v1alpha1

type AccessKey struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitzero"`

	// spec defines the desired state of AccessKey
	// +required
	Spec AccessKeySpec `json:"spec"`

	// status defines the observed state of AccessKey
	// +optional
	Status AccessKeyStatus `json:"status,omitzero"`
}

type AccessKeyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitzero"`
	Items           []AccessKey `json:"items"`
}

type AccessKeySpec struct {
	// The name of the secret that will be created to store the credentials.
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=253
	// +kubebuilder:validation:Pattern=^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
	// +kubebuilder:validation:Required
	SecretName string `json:"secretName"`
}

type AccessKeyStatus struct {
	// The status of each condition is one of True, False, or Unknown.
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`

	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

	// The external Access Key identifier.
	// +optional
	AccessKeyID string `json:"accessKeyId,omitempty"`

	// SecretName is the name of the secret created to store the access key.
	// It holds the reference to the previously created secret on spec changes.
	//
	// Keys: access-key-id, secret-access-key
	//
	// +optional
	SecretName string `json:"secretName,omitempty"`
}

type AccessPolicy struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitzero"`

	// spec defines the desired state of AccessPolicy
	// +required
	Spec AccessPolicySpec `json:"spec"`

	// status defines the observed state of AccessPolicy
	// +optional
	Status AccessPolicyStatus `json:"status,omitzero"`
}

type AccessPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitzero"`
	Items           []AccessPolicy `json:"items"`
}

type AccessPolicySpec struct {
	// AccessKey is the name of the resource in the namespace.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	AccessKey string `json:"accessKey"`

	// Bucket is the name of the bucket resource.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	Bucket string `json:"bucket"`

	// Permissions to grant the access key.
	// +required
	Permissions Permissions `json:"permissions"`
}

type AccessPolicyStatus struct {
	// The status of each condition is one of True, False, or Unknown.
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`

	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

	// +optional
	BucketID string `json:"bucketId"`

	// The external Access Key identifier.
	// +optional
	AccessKeyID string `json:"accessKeyId"`
}

type Bucket struct {
	// +optional
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitzero"`

	// spec defines the desired state of Bucket
	// +required
	Spec BucketSpec `json:"spec"`

	// status defines the observed state of Bucket
	// +optional
	Status BucketStatus `json:"status,omitzero"`
}

type BucketList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitzero"`
	Items           []Bucket `json:"items"`
}

type BucketSpec struct {
	// Name is the desired bucket name.
	//
	// The actual name will be suffixed with a hash derived from the Bucket resource UID.
	//
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=3
	// +kubebuilder:validation:MaxLength=46
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	Name string `json:"name"`

	// MaxSize is the maximum bucket size in bytes.
	// Supports standard quantity suffixes.
	//
	// Examples: "30Gi" (binary), "250M" (decimal), "8000" (bytes)
	//
	// +optional
	MaxSize resource.Quantity `json:"maxSize"`

	// MaxObjects is the number of objects the bucket can store.
	// +optional
	MaxObjects int64 `json:"maxObjects,omitempty"`

	// The name of the ConfigMap that will be created to store bucket connection details.
	// If not set, defaults to the Bucket resource name.
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=253
	// +kubebuilder:validation:Pattern=^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
	// +optional
	ConfigMapName string `json:"configMapName,omitempty"`
}

type BucketStatus struct {
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`

	// The external Bucket identifier.
	// +optional
	BucketID string `json:"bucketId,omitempty"`

	// BucketName is the actual bucket name in Garage.
	//
	// Format: "<name>-<hash>"
	// +optional
	BucketName string `json:"bucketName,omitempty"`

	// +optional
	LastSync *metav1.Time `json:"lastSync,omitempty"`
}

type Permissions struct {
	// +optional
	Read bool `json:"read"`
	// +optional
	Write bool `json:"write"`
	// +optional
	Owner bool `json:"owner"`
}