v2alpha2

type BundleObjectStorage struct {
	S3 *S3ObjectStorage `json:"s3,omitempty" yaml:"s3,omitempty"`
}

type DecisionAPIConfig struct {
	ServiceURL string               `json:"serviceUrl,omitempty"`
	Reporting  DecisionLogReporting `json:"reporting,omitempty"`
}

type DecisionLog struct {
	RequestContext RequestContext `json:"requestContext,omitempty"`
}

type DecisionLogReporting struct {
	MaxDelaySeconds      int `json:"maxDelaySeconds,omitempty" yaml:"maxDelaySeconds,omitempty"`
	MinDelaySeconds      int `json:"minDelaySeconds,omitempty" yaml:"minDelaySeconds,omitempty"`
	UploadSizeLimitBytes int `json:"uploadSizeLimitBytes,omitempty" yaml:"uploadSizeLimitBytes,omitempty"`
}

type ExporterConfig struct {
	Enabled  bool         `json:"enabled,omitempty"`
	Interval string       `json:"interval,omitempty"`
	Kafka    *KafkaConfig `json:"kafka,omitempty"`
}

type ExporterConfigType string

type GitCredential struct {
	// User is a http basic auth username used for git.
	User string `json:"user"`

	// Password is a http basic auth password used for git.
	Password string `json:"password"`

	// RepoPrefix specifies a repo URL prefix. eg. if RepoPrefix is set to
	// `https://github.com/bankdata`, then this credentials would apply for any
	// repository under the bankdata github org.
	RepoPrefix string `json:"repoPrefix"`
}

type GitCredentials struct {
	ID string `json:"id"`

	// RepoPrefix specifies a repo URL prefix. eg. if RepoPrefix is set to
	// `https://github.com/bankdata`, then this credentials would apply for any
	// repository under the bankdata github org.
	RepoPrefix string `json:"repoPrefix"`
}

type HTTP struct {
	// http headers that will be added to the decision logs
	Headers []string `json:"headers"`
}

type HTTPMetricsConfig struct {
	Buckets []float64 `json:"buckets,omitempty" yaml:"buckets,omitempty"`
}

type KafkaConfig struct {
	Brokers      []string   `json:"brokers"`
	Topic        string     `json:"topic"`
	RequiredAcks string     `json:"requiredAcks"`
	TLS          *TLSConfig `json:"tls,omitempty"`
}

type LeaderElectionConfig struct {
	LeaseDuration metav1.Duration `json:"leaseDuration"`
	RenewDeadline metav1.Duration `json:"renewDeadline"`
	RetryPeriod   metav1.Duration `json:"retryPeriod"`
}

type MetricsConfig struct {
	Prometheus PrometheusMetricsConfig `json:"prometheus,omitempty" yaml:"prometheus,omitempty"`
}

type NotificationWebhooksConfig struct {

	//+kubebuilder:deprecatedversion:warning="SystemDatasourceChanged field is deprecated, only used in Styra"
	// Deprecated: SystemDatasourceChanged field is deprecated, only used in Styra.
	// This field will be removed in a future version.
	SystemDatasourceChanged string `json:"systemDatasourceChanged,omitempty"`
	//+kubebuilder:deprecatedversion:warning="LibraryDatasourceChanged field is deprecated, only used in Styra"
	// Deprecated: LibraryDatasourceChanged field is deprecated, only used in Styra.
	// This field will be removed in a future version.
	LibraryDatasourceChanged string `json:"libraryDatasourceChanged,omitempty"`
}

type OPABundleServer struct {
	URL  string `json:"url,omitempty" yaml:"url,omitempty"`
	Path string `json:"path,omitempty" yaml:"path,omitempty"`
}

type OPAConfig struct {
	DecisionLogs           DecisionLog      `json:"decisionLogs,omitempty" yaml:"decisionLogs,omitempty"`
	Metrics                MetricsConfig    `json:"metrics,omitempty" yaml:"metrics,omitempty"`
	PersistBundle          bool             `json:"persist_bundle,omitempty" yaml:"persist_bundle,omitempty"`
	PersistBundleDirectory string           `json:"persist_bundle_directory,omitempty" yaml:"persist_bundle_directory,omitempty"` //nolint:lll
	BundleServer           *OPABundleServer `json:"bundleServer,omitempty" yaml:"bundleServer,omitempty"`
}

type OPAControlPlaneConfig struct {
	// Address is the URL for the OPA Control Plane API server.
	Address string `json:"address"`

	// Token is a OPA Control Plane API token.
	Token string `json:"token"`

	// GitCredentials is the name of a secret used by the OPA Control Plane Git integration.
	GitCredentials []*GitCredentials `json:"gitCredentials,omitempty"`

	// BundleObjectStorage is the object storage configuration to use for bundles.
	// Currently only supports aws
	BundleObjectStorage *BundleObjectStorage `json:"bundleObjectStorage,omitempty"`

	// DefaultRequirements is a list of requirements that will be added to all
	// systems/bundles created by the controller in the OCP, in addition to any requirements/datasources
	// specified on the System resource.
	DefaultRequirements []string `json:"defaultRequirements,omitempty"`

	// SystemDatasourceChanged is the URL to be called when a system datasource has changed.
	SystemDatasourceChanged string `json:"systemDatasourceChanged,omitempty"`
	// LibraryDatasourceChanged is the URL to be called when a library datasource has changed.
	LibraryDatasourceChanged string `json:"libraryDatasourceChanged,omitempty"`

	// DecisionAPIConfig contains configuration for which api OPAs should use to and how
	DecisionAPIConfig *DecisionAPIConfig `json:"decisionAPIConfig,omitempty"`
}

type OPARestartConfig struct {
	Enabled        bool   `json:"enabled"`
	DeploymentType string `json:"deploymentType"`
}

type PodRestartConfig struct {
	SLPRestart *SLPRestartConfig `json:"slpRestart,omitempty"`
	OPARestart *OPARestartConfig `json:"opaRestart,omitempty"`
}

type ProjectConfig struct {
	metav1.TypeMeta `json:",inline"`

	// ControllerClass sets a controller class for this controller. This allows
	// the provided CRDs to target a specific controller. This is useful when
	// running multiple controllers in the same cluster.
	ControllerClass string `json:"controllerClass"`

	// DeletionProtectionDefault sets the default to use with regards to deletion
	// protection if it is not set on the resource.
	DeletionProtectionDefault bool `json:"deletionProtectionDefault"`

	// ReadOnly sets the value of ReadOnly for systems
	//+kubebuilder:deprecatedversion:warning="ReadOnly field is deprecated, only used in Styra"
	// Deprecated: ReadOnly field is deprecated, only used in Styra.
	// This field will be removed in a future version.
	ReadOnly bool `json:"readOnly"`

	// EnableDeltaBundlesDefault sets the default of whether systems have delta-bundles or not
	//+kubebuilder:deprecatedversion:warning="EnableDeltaBundlesDefault field is deprecated, only used in Styra"
	// Deprecated: EnableDeltaBundlesDefault field is deprecated, only used in Styra.
	// This field will be removed in a future version.
	EnableDeltaBundlesDefault *bool `json:"enableDeltaBundlesDefault,omitempty"`

	// DisableCRDWebhooks disables the CRD webhooks on the controller. If running
	// multiple controllers in the same cluster, only one will need to have it's
	// webhooks enabled.
	DisableCRDWebhooks bool `json:"disableCRDWebhooks"`

	// EnableMigrations enables the system migration annotation. This should be
	// kept disabled unless migrations need to be done.
	EnableMigrations bool `json:"enableMigrations"`

	// DatasourceIgnorePatterns is a list of regex patterns, that allow datasources in styra
	// to be ignored based on their datasource id.
	//+kubebuilder:deprecatedversion:warning="DatasourceIgnorePatterns field is deprecated, only used in Styra"
	// Deprecated: DatasourceIgnorePatterns field is deprecated, only used in Styra.
	// This field will be removed in a future version.
	DatasourceIgnorePatterns []string `json:"datasourceIgnorePatterns,omitempty"`

	// GitCredentials holds a list of git credential configurations. The
	// RepoPrefix of the GitCredential will be matched angainst repository URL in
	// order to determine which credential to use. The GitCredential with the
	// longest matching RepoPrefix will be selected.
	//+kubebuilder:deprecatedversion:warning="GitCredentials field is deprecated, only used in Styra"
	// Deprecated: GitCredentials field is deprecated, only used in Styra.
	//  This field will be removed in a future version.
	GitCredentials []*GitCredential `json:"gitCredentials"`

	// LogLevel sets the logging level of the controller. A higher number gives
	// more verbosity. A number higher than 0 should only be used for debugging
	// purposes.
	LogLevel int `json:"logLevel"`

	LeaderElection *LeaderElectionConfig `json:"leaderElection"`

	NotificationWebhooks *NotificationWebhooksConfig `json:"notificationWebhooks,omitempty"`

	Sentry *SentryConfig `json:"sentry"`

	//+kubebuilder:deprecatedversion:warning="SSO field is deprecated, only used in Styra"
	// Deprecated: SSO field is deprecated, only used in Styra. This field will be removed in a future version.
	SSO *SSOConfig `json:"sso"`

	//+kubebuilder:deprecatedversion:warning="Styra field is deprecated, use OPAControlPlaneConfig instead"
	// Deprecated: Use OPAControlPlaneConfig instead. This field will be removed in a future version.
	Styra StyraConfig `json:"styra"`

	OPA OPAConfig `json:"opa,omitempty"`

	// SystemPrefix is a prefix for all the systems that the controller creates
	// in Styra DAS. This is useful in order to be able to identify what
	// controller created a system in a shared Styra DAS instance.
	SystemPrefix string `json:"systemPrefix"`

	// SystemSuffix is a suffix for all the systems that the controller creates
	// in Styra DAS. This is useful in order to be able to identify what
	// controller created a system in a shared Styra DAS instance.
	SystemSuffix string `json:"systemSuffix"`

	// SystemUserRoles is a list of Styra DAS system level roles which the subjects of
	// a system will be granted.
	//+kubebuilder:deprecatedversion:warning="SystemUserRoles field is deprecated, only used in Styra"
	// Deprecated: SystemUserRoles field is deprecated, only used in Styra.
	// This field will be removed in a future version.
	SystemUserRoles []string `json:"systemUserRoles"`

	//+kubebuilder:deprecatedversion:warning="DecisionsExporter field is deprecated, only used in Styra"
	// Deprecated: DecisionsExporter field is deprecated, only used in Styra.
	// This field will be removed in a future version.
	DecisionsExporter *ExporterConfig `json:"decisionsExporter,omitempty"`

	//+kubebuilder:deprecatedversion:warning="ActivityExporter field is deprecated, only used in Styra"
	// Deprecated: ActivityExporter field is deprecated, only used in Styra.
	// This field will be removed in a future version.
	ActivityExporter *ExporterConfig `json:"activityExporter,omitempty"`

	PodRestart *PodRestartConfig `json:"podRestart,omitempty"`

	// OPAControlPlaneConfig contains configuration for connecting to the
	// OPA Control Plane APIs. If this is not set, the controller will not
	// attempt to connect to the OPA Control Plane APIs.
	OPAControlPlaneConfig *OPAControlPlaneConfig `json:"opaControlPlaneConfig,omitempty"`

	// UserCredentialHandler contains configuration for the controller to handle user credentials, e.g. in S3
	UserCredentialHandler *UserCredentialHandler `json:"userCredentialHandler,omitempty"`

	// EnableStyraReconciliation is a flag that sets whether the controller should use Styra
	// A Migration flag to enable/disable Styra DAS reconciliation for all systems and libraries.
	//+kubebuilder:deprecatedversion:warning="EnableStyraReconciliation field is deprecated.
	// Only used in migration versions Styra->OCP"
	// Deprecated: EnableStyraReconciliation field is deprecated, only used in migration versions Styra->OCP.
	// This field will be removed in a future version.
	EnableStyraReconciliation bool `json:"enableStyraReconciliation,omitempty"`

	// EnableOPAControlPlaneReconciliation is a flag that sets whether the controller should use OPAControlPlane
	// A Migration flag to enable/disable OPA Control Plane reconciliation for all systems and libraries.
	//+kubebuilder:deprecatedversion:warning="EnableOPAControlPlaneReconciliation field is deprecated,
	// only used in migration versions Styra->OCP"
	// Deprecated: EnableOPAControlPlaneReconciliation field is deprecated, only used in migration versions Styra->OCP.
	// This field will be removed in a future version.
	EnableOPAControlPlaneReconciliation bool `json:"enableOPAControlPlaneReconciliation,omitempty"`

	// EnableOPAControlPlaneReconciliationTestData is a flag that sets whether the controller should create
	// OPAControlPlane test data.
	// A Migration flag to allow adding test data to OPA Control Plane and not to modify k8s data
	//+kubebuilder:deprecatedversion:warning="EnableOPAControlPlaneReconciliationTestData field is deprecated.
	// Only used in migration versions Styra->OCP"
	// Deprecated: EnableOPAControlPlaneReconciliationTestData field is deprecated.
	// Only used in migration versions Styra->OCP. This field will be removed in a future version.
	EnableOPAControlPlaneReconciliationTestData bool `json:"enableOPAControlPlaneReconciliationTestData,omitempty"`
}

type PrometheusMetricsConfig struct {
	HTTP HTTPMetricsConfig `json:"http,omitempty" yaml:"http,omitempty"`
}

type RequestContext struct {
	HTTP HTTP `json:"http"`
}

type S3Handler struct {
	Bucket          string `json:"bucket" yaml:"bucket"`
	URL             string `json:"url" yaml:"url"`
	Region          string `json:"region" yaml:"region"`
	AccessKeyID     string `json:"accessKeyID" yaml:"accessKeyID"`
	SecretAccessKey string `json:"secretAccessKey" yaml:"secretAccessKey"`
}

type S3ObjectStorage struct {
	Bucket              string `json:"bucket"`
	URL                 string `json:"url,omitempty"`
	Region              string `json:"region"`
	OCPConfigSecretName string `json:"ocpConfigSecretName"`
}

type SLPRestartConfig struct {
	Enabled        bool   `json:"enabled"`
	DeploymentType string `json:"deploymentType"` // DeploymentType only currently supports "StatefulSet""
}

type SSOConfig struct {
	// IdentityProvider is the ID of a configured Styra DAS identity provider.
	IdentityProvider string `json:"identityProvider"`

	// JWTGroupsClaim is the json path to a claim in issued JWTs which contain a
	// list of groups that the user belongs to.
	JWTGroupsClaim string `json:"jwtGroupsClaim"`
}

type SentryConfig struct {
	// Debug enables Sentry client debugging.
	Debug bool `json:"debug"`

	// DSN is the Sentry project DSN.
	DSN string `json:"dsn"`

	// Environment sets the environment of the events sent to Sentry.
	Environment string `json:"environment"`

	// HTTPSProxy sets an HTTP proxy server for sentry to use.
	HTTPSProxy string `json:"httpsProxy"`
}

type StyraConfig struct {
	// Address is the URL for the Styra DAS API server.
	Address string `json:"address"`

	// Token is a Styra DAS API token. These can be created in the Styra DAS GUI
	// or through the API. The token should have the `WorkspaceAdministrator` role.
	Token string `json:"token"`

	// Alternative to the "token" whice define the Styra DAS API token directly in the config file,
	// this "tokenSecretPath" will use a token from a secret (only if "token" is not set)
	TokenSecretPath string `json:"tokenSecretPath"`
}

type TLSConfig struct {
	ClientCertificateName string `json:"clientCertificateName"`
	ClientCertificate     string `json:"clientCertificate"`
	ClientKey             string `json:"clientKey"`
	RootCA                string `json:"rootCA"`
	InsecureSkipVerify    bool   `json:"insecureSkipVerify"`
}

type UserCredentialHandler struct {
	S3 *S3Handler `json:"s3,omitempty" yaml:"s3,omitempty"`
}