v1alpha1

type BootcNode struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is standard object metadata.
	// +optional
	metav1.ObjectMeta `json:"metadata,omitzero"`

	// spec defines the desired state, written by the controller.
	// +required
	Spec BootcNodeSpec `json:"spec"`

	// status defines the observed state, written by the daemon.
	// +optional
	Status BootcNodeStatus `json:"status,omitzero"`
}

type BootcNodeList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitzero"`
	Items           []BootcNode `json:"items"`
}

type BootcNodePool struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is standard object metadata.
	// +optional
	metav1.ObjectMeta `json:"metadata,omitzero"`

	// spec defines the desired state of the pool.
	// +required
	Spec BootcNodePoolSpec `json:"spec"`

	// status defines the observed state of the pool.
	// +optional
	Status BootcNodePoolStatus `json:"status,omitzero"`
}

type BootcNodePoolList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitzero"`
	Items           []BootcNodePool `json:"items"`
}

type BootcNodePoolSpec struct {
	// nodeSelector selects which nodes belong to this pool. Each node can
	// belong to at most one pool; overlapping selectors cause the
	// conflicting pools to be marked Degraded with reason NodeConflict.
	// +required
	NodeSelector *metav1.LabelSelector `json:"nodeSelector"`

	// image defines the desired OS image for nodes in this pool.
	// +required
	Image ImageSpec `json:"image"`

	// rollout controls how updates are rolled out across pool nodes.
	// +optional
	Rollout *RolloutSpec `json:"rollout,omitempty"`

	// disruption controls the disruption behavior during updates.
	// +optional
	Disruption *DisruptionSpec `json:"disruption,omitempty"`

	// pullSecretRef references a Secret containing image pull credentials
	// for the OS image. The operator propagates this secret to managed nodes.
	// +optional
	PullSecretRef *PullSecretRef `json:"pullSecretRef,omitempty"`
}

type BootcNodePoolStatus struct {
	// observedGeneration is the most recent generation observed by the
	// controller. It corresponds to the pool's metadata.generation which
	// is updated on spec mutations.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

	// targetDigest is the image digest the pool is rolling out to. For
	// digest refs, this is set directly from spec.image.ref. For tag refs,
	// this is the resolved digest from the registry.
	// +optional
	TargetDigest string `json:"targetDigest,omitempty"`

	// nextTagResolutionTime is when the controller will next resolve a
	// tag ref to a digest. Only set for tag-based image refs.
	// +optional
	NextTagResolutionTime *metav1.Time `json:"nextTagResolutionTime,omitempty"`

	// deployedDigest is the last digest fully rolled out to all nodes in
	// the pool.
	// +optional
	DeployedDigest string `json:"deployedDigest,omitempty"`

	// updateAvailable is true when targetDigest differs from deployedDigest.
	// +optional
	UpdateAvailable bool `json:"updateAvailable,omitempty"`

	// nodeCount is the total number of nodes in this pool.
	// +optional
	NodeCount int32 `json:"nodeCount,omitempty"`

	// updatedCount is the number of nodes running the target digest.
	// +optional
	UpdatedCount int32 `json:"updatedCount,omitempty"`

	// updatingCount is the number of nodes actively being updated
	// (staging, staged, or rebooting).
	// +optional
	UpdatingCount int32 `json:"updatingCount,omitempty"`

	// degradedCount is the number of nodes in a degraded state.
	// +optional
	DegradedCount int32 `json:"degradedCount,omitempty"`

	// conditions represent the current state of the pool.
	// Known condition types are "UpToDate" and "Degraded".
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type BootcNodeSpec struct {
	// desiredImage is the image the node should be running, specified
	// as a pullspec with digest (e.g.
	// "quay.io/example/myos@sha256:abc123"). Set by the controller
	// from the owning pool's targetDigest.
	// +required
	// +kubebuilder:validation:MinLength=1
	DesiredImage string `json:"desiredImage"`

	// desiredImageState is the target state the daemon should drive
	// the node toward. "Staged" means stage the image but do not
	// reboot. "Booted" means apply the staged image and reboot.
	// +required
	DesiredImageState DesiredImageState `json:"desiredImageState"`

	// pullSecretRef references a Secret containing image pull
	// credentials. Copied from the owning pool's spec.
	// +optional
	PullSecretRef *PullSecretRef `json:"pullSecretRef,omitempty"`

	// pullSecretHash is a hash of the pull secret's content, used to
	// detect changes. When this value changes, the daemon re-fetches
	// the secret and updates the host filesystem.
	// +optional
	PullSecretHash string `json:"pullSecretHash,omitempty"`
}

type BootcNodeStatus struct {
	// observedGeneration is the most recent generation observed by the
	// daemon. It corresponds to the BootcNode's metadata.generation
	// which is updated on spec mutations.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

	// booted describes the currently booted OS image.
	// +optional
	Booted *ImageInfo `json:"booted,omitempty"`

	// staged describes the OS image staged for the next boot, if any.
	// +optional
	Staged *ImageInfo `json:"staged,omitempty"`

	// rollback describes the previous OS image available for rollback,
	// if any.
	// +optional
	Rollback *ImageInfo `json:"rollback,omitempty"`

	// conditions represent the daemon's current state.
	// Known condition types are "Idle" and "Degraded".
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type DesiredImageState string

type DisruptionSpec struct {
	// rebootPolicy defines how nodes should be rebooted during updates.
	// "RebootOnly" always performs a full node reboot.
	// "AllowSoftReboot" performs a userspace-only restart when the
	// update supports it, falling back to a full reboot otherwise.
	// Defaults to "RebootOnly".
	// +optional
	// +kubebuilder:default=RebootOnly
	RebootPolicy RebootPolicy `json:"rebootPolicy,omitempty"`
}

type ImageInfo struct {
	// image is the full image pullspec (e.g.
	// "quay.io/example/myos@sha256:abc123").
	// +required
	Image string `json:"image"`

	// imageDigest is the image digest (e.g. "sha256:abc123").
	// +required
	ImageDigest string `json:"imageDigest"`

	// version is the image version string, if any.
	// +optional
	Version string `json:"version,omitempty"`

	// timestamp is the image build timestamp, if any.
	// +optional
	Timestamp *metav1.Time `json:"timestamp,omitempty"`

	// architecture is the hardware architecture of the image
	// (e.g. "amd64").
	// +optional
	Architecture string `json:"architecture,omitempty"`

	// softRebootCapable is true if this boot entry supports a
	// userspace-only restart relative to the currently booted system.
	// +optional
	SoftRebootCapable bool `json:"softRebootCapable,omitempty"`

	// incompatible is true if the boot entry has local mutations that
	// bootc cannot manage (e.g. package layering via rpm-ostree).
	// +optional
	Incompatible bool `json:"incompatible,omitempty"`
}

type ImageSpec struct {
	// ref is the image reference, either a tag (e.g. "quay.io/example/myos:latest")
	// or a digest (e.g. "quay.io/example/myos@sha256:abc123").
	// +required
	// +kubebuilder:validation:MinLength=1
	Ref string `json:"ref"`
}

type PullSecretRef struct {
	// name is the name of the Secret.
	// +required
	// +kubebuilder:validation:MinLength=1
	Name string `json:"name"`

	// namespace is the namespace of the Secret.
	// +required
	// +kubebuilder:validation:MinLength=1
	Namespace string `json:"namespace"`
}

type RebootPolicy string

type RolloutSpec struct {
	// maxUnavailable is the maximum number of nodes that can be unavailable
	// during a rolling update. Value can be an absolute number (e.g. 1) or
	// a percentage of total nodes in the pool (e.g. "25%"). Defaults to 1.
	// +optional
	MaxUnavailable *intstr.IntOrString `json:"maxUnavailable,omitempty"`

	// paused prevents the operator from starting new rollouts. Nodes that
	// are already mid-staging will complete their staging. Tag resolution
	// continues and status.targetDigest is kept current.
	// +optional
	Paused bool `json:"paused,omitempty"`

	// drainTimeoutSeconds is the maximum time in seconds to wait for a
	// node drain to complete before marking the node degraded and freeing
	// the reboot slot. If not set, drains block indefinitely.
	// +optional
	// +kubebuilder:validation:Minimum=0
	DrainTimeoutSeconds *int32 `json:"drainTimeoutSeconds,omitempty"`
}