v1alpha1

type HealthCheckConfig struct {
	// Indicates whether health checking is enabled.
	// +optional
	Enabled *bool `json:"enabled,omitempty"`

	// The approximate amount of time, in seconds, between health checks of an individual target.
	// +optional
	// +kubebuilder:validation:Minimum=5
	// +kubebuilder:validation:Maximum=300
	IntervalSeconds *int64 `json:"intervalSeconds,omitempty"`

	// The amount of time, in seconds, to wait before reporting a target as unhealthy.
	// +optional
	// +kubebuilder:validation:Minimum=1
	// +kubebuilder:validation:Maximum=120
	TimeoutSeconds *int64 `json:"timeoutSeconds,omitempty"`

	// The number of consecutive successful health checks required before considering an unhealthy target healthy.
	// +optional
	// +kubebuilder:validation:Minimum=2
	// +kubebuilder:validation:Maximum=10
	HealthyThresholdCount *int64 `json:"healthyThresholdCount,omitempty"`

	// The number of consecutive failed health checks required before considering a target unhealthy.
	// +optional
	// +kubebuilder:validation:Minimum=2
	// +kubebuilder:validation:Maximum=10
	UnhealthyThresholdCount *int64 `json:"unhealthyThresholdCount,omitempty"`

	// A regular expression to match HTTP status codes when checking for successful response from a target.
	// +optional
	StatusMatch *string `json:"statusMatch,omitempty"`

	// The destination for health checks on the targets.
	// +optional
	Path *string `json:"path,omitempty"`

	// The port used when performing health checks on targets. If not specified, health check defaults to the
	// port that a target receives traffic on.
	// +kubebuilder:validation:Minimum=1
	// +kubebuilder:validation:Maximum=65535
	Port *int64 `json:"port,omitempty"`

	// The protocol used when performing health checks on targets.
	// +optional
	Protocol *HealthCheckProtocol `json:"protocol,omitempty"`

	// The protocol version used when performing health checks on targets. Defaults to HTTP/1.
	// +optional
	ProtocolVersion *HealthCheckProtocolVersion `json:"protocolVersion,omitempty"`
}

type HealthCheckProtocol string

type HealthCheckProtocolVersion string

type SecurityGroupId string

type TargetGroupPolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec TargetGroupPolicySpec `json:"spec"`
}

type TargetGroupPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []TargetGroupPolicy `json:"items"`
}

type TargetGroupPolicySpec struct {
	// The protocol to use for routing traffic to the targets. Supported values are HTTP (default) and HTTPS.
	//
	// Changes to this value results in a replacement of VPC Lattice target group.
	// +optional
	Protocol *string `json:"protocol,omitempty"`

	// The protocol version to use. Supported values are HTTP1 (default) and HTTP2. When a policy is behind GRPCRoute,
	// this field value will be ignored as GRPC is only supported through HTTP/2.
	//
	// Changes to this value results in a replacement of VPC Lattice target group.
	// +optional
	ProtocolVersion *string `json:"protocolVersion,omitempty"`

	// TargetRef points to the kubernetes Service resource that will have this policy attached.
	//
	// This field is following the guidelines of Kubernetes Gateway API policy attachment.
	TargetRef *v1alpha2.PolicyTargetReference `json:"targetRef"`

	// The health check configuration.
	//
	// Changes to this value will update VPC Lattice resource in place.
	// +optional
	HealthCheck *HealthCheckConfig `json:"healthCheck,omitempty"`
}

type VpcAssociationPolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec VpcAssociationPolicySpec `json:"spec"`
}

type VpcAssociationPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []VpcAssociationPolicy `json:"items"`
}

type VpcAssociationPolicySpec struct {

	// SecurityGroupIds defines the security groups enforced on the VpcServiceNetworkAssociation.
	// Security groups does not take effect if AssociateWithVpc is set to false.
	//
	// For more details, please check the VPC Lattice documentation https://docs.aws.amazon.com/vpc-lattice/latest/ug/security-groups.html
	//
	// +optional
	// +kubebuilder:validation:MinItems=1
	SecurityGroupIds []SecurityGroupId `json:"securityGroupIds,omitempty"`

	// AssociateWithVpc indicates whether the VpcServiceNetworkAssociation should be created for the current VPC of k8s cluster.
	//
	// Both this flag and Gateway annotation "application-networking.k8s.aws/lattice-vpc-association" are reserved tentatively for backward compatibility.
	// Either one of them set to true or both of them undefined will result in the VpcServiceNetworkAssociation created.
	// +optional
	AssociateWithVpc *bool `json:"associateWithVpc,omitempty"`

	// TargetRef points to the kubernetes Gateway resource that will have this policy attached.
	//
	// This field is following the guidelines of Kubernetes Gateway API policy attachment.
	TargetRef *v1alpha2.PolicyTargetReference `json:"targetRef"`
}