v1alpha1

type Cache struct {
	PersistentVolumeClaimTemplate corev1.PersistentVolumeClaimSpec `json:"pvcTemplate"`
}

type Data struct {
	// Template to be used to generate the Persistent Volume Claim needed for the data folder,
	// containing base backups and WAL files.
	PersistentVolumeClaimTemplate corev1.PersistentVolumeClaimSpec `json:"pvcTemplate"`
}

type EmbeddedObjectMeta struct {
	// +optional
	Labels map[string]string `json:"labels,omitempty"`

	// +optional
	Annotations map[string]string `json:"annotations,omitempty"`
}

type FileReference struct {
	// Volume is the volume source to mount.
	Volume corev1.VolumeSource `json:"volume"`

	// Path is the file path within the mounted volume.
	Path string `json:"path"`
}

type FileSource struct {
	// FileReference specifies a file from a volume source.
	// +optional
	FileReference *FileReference `json:"fileReference,omitempty"`
}

type ImageConfiguration struct {
	// Image is the image to be used for the Klio server
	Image string `json:"image"`

	// ImagePullPolicy defines the policy for pulling the image
	// +optional
	// +kubebuilder:default=IfNotPresent
	ImagePullPolicy corev1.PullPolicy `json:"imagePullPolicy,omitempty"`

	// ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the
	// images
	// +optional
	ImagePullSecrets []corev1.LocalObjectReference `json:"imagePullSecrets,omitempty"`
}

type PluginConfiguration struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata"`

	Spec PluginConfigurationSpec `json:"spec"`
	// +optional
	Status PluginConfigurationStatus `json:"status,omitzero"`
}

type PluginConfigurationList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitzero"`

	Items []PluginConfiguration `json:"items"`
}

type PluginConfigurationSpec struct {
	// ServerAddress is the address of the Klio server
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	ServerAddress string `json:"serverAddress"`

	// Tier1 is the Tier 1 configuration
	// +optional
	Tier1 *Tier1PluginConfiguration `json:"tier1,omitempty"`

	// Tier2 is the Tier 2 configuration
	// +optional
	Tier2 *Tier2PluginConfiguration `json:"tier2,omitempty"`

	// WALPrefetch configures WAL prefetching behavior during recovery operations.
	// +optional
	WALPrefetch *WALPrefetchConfiguration `json:"walPrefetch,omitempty"`

	// ClientSecretName is the name of the secret containing the client credentials
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	ClientSecretName string `json:"clientSecretName"`

	// ServerSecretName is the name of the secret containing the server TLS certificate
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	ServerSecretName string `json:"serverSecretName"`

	// ClusterName is the name of the PostgreSQL cluster we are connecting to
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	ClusterName string `json:"clusterName"`

	// Pprof enables the pprof endpoint for performance profiling
	// +optional
	Pprof bool `json:"pprof,omitempty"`

	// Mode selects the operation mode of the plugin.
	// +kubebuilder:validation:Enum=standard;read-only
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="mode is immutable"
	// +kubebuilder:default=standard
	Mode ServerMode `json:"mode"`

	// Containers allows defining a list of containers that will be merged with the Klio sidecar containers.
	// This enables users to customize the sidecars with additional environment variables, volume mounts,
	// resource limits, and other container settings without polluting the PostgreSQL container environment.
	//
	// Merge behavior:
	// - Containers are matched by name (klio-plugin, klio-restore)
	// - User customizations serve as the base
	// - Klio required values (name, args, CONTAINER_NAME env var) always override user values
	// - User-defined environment variables and volume mounts are preserved
	// - Template defaults are applied only for fields not set by the user or Klio
	//
	// +optional
	// +kubebuilder:validation:MaxItems=2
	// +listType=map
	// +listMapKey=name
	// +kubebuilder:validation:XValidation:rule="self.all(c, c.name in ['klio-plugin', 'klio-restore'])",message="container name must be one of: klio-plugin, klio-restore"
	Containers []corev1.Container `json:"containers,omitempty"`
}

type PluginConfigurationStatus struct {
	// Conditions represent the latest available observations of the
	// PluginConfiguration's state.
	// +optional
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type PodTemplateSpec struct {
	// +optional
	Metadata EmbeddedObjectMeta `json:"metadata,omitempty"`

	// +optional
	Spec corev1.PodSpec `json:"spec,omitempty"`
}

type Queue struct {
	// PersistentVolumeClaimTemplate is used to generate the configuration for
	// the PVC hosting the work queue.
	PersistentVolumeClaimTemplate corev1.PersistentVolumeClaimSpec `json:"pvcTemplate"`
}

type RetentionPolicy struct {
	// KeepLatest is the number of latest backups to keep
	// optional
	KeepLatest *int `json:"keepLatest,omitempty" mapstructure:"keepLatest"`

	// KeepAnnual is the number of annual backups to keep
	// optional
	KeepAnnual *int `json:"keepAnnual,omitempty" mapstructure:"keepAnnual"`

	// KeepMonthly is the number of monthly backups to keep
	// optional
	KeepMonthly *int `json:"keepMonthly,omitempty" mapstructure:"keepMonthly"`

	// KeepWeekly is the number of weekly backups to keep
	// optional
	KeepWeekly *int `json:"keepWeekly,omitempty" mapstructure:"keepWeekly"`

	// KeepDaily is the number of daily backups to keep
	// optional
	KeepDaily *int `json:"keepDaily,omitempty" mapstructure:"keepDaily"`

	// KeepHourly is the number of hourly backups to keep
	// optional
	KeepHourly *int `json:"keepHourly,omitempty" mapstructure:"keepHourly"`
}

type S3Configuration struct {
	// BucketName is the name of the bucket
	BucketName string `json:"bucketName"`

	// Prefix is the path within the bucket under which all Klio objects
	// are stored, allowing a single bucket to be shared across multiple deployments.
	// +optional
	Prefix string `json:"prefix,omitempty"`

	// Endpoint is the endpoint to be used
	// +optional
	Endpoint string `json:"endpoint,omitempty"`

	// Region is the region to be used
	// +optional
	Region string `json:"region,omitempty"`

	// The S3 access key ID
	// +optional
	AccessKeyID *machineryapi.SecretKeySelector `json:"accessKeyId,omitempty"`

	// The S3 access key
	// +optional
	SecretAccessKey *machineryapi.SecretKeySelector `json:"secretAccessKey,omitempty"`

	// The S3 session token
	// +optional
	SessionToken *machineryapi.SecretKeySelector `json:"sessionToken,omitempty"`

	// A pointer to a custom CA bundle
	// +optional
	CustomCABundle *machineryapi.SecretKeySelector `json:"customCaBundle,omitempty"`
}

type Server struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata"`

	Spec ServerSpec `json:"spec"`
	// +optional
	Status ServerStatus `json:"status,omitzero"`
}

type ServerList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitzero"`

	Items []Server `json:"items"`
}

type ServerMode string

type ServerSpec struct {
	// ImageConfiguration tells how to download the Klio
	// image.
	ImageConfiguration `json:",inline"`

	// TLSConfiguration is used for the server-side
	// certificate.
	TLSConfiguration `json:",inline"`

	// Mode selects the operation mode of the server.
	// +kubebuilder:validation:Enum=standard;read-only
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="mode is immutable"
	// +kubebuilder:default=standard
	Mode ServerMode `json:"mode"`

	// Tier1 is the Tier 1 configuration
	Tier1 *Tier1Configuration `json:"tier1,omitempty"`

	// Tier2 is the Tier 2 configuration
	Tier2 *Tier2Configuration `json:"tier2,omitempty"`

	// Queue is the configuration of the PVC that should host
	// the task queue.
	// +optional
	Queue *Queue `json:"queue,omitempty"`

	// Template to override the default StatefulSet of the Klio server.
	// WARNING: Modifying this template may break the server functionality if not done carefully.
	// This field is primarily intended for advanced configuration such as telemetry setup.
	// Use at your own risk and ensure thorough testing before applying changes.
	// +optional
	Template *PodTemplateSpec `json:"template,omitempty"`
}

type ServerStatus struct {
}

type TLSConfiguration struct {
	// TLSSecretName is the name of the Kubernetes secret containing the server-side certificate
	// to be used for the Klio server.
	TLSSecretName string `json:"tlsSecretName"`

	// ClientCASecretName is the name of the Kubernetes secret containing the CA certificate
	// to be used by the Klio server to validate the users.
	ClientCASecretName string `json:"caSecretName"`
}

type Tier1Configuration struct {
	// Cache is the configuration of the PVC that should be
	// used for the cache.
	Cache Cache `json:"cache"`

	// Data is the configuration of the PVC that should be used
	// for the base backups.
	Data Data `json:"data"`

	// EncryptionKeyFile specifies the Age-encrypted encryption key file.
	EncryptionKeyFile FileSource `json:"encryptionKeyFile"`

	// IdentityFile specifies the Age identity (private key) file used to
	// decrypt the encryption key.
	IdentityFile FileSource `json:"identityFile"`
}

type Tier1PluginConfiguration struct {
	// RetentionPolicy defines how many backups we should keep
	// +optional
	RetentionPolicy *RetentionPolicy `json:"retention,omitempty" mapstructure:"retention"`
}

type Tier2Configuration struct {
	// Cache is the configuration of the PVC that should be
	// used for the cache.
	Cache Cache `json:"cache"`

	// S3 contains the configuration parameters for an S3-based tier 2.
	S3 *S3Configuration `json:"s3"`

	// EncryptionKeyFile specifies the Age-encrypted encryption key file.
	EncryptionKeyFile FileSource `json:"encryptionKeyFile"`

	// IdentityFile specifies the Age identity (private key) file used to
	// decrypt the encryption key.
	IdentityFile FileSource `json:"identityFile"`
}

type Tier2PluginConfiguration struct {
	// EnableBackup controls whether WAL and base backups should be stored in tier2
	// +optional
	EnableBackup bool `json:"enableBackup,omitempty"`

	// EnableRecovery controls whether tier2 should be included in the recovery source list
	// +optional
	EnableRecovery bool `json:"enableRecovery,omitempty"`

	// RetentionPolicy defines how many backups we should keep
	// +optional
	RetentionPolicy *RetentionPolicy `json:"retention,omitempty" mapstructure:"retention"`
}

type WALPrefetchConfiguration struct {
	// Count is the number of WAL files to prefetch ahead during recovery.
	// A value of 0 disables prefetching.
	// +kubebuilder:validation:Minimum=0
	// +kubebuilder:validation:Maximum=64
	// +kubebuilder:default=2
	Count int `json:"count"`

	// MaxConcurrentDownloads is the maximum number of concurrent WAL downloads.
	// +kubebuilder:validation:Minimum=1
	// +kubebuilder:validation:Maximum=64
	// +kubebuilder:default=4
	MaxConcurrentDownloads int `json:"maxConcurrentDownloads"`
}