration          `json:"imageScanningConfiguration,omitempty"`
	ImageTagMutability                 *string                              `json:"imageTagMutability,omitempty"`
	ImageTagMutabilityExclusionFilters []*ImageTagMutabilityExclusionFilter `json:"imageTagMutabilityExclusionFilters,omitempty"`
	RegistryID                         *string                              `json:"registryID,omitempty"`
	RepositoryARN                      *string                              `json:"repositoryARN,omitempty"`
	RepositoryName                     *string                              `json:"repositoryName,omitempty"`
	RepositoryURI                      *string                              `json:"repositoryURI,omitempty"`
}

type ScanFrequency string

type ScanStatus string

type ScanType string

type ScanningConfigurationFailureCode string

type ScanningRepositoryFilterType string

type SigningRepositoryFilterType string

type SigningStatus string

type Tag struct {
	Key   *string `json:"key,omitempty"`
	Value *string `json:"value,omitempty"`
}

type TagStatus string

type TargetStorageClass string

type UpstreamRegistry string