v1alpha1

type ApplicationDestination struct {
	// Server specifies the URL of the target cluster and must be set to the Kubernetes control plane API
	// +crossplane:generate:reference:type=github.com/crossplane-contrib/provider-argocd/apis/cluster/v1alpha1.Cluster
	// +crossplane:generate:reference:refFieldName=ServerRef
	// +crossplane:generate:reference:selectorFieldName=ServerSelector
	// +optional
	Server *string `json:"server,omitempty"`
	// ServerRef is a reference to an Cluster used to set Server
	// +optional
	ServerRef *xpv1.Reference `json:"serverRef,omitempty"`
	// SourceReposSelector selects references to Repositories used to set SourceRepos
	// +optional
	ServerSelector *xpv1.Selector `json:"serverSelector,omitempty"`
	// Namespace specifies the target namespace for the application's resources.
	// The namespace will only be set for namespace-scoped resources that have not set a value for .metadata.namespace
	// +optional
	Namespace *string `json:"namespace,omitempty"`
	// Name is an alternate way of specifying the target cluster by its symbolic name
	// +optional
	Name *string `json:"name,omitempty"`
}

type JWTToken struct {
	IssuedAt int64 `json:"iat"`
	// +optional
	ExpiresAt *int64 `json:"exp,omitempty"`
	// +optional
	ID *string `json:"id,omitempty"`
}

type JWTTokens struct {
	// +optional
	Items []JWTToken `json:"items,omitempty"`
}

type OrphanedResourceKey struct {
	// +optional
	Group *string `json:"group,omitempty"`
	// +optional
	Kind *string `json:"kind,omitempty"`
	// +optional
	Name *string `json:"name,omitempty"`
}

type OrphanedResourcesMonitorSettings struct {
	// Warn indicates if warning condition should be created for apps which have orphaned resources
	// +optional
	Warn *bool `json:"warn,omitempty"`
	// Ignore contains a list of resources that are to be excluded from orphaned resources monitoring
	// +optional
	Ignore []OrphanedResourceKey `json:"ignore,omitempty"`
}

type Project struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ProjectSpec   `json:"spec"`
	Status ProjectStatus `json:"status,omitempty"`
}

type ProjectList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Project `json:"items"`
}

type ProjectObservation struct {
	// JWTTokensByRole contains a list of JWT tokens issued for a given role
	// +optional
	JWTTokensByRole map[string]JWTTokens `json:"jwtTokensByRole,omitempty"`
}

type ProjectParameters struct {
	// SourceRepos contains list of repository URLs which can be used for deployment
	// +crossplane:generate:reference:type=github.com/crossplane-contrib/provider-argocd/apis/repositories/v1alpha1.Repository
	// +crossplane:generate:reference:refFieldName=SourceReposRefs
	// +crossplane:generate:reference:selectorFieldName=SourceReposSelector
	// +optional
	SourceRepos []string `json:"sourceRepos,omitempty"`
	// SourceReposRefs is a reference to an array of Repository used to set SourceRepos
	// +optional
	SourceReposRefs []xpv1.Reference `json:"sourceReposRefs,omitempty"`
	// SourceReposSelector selects references to Repositories used to set SourceRepos
	// +optional
	SourceReposSelector *xpv1.Selector `json:"sourceReposSelector,omitempty"`
	// Destinations contains list of destinations available for deployment
	// +optional
	Destinations []ApplicationDestination `json:"destinations,omitempty"`
	// SourceNamespaces contains list of namespaces which are authorized in the project
	// +optional
	SourceNamespaces []string `json:"sourceNamespaces,omitempty"`
	// Description contains optional project description
	// +optional
	Description *string `json:"description,omitempty"`
	// Roles are user defined RBAC roles associated with this project
	// +optional
	Roles []ProjectRole `json:"roles,omitempty"`
	// ClusterResourceWhitelist contains list of whitelisted cluster level resources
	// +optional
	ClusterResourceWhitelist []metav1.GroupKind `json:"clusterResourceWhitelist,omitempty"`
	// NamespaceResourceBlacklist contains list of blacklisted namespace level resources
	// +optional
	NamespaceResourceBlacklist []metav1.GroupKind `json:"namespaceResourceBlacklist,omitempty"`
	// OrphanedResources specifies if controller should monitor orphaned resources of apps in this project
	// +optional
	OrphanedResources *OrphanedResourcesMonitorSettings `json:"orphanedResources,omitempty"`
	// SyncWindows controls when syncs can be run for apps in this project
	// +optional
	SyncWindows SyncWindows `json:"syncWindows,omitempty"`
	// NamespaceResourceWhitelist contains list of whitelisted namespace level resources
	// +optional
	NamespaceResourceWhitelist []metav1.GroupKind `json:"namespaceResourceWhitelist,omitempty"`
	// SignatureKeys contains a list of PGP key IDs that commits in Git must be signed with in order to be allowed for sync
	// +optional
	SignatureKeys []SignatureKey `json:"signatureKeys,omitempty"`
	// ClusterResourceBlacklist contains list of blacklisted cluster level resources
	// +optional
	ClusterResourceBlacklist []metav1.GroupKind `json:"clusterResourceBlacklist,omitempty"`
	// ProjectLabels labels that will be applied to the AppProject
	// +optional
	ProjectLabels map[string]string `json:"projectLabels,omitempty"`
}

type ProjectRole struct {
	// Name is a name for this role
	Name string `json:"name"`
	// Description is a description of the role
	// +optional
	Description *string `json:"description,omitempty"`
	// Policies Stores a list of casbin formated strings that define access policies for the role in the project
	// +optional
	Policies []string `json:"policies,omitempty"`
	// JWTTokens are a list of generated JWT tokens bound to this role
	// +optional
	JWTTokens []JWTToken `json:"jwtTokens,omitempty"`
	// Groups are a list of OIDC group claims bound to this role
	// +optional
	Groups []string `json:"groups,omitempty"`
}

type ProjectSpec struct {
	xpv1.ResourceSpec `json:",inline"`
	ForProvider       ProjectParameters `json:"forProvider"`
}

type ProjectStatus struct {
	xpv1.ResourceStatus `json:",inline"`
	AtProvider          ProjectObservation `json:"atProvider,omitempty"`
}

type SignatureKey struct {
	// The ID of the key in hexadecimal notation
	KeyID string `json:"keyID"`
}

type SyncWindow struct {
	// Kind defines if the window allows or blocks syncs
	// +optional
	Kind *string `json:"kind,omitempty"`
	// Schedule is the time the window will begin, specified in cron format
	// +optional
	Schedule *string `json:"schedule,omitempty"`
	// Duration is the amount of time the sync window will be open
	// +optional
	Duration *string `json:"duration,omitempty"`
	// Applications contains a list of applications that the window will apply to
	// +optional
	Applications []string `json:"applications,omitempty"`
	// Namespaces contains a list of namespaces that the window will apply to
	// +optional
	Namespaces []string `json:"namespaces,omitempty"`
	// Clusters contains a list of clusters that the window will apply to
	// +optional
	Clusters []string `json:"clusters,omitempty"`
	// ManualSync enables manual syncs when they would otherwise be blocked
	// +optional
	ManualSync *bool `json:"manualSync,omitempty"`
}

type SyncWindows []SyncWindow

type Token struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   TokenSpec   `json:"spec"`
	Status TokenStatus `json:"status,omitempty"`
}

type TokenList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Token `json:"items"`
}

type TokenObservation struct {
	IssuedAt int64 `json:"iat"`
	// +optional
	ExpiresAt *int64 `json:"exp,omitempty"`
	// +optional
	ID *string `json:"id,omitempty"`
}

type TokenParameters struct {
	// Project is the project associated with the token
	// +crossplane:generate:reference:type=github.com/crossplane-contrib/provider-argocd/apis/projects/v1alpha1.Project
	// +crossplane:generate:reference:refFieldName=ProjectRef
	// +crossplane:generate:reference:selectorFieldName=ProjectSelector
	Project *string `json:"project"`

	// ProjectRefs is a reference to a Project used to set Project
	// +optional
	ProjectRef *xpv1.Reference `json:"projectRef,omitempty"`

	// ProjectSelector selects reference to a Project used to ProjectRef
	// +optional
	ProjectSelector *xpv1.Selector `json:"projectSelector,omitempty"`

	// Role is the role associated with the token.
	Role string `json:"role"`

	// ID is an id for the token
	// +optional
	ID string `json:"id"`

	// Description is a description for the token
	// +optional
	Description *string `json:"description,omitempty"`

	// Duration before the token will expire. Valid time units are `s`, `m`, `h` and `d` E.g. 12h, 7d. No expiration if not set.
	// +optional
	// +kubebuilder:validation:Pattern=`^(0|[0-9]+(s|m|h|d))$`
	ExpiresIn *string `json:"expiresIn,omitempty"`

	// Duration to control token regeneration based on token age. Valid time units are `s`, `m`, `h` and `d`.
	// +optional
	// +kubebuilder:validation:Pattern=`^([0-9]+)(s|m|h|d)$`
	RenewAfter *string `json:"renewAfter,omitempty"`

	// Duration to control token regeneration based on remaining token lifetime. Valid time units are `s`, `m`, `h` and `d`.
	// +optional
	// +kubebuilder:validation:Pattern=`^([0-9]+)(s|m|h|d)$`
	RenewBefore *string `json:"renewBefore,omitempty"`
}

type TokenSpec struct {
	xpv1.ResourceSpec `json:",inline"`
	ForProvider       TokenParameters `json:"forProvider"`
}

type TokenStatus struct {
	xpv1.ResourceStatus `json:",inline"`
	AtProvider          TokenObservation `json:"atProvider,omitempty"`
}