common

type KeyInjection struct {
	// SecretKey is the key within the Kubernetes secret where the data will be injected.
	SecretKey string `json:"secretKey"`

	// ResponseJQ is a jq filter expression representing the path in the response where the secret value will be extracted from.
	ResponseJQ string `json:"responseJQ"`

	// MissingFieldStrategy determines how to handle cases where the field is missing from the response.
	// Possible values are:
	// - "preserve": keeps the existing value in the secret
	// - "setEmpty": sets the value to the empty string
	// - "delete": removes the key from the s
	// +kubebuilder:validation:Enum=preserve;setEmpty;delete
	// +kubebuilder:default=delete
	MissingFieldStrategy MissingFieldStrategy `json:"missingFieldStrategy,omitempty"`
}

type Metadata struct {
	// Labels contains key-value pairs to apply as labels to the Kubernetes secret.
	Labels map[string]string `json:"labels,omitempty"`

	// Annotations contains key-value pairs to apply as annotations to the Kubernetes secret.
	Annotations map[string]string `json:"annotations,omitempty"`
}

type MissingFieldStrategy string

type SecretInjectionConfig struct {
	// SecretRef contains the name and namespace of the Kubernetes secret where the data will be injected.
	SecretRef SecretRef `json:"secretRef"`

	// SecretKey is the key within the Kubernetes secret where the data will be injected.
	// Deprecated: Use KeyMappings for injecting single or multiple keys.
	SecretKey string `json:"secretKey,omitempty"`

	// ResponsePath is a jq filter expression representing the path in the response where the secret value will be extracted from.
	// Deprecated: Use KeyMappings for injecting single or multiple keys.
	ResponsePath string `json:"responsePath,omitempty"`

	// KeyMappings allows injecting data into single or multiple keys within the same Kubernetes secret.
	KeyMappings []KeyInjection `json:"keyMappings,omitempty"`

	// Metadata contains labels and annotations to apply to the Kubernetes secret.
	Metadata Metadata `json:"metadata,omitempty"`

	// SetOwnerReference determines whether to set the owner reference on the Kubernetes secret.
	SetOwnerReference bool `json:"setOwnerReference,omitempty"`
}

type SecretRef struct {
	// Name is the name of the Kubernetes secret.
	Name string `json:"name"`

	// Namespace is the namespace of the Kubernetes secret.
	Namespace string `json:"namespace"`
}

type TLSConfig struct {
	// CABundle is a PEM encoded CA bundle which will be used to validate the server certificate.
	// If empty, system root CAs will be used.
	// +optional
	CABundle []byte `json:"caBundle,omitempty"`

	// CACertSecretRef is a reference to a secret containing the CA certificate(s).
	// The secret must contain a key specified in the SecretKeySelector.
	// +optional
	CACertSecretRef *xpv1.SecretKeySelector `json:"caCertSecretRef,omitempty"`

	// ClientCertSecretRef is a reference to a secret containing the client certificate.
	// The secret must contain a key specified in the SecretKeySelector.
	// +optional
	ClientCertSecretRef *xpv1.SecretKeySelector `json:"clientCertSecretRef,omitempty"`

	// ClientKeySecretRef is a reference to a secret containing the client private key.
	// The secret must contain a key specified in the SecretKeySelector.
	// +optional
	ClientKeySecretRef *xpv1.SecretKeySelector `json:"clientKeySecretRef,omitempty"`

	// InsecureSkipVerify controls whether the client verifies the server's certificate chain and host name.
	// If true, any certificate presented by the server and any host name in that certificate is accepted.
	// +optional
	InsecureSkipVerify bool `json:"insecureSkipVerify,omitempty"`
}