mcp

type CertRow struct {
	Name           string `json:"name"`
	NotAfter       string `json:"notAfter" jsonschema:"RFC 3339 expiry"`
	DaysLeft       int    `json:"daysLeft"`
	IsCA           bool   `json:"isCA"`
	Expiring       bool   `json:"expiring" jsonschema:"within the warning window"`
	Rotatable      bool   `` /* 135-byte string literal not displayed */
	Kubelet        bool   `json:"kubeletClient" jsonschema:"a worker's kubelet client cert, which the kubelet renews itself and certs_rotate cannot"`
	RenewalOverdue bool   `json:"renewalOverdue" jsonschema:"the kubelet client cert is past its latest expected automatic renewal point"`
}

type CertsCheckIn struct {
	WarnDays int `json:"warn_days,omitempty" jsonschema:"how many days ahead counts as expiring; defaults to 45"`
}

type CertsCheckOut struct {
	Items    []CertRow `json:"items"`
	Expiring int       `json:"expiring" jsonschema:"how many are inside the warning window"`
	Expired  int       `json:"expired"`
	Note     string    `json:"note,omitempty"`
}

type CertsMigrateEtcdCAIn struct {
	Phase   string `` /* 212-byte string literal not displayed */
	Cluster bool   `` /* 128-byte string literal not displayed */
	Resume  bool   `json:"resume,omitempty" jsonschema:"proceed on a cluster whose nodes are at different phases"`
	Force   bool   `json:"force,omitempty" jsonschema:"rollback only: un-migrate a node that already completed drop-root"`
}

type CertsMigrateKubeletClientCAIn struct {
	Cluster  bool   `json:"cluster,omitempty" jsonschema:"run every phase on every node, control planes first (recommended)"`
	Rollback bool   `json:"rollback,omitempty" jsonschema:"with cluster: move every kubelet back to trusting the cluster root"`
	Phase    string `` /* 158-byte string literal not displayed */
	Force    bool   `json:"force,omitempty" jsonschema:"rollback only: re-add the cluster root to kubelets that completed drop-root"`
}

type CertsRotateCAIn struct {
	Phase   string `` /* 188-byte string literal not displayed */
	Cluster bool   `json:"cluster,omitempty" jsonschema:"run every phase across every node, as the CLI's --cluster does; leave phase empty"`
	Force   bool   `` /* 337-byte string literal not displayed */

	RestartWorkloads  bool `` /* 263-byte string literal not displayed */
	SkipWorkloadCheck bool `` /* 170-byte string literal not displayed */
	SkipTokenCheck    bool `` /* 228-byte string literal not displayed */
}

type CertsRotateIn struct {
	IfExpiringDays int `` /* 132-byte string literal not displayed */
}

type ClusterStatusIn struct{}

type ClusterStatusOut struct {
	Supervisor      string    `json:"supervisor" jsonschema:"running or unreachable"`
	Socket          string    `json:"socket"`
	Procs           []ProcRow `json:"procs"`
	Healthy         bool      `json:"healthy" jsonschema:"true when every wanted process is running"`
	SupervisorStale bool      `` /* 198-byte string literal not displayed */
	Note            string    `json:"note,omitempty"`
}

type ConditionRow struct {
	Type    string `json:"type"`
	Status  string `json:"status"`
	Reason  string `json:"reason,omitempty"`
	Message string `json:"message,omitempty"`
}

type ContainerRow struct {
	Name     string `json:"name"`
	Image    string `json:"image"`
	Ready    bool   `json:"ready"`
	Restarts int32  `json:"restarts"`
	State    string `json:"state" jsonschema:"running, waiting or terminated"`
	Reason   string `json:"reason,omitempty"`
	Message  string `json:"message,omitempty"`
}

type ContextListIn struct{}

type ContextListOut struct {
	Items  []kube.ContextInfo `json:"items"`
	Source string             `json:"source" jsonschema:"where the configuration came from: explicit, KUBECONFIG, home, fallback or in-cluster"`
	Note   string             `json:"note,omitempty"`
}

type CredentialSource string

type DestructiveOut = destructiveOut

type EventListIn struct {
	ListOptions
	WarningsOnly bool `json:"warnings_only,omitempty" jsonschema:"return only Warning events, which is usually what a diagnosis wants"`
}

type EventListOut struct {
	ListMeta
	Items []EventRow `json:"items"`
}

type EventRow struct {
	Namespace string `json:"namespace,omitempty"`
	Type      string `json:"type" jsonschema:"Normal or Warning"`
	Reason    string `json:"reason"`
	Object    string `json:"object" jsonschema:"the involved object, as Kind/name"`
	Message   string `json:"message"`
	Count     int32  `json:"count"`
	Last      string `json:"last,omitempty" jsonschema:"when it last occurred"`
}

type HARepointIn struct {
	VIP    string `json:"vip" jsonschema:"the cluster VIP address this node's clients should use"`
	Cilium bool   `` /* 154-byte string literal not displayed */
}

type ListMeta struct {
	Count     int    `json:"count" jsonschema:"how many items this response contains"`
	Limit     int    `json:"limit" jsonschema:"the maximum this call would have returned"`
	Truncated bool   `json:"truncated" jsonschema:"true when the cluster holds more items than were returned; the result is a partial view"`
	Continue  string `json:"continue,omitempty" jsonschema:"opaque token: pass it back as continue_token to fetch the next page"`
	Note      string `json:"note,omitempty" jsonschema:"what to do about a truncated result"`
}

type ListOptions struct {
	Context       string `json:"context,omitempty" jsonschema:"kubeconfig context to address; omit for the current one"`
	Namespace     string `json:"namespace,omitempty" jsonschema:"namespace to search; omit with all_namespaces for every namespace"`
	AllNamespaces bool   `json:"all_namespaces,omitempty" jsonschema:"search every namespace instead of one"`
	LabelSelector string `json:"label_selector,omitempty" jsonschema:"label selector, e.g. app=nginx,tier!=backend"`
	FieldSelector string `json:"field_selector,omitempty" jsonschema:"field selector, e.g. status.phase=Running"`
	Limit         int    `json:"limit,omitempty" jsonschema:"maximum items to return; defaults to 100, capped at 500"`
	ContinueToken string `json:"continue_token,omitempty" jsonschema:"token from a previous truncated response"`
}

type MirrorRow struct {
	Registry  string   `json:"registry" jsonschema:"the registry being mirrored, e.g. docker.io"`
	Endpoints []string `json:"endpoints"`
	Rewrites  int      `json:"rewrites,omitempty" jsonschema:"how many path-rewrite rules this mirror carries"`
}

type NamespaceListIn struct {
	Context       string `json:"context,omitempty" jsonschema:"kubeconfig context to address; omit for the current one"`
	LabelSelector string `json:"label_selector,omitempty" jsonschema:"label selector"`
	Limit         int    `json:"limit,omitempty" jsonschema:"maximum items to return; defaults to 100, capped at 500"`
	ContinueToken string `json:"continue_token,omitempty" jsonschema:"token from a previous truncated response"`
}

type NamespaceListOut struct {
	ListMeta
	Items []NamespaceRow `json:"items"`
}

type NamespaceRow struct {
	Name   string `json:"name"`
	Status string `json:"status" jsonschema:"Active or Terminating"`
	Age    string `json:"age,omitempty"`
}

type NodeListIn struct {
	Context       string `json:"context,omitempty" jsonschema:"kubeconfig context to address; omit for the current one"`
	LabelSelector string `json:"label_selector,omitempty" jsonschema:"label selector"`
	Limit         int    `json:"limit,omitempty" jsonschema:"maximum items to return; defaults to 100, capped at 500"`
	ContinueToken string `json:"continue_token,omitempty" jsonschema:"token from a previous truncated response"`
}

type NodeListOut struct {
	ListMeta
	Items []NodeRow `json:"items"`
}

type NodeRow struct {
	Name             string   `json:"name"`
	Ready            string   `json:"ready" jsonschema:"True, False or Unknown, from the Ready condition"`
	Roles            []string `json:"roles,omitempty"`
	Schedulable      bool     `json:"schedulable"`
	KubeletVersion   string   `json:"kubeletVersion,omitempty"`
	OSImage          string   `json:"osImage,omitempty"`
	ContainerRuntime string   `json:"containerRuntime,omitempty"`
	InternalIP       string   `json:"internalIP,omitempty"`
	Age              string   `json:"age,omitempty"`
}

type ObjectRef struct {
	Context   string `json:"context,omitempty" jsonschema:"kubeconfig context to address; omit for the current one"`
	Name      string `json:"name" jsonschema:"the object's name"`
	Namespace string `json:"namespace,omitempty" jsonschema:"the object's namespace; omit for cluster-scoped objects"`
}

type ObjectSummary struct {
	Name       string            `json:"name"`
	Namespace  string            `json:"namespace,omitempty"`
	Kind       string            `json:"kind,omitempty"`
	APIVersion string            `json:"apiVersion,omitempty"`
	Created    string            `json:"created,omitempty" jsonschema:"RFC 3339 creation timestamp"`
	Age        string            `json:"age,omitempty" jsonschema:"human-readable age, e.g. 4d2h"`
	Labels     map[string]string `json:"labels,omitempty"`
}

type Options struct {
	Version string

	AllowWrite       bool
	AllowDestructive bool

	Transport      string
	Addr           string
	InsecureListen bool
	// TokenFile holds the bearer token every HTTP request must carry.
	TokenFile string

	// Logger receives diagnostics. Nil means a stderr logger.
	Logger *slog.Logger
}

type PodGetIn struct {
	ObjectRef
}

type PodGetOut struct {
	Summary    PodSummary     `json:"summary" jsonschema:"the same columns pod_list reports"`
	Containers []ContainerRow `json:"containers"`
	Conditions []ConditionRow `json:"conditions"`
	Object     map[string]any `json:"object,omitempty" jsonschema:"omitted; call resource_get with resource=pods for the raw object"`
}

type PodListIn struct {
	ListOptions
}

type PodListOut struct {
	ListMeta
	Items []PodSummary `json:"items"`
}

type PodLogsIn struct {
	ObjectRef
	Container    string `json:"container,omitempty" jsonschema:"container to read; required only when the pod has more than one"`
	TailLines    int64  `json:"tail_lines,omitempty" jsonschema:"lines from the end of the log; defaults to 200"`
	Previous     bool   `json:"previous,omitempty" jsonschema:"read the previous terminated container instead of the running one"`
	SinceSeconds int64  `json:"since_seconds,omitempty" jsonschema:"only lines newer than this many seconds"`
}

type PodLogsOut struct {
	Container string `json:"container" jsonschema:"the container actually read"`
	Logs      string `json:"logs"`
	Lines     int    `json:"lines"`
	Truncated bool   `json:"truncated" jsonschema:"true when the log was longer than the byte cap and the START was dropped"`
	Note      string `json:"note,omitempty"`
}

type PodSummary struct {
	Name      string `json:"name"`
	Namespace string `json:"namespace"`
	Phase     string `json:"phase" jsonschema:"Pending, Running, Succeeded, Failed or Unknown"`
	Ready     string `json:"ready" jsonschema:"ready containers over total, e.g. 1/2"`
	Restarts  int32  `json:"restarts"`
	Node      string `json:"node,omitempty"`
	PodIP     string `json:"podIP,omitempty"`
	Age       string `json:"age,omitempty"`
	Reason    string `json:"reason,omitempty" jsonschema:"why a pod is not running, when the API server says"`
}

type ProcRow struct {
	Name    string `json:"name"`
	PID     int    `json:"pid,omitempty" jsonschema:"process id, absent when not running"`
	Running bool   `json:"running"`
	Wanted  bool   `json:"wanted" jsonschema:"whether the supervisor intends this process to be running"`
	Foreign bool   `` /* 129-byte string literal not displayed */
}

type RegistryApplyIn struct{}

type RegistryApplyOut struct {
	Configured bool     `json:"configured" jsonschema:"registries.yaml has mirrors or registry credentials/TLS, and they were applied"`
	Changed    bool     `json:"changed" jsonschema:"the containerd drop-in changed, so containerd must be restarted to pick it up"`
	Restarted  bool     `` /* 134-byte string literal not displayed */
	Registries []string `json:"registries,omitempty"`
	Warnings   []string `json:"warnings,omitempty"`
	Note       string   `json:"note"`
}

type RegistryAuthRow struct {
	Registry      string `json:"registry"`
	HasAuth       bool   `json:"hasAuth" jsonschema:"credentials are configured; the values are never returned"`
	InsecureHTTPS bool   `json:"insecureSkipVerify,omitempty" jsonschema:"TLS verification is disabled for this registry"`
	HasCA         bool   `json:"hasCA,omitempty" jsonschema:"a custom CA file is configured"`
}

type RegistryCheckIn struct{}

type RegistryCheckOut struct {
	Path       string            `json:"path"`
	Configured bool              `json:"configured" jsonschema:"false when registries.yaml is absent or configures nothing, which is the common case"`
	Mirrors    []MirrorRow       `json:"mirrors,omitempty"`
	Configs    []RegistryAuthRow `json:"configs,omitempty"`
	Note       string            `json:"note,omitempty"`
}

type ResourceApplyIn struct {
	Context string `json:"context,omitempty" jsonschema:"kubeconfig context to address; omit for the current one"`

	// Manifest is a Kubernetes object.
	Manifest map[string]any `json:"manifest" jsonschema:"the complete object to apply, including apiVersion, kind and metadata.name"`

	Namespace string `json:"namespace,omitempty" jsonschema:"namespace to apply into; defaults to the manifest's own, then default"`
	DryRun    bool   `` /* 216-byte string literal not displayed */
	Force     bool   `` /* 136-byte string literal not displayed */
}

type ResourceApplyOut struct {
	Resource   string `json:"resource"`
	Name       string `json:"name"`
	Namespace  string `json:"namespace,omitempty"`
	DryRun     bool   `json:"dry_run"`
	Generation int64  `json:"generation,omitempty" jsonschema:"the object's generation after the apply"`
	Note       string `json:"note,omitempty"`
}

type ResourceDeleteIn struct {
	ObjectRef
	Resource string `` /* 153-byte string literal not displayed */
	DryRun   bool   `json:"dry_run,omitempty" jsonschema:"report what would be deleted without deleting it"`
}

type ResourceDeleteOut struct {
	Resource  string `json:"resource"`
	Name      string `json:"name"`
	Namespace string `json:"namespace,omitempty"`
	DryRun    bool   `json:"dry_run"`
	Note      string `json:"note,omitempty"`
}

type ResourceGetIn struct {
	ObjectRef
	Resource string `` /* 151-byte string literal not displayed */
}

type ResourceGetOut struct {
	Resource string         `json:"resource" jsonschema:"the fully qualified resource that was read"`
	Object   map[string]any `json:"object" jsonschema:"the object as the API server returned it"`
}

type ResourceListIn struct {
	ListOptions
	Resource string `` /* 151-byte string literal not displayed */
}

type ResourceListOut struct {
	ListMeta
	Resource string          `json:"resource" jsonschema:"the fully qualified resource that was listed"`
	Items    []ObjectSummary `json:"items"`
}

type ResourceScaleIn struct {
	ObjectRef
	Resource string `` /* 134-byte string literal not displayed */
	Replicas int32  `json:"replicas" jsonschema:"the desired replica count; zero scales the workload down to nothing"`
}

type ResourceScaleOut struct {
	Resource  string `json:"resource"`
	Name      string `json:"name"`
	Namespace string `json:"namespace,omitempty"`
	Replicas  int32  `json:"replicas" jsonschema:"the replica count now recorded"`
	Note      string `json:"note,omitempty"`
}

type RestoreCopyOut struct {
	Path     string `json:"path"`
	Kind     string `json:"kind" jsonschema:"pre-restore: the data from before a restore; failed-restore: what a failed restore wrote"`
	Bytes    int64  `json:"bytes"`
	Size     string `json:"size" jsonschema:"the same size in binary units, for reading"`
	Modified string `` /* 156-byte string literal not displayed */
}

type RestoreCopyRef struct {
	Path     string `json:"path"`
	Modified string `json:"modified" jsonschema:"the modified time exactly as snapshot_restore_copies reported it"`
}

type RollbackIn struct {
	SoakSeconds  int    `` /* 171-byte string literal not displayed */
	EtcdSnapshot string `` /* 213-byte string literal not displayed */
}

type SnapshotListIn struct {
	Continue string `json:"continue_token,omitempty" jsonschema:"continuation from the preceding page; restart if the snapshot inventory changes"`
	Limit    int    `json:"limit,omitempty" jsonschema:"maximum snapshots to return, newest first; defaults to 100, capped at 500"`
}

type SnapshotListOut struct {
	ListMeta
	Items []SnapshotRow `json:"items"`
	Dir   string        `json:"dir" jsonschema:"the local snapshot directory"`
}

type SnapshotPruneIn struct {
	Keep int `json:"keep" jsonschema:"how many of this node's scheduled snapshots to keep, newest first; must be at least 1"`
}

type SnapshotPruneOut struct {
	Keep     int      `json:"keep"`
	Before   int      `json:"before" jsonschema:"snapshots present before the prune"`
	After    int      `json:"after"`
	Removed  int      `json:"removed"`
	Progress string   `json:"progress,omitempty"`
	Note     string   `json:"note,omitempty"`
	Warnings []string `json:"warnings,omitempty" jsonschema:"the prune's failed targets as the prune returned them, as data beside the note"`
}

type SnapshotPruneRestoresIn struct {
	Copies []RestoreCopyRef `` /* 142-byte string literal not displayed */
}

type SnapshotPruneRestoresOut struct {
	Action  string   `json:"action"`
	Done    bool     `json:"done"`
	Removed []string `json:"removed"`
	Left    []string `` /* 148-byte string literal not displayed */
}

type SnapshotRejoinIn struct {
	Server string `json:"server" jsonschema:"the restored seed control plane's URL, e.g. https://<seed-ip>:6443"`
}

type SnapshotRestoreCopiesIn struct {
	Limit    int    `json:"limit,omitempty" jsonschema:"maximum copies to return, in name order; defaults to 100, capped at 500"`
	Continue string `json:"continue_token,omitempty" jsonschema:"continuation from the preceding page; restart if the copies change"`
}

type SnapshotRestoreCopiesOut struct {
	ListMeta
	Copies    []RestoreCopyOut `json:"copies"`
	PageBytes int64            `json:"pageBytes" jsonschema:"the total size of the copies on this page"`
}

type SnapshotRestoreIn struct {
	Snapshot string `` /* 170-byte string literal not displayed */
}

type SnapshotRow struct {
	Name     string `json:"name"`
	Location string `json:"location" jsonschema:"local or s3"`
	Size     int64  `json:"size"`
	Modified string `json:"modified" jsonschema:"RFC 3339"`
}

type SnapshotSaveIn struct {
	Name   string `json:"name,omitempty" jsonschema:"file name for the snapshot; defaults to a timestamped scheduled name"`
	Retain int    `json:"retain,omitempty" jsonschema:"after saving, keep only this many of this host's scheduled snapshots; 0 keeps all"`
	SkipS3 bool   `json:"skip_s3,omitempty" jsonschema:"write locally only, even when an object store is configured"`
}

type SnapshotSaveOut struct {
	Path     string   `json:"path" jsonschema:"where the snapshot was written on this node"`
	Uploaded bool     `json:"uploaded" jsonschema:"whether it was also copied to the configured object store"`
	Progress string   `json:"progress,omitempty" jsonschema:"progress output from the snapshot subsystem, if any"`
	Note     string   `json:"note,omitempty"`
	Warnings []string `` /* 140-byte string literal not displayed */
}

type SnapshotScheduleIn struct {
	Retain int `json:"retain,omitempty" jsonschema:"how many scheduled snapshots to keep per node; omit to leave unchanged"`
}

type SnapshotScheduleOut struct {
	Retain            int    `json:"retain"`
	Bucket            string `json:"bucket,omitempty"`
	Endpoint          string `` /* 148-byte string literal not displayed */
	Region            string `json:"region,omitempty"`
	Prefix            string `json:"prefix,omitempty"`
	PathStyle         bool   `json:"path_style"`
	ConfigPath        string `json:"configPath"`
	CredentialsOnDisk bool   `json:"credentialsOnDisk" jsonschema:"the config file already holds object-store credentials; they were left untouched"`
	Note              string `json:"note"`
}

type Tier int

type TokenCreateIn struct {
	TTLHours     int  `` /* 145-byte string literal not displayed */
	ControlPlane bool `` /* 213-byte string literal not displayed */
}

type TokenCreateOut struct {
	Token      string `json:"token" jsonschema:"the join token, returned once and never logged. Treat it as a credential"`
	CACertHash string `json:"caCertHash" jsonschema:"the CA pin the joiner verifies the control plane against"`
	Server     string `json:"server"`
	ExpiresIn  string `json:"expiresIn"`
	CertKey    string `json:"certKey,omitempty" jsonschema:"control-plane join key, present only when control_plane was set. Also a credential"`
	// JoinFlags are the flags the joining node must carry on its join line to
	// match this cluster: the pod and service ranges and the DNS domain when
	// they differ from the defaults, and the CIS profile marker. The network
	// flags (--pod-cidr, --service-cidr, --cluster-domain) go on a worker join
	// line only: a control plane gets its network from the cluster it joins,
	// and `stratum up` refuses those flags without --worker. The profile
	// marker goes on every join line. They travel as data derived by
	// token.LoadJoinFlags, the same derivation `stratum token create`
	// renders, because a worker learns them only from its join line and this
	// result is that line's only source.
	JoinFlags token.JoinFlags `json:"joinFlags"`
	// Delivered records that credential bytes were handed to the caller in
	// this result. token.Issue holds ownership only until this delivery, so a
	// delivered grant is never revoked behind the caller's back; what the
	// caller does with the credential from here is its own to clean up.
	Delivered bool   `json:"delivered" jsonschema:"the credentials in this result were handed to the caller and are not revoked"`
	Note      string `json:"note"`
}

type TokenListIn struct {
	Limit    int    `json:"limit,omitempty" jsonschema:"maximum tokens to return; defaults to 100, capped at 500"`
	Continue string `json:"continue_token,omitempty" jsonschema:"continuation from the preceding page"`
}

type TokenListOut struct {
	ListMeta
	Items []TokenRow `json:"items"`
}

type TokenRow struct {
	ID        string `json:"id" jsonschema:"the token id; the secret half is deliberately never returned"`
	Expires   string `json:"expires,omitempty" jsonschema:"RFC 3339, absent when the token does not expire"`
	Malformed bool   `` /* 130-byte string literal not displayed */
}

type Tool struct {
	Name        string
	Description string
	Tier        Tier

	// Destructive marks a write-tier row whose tool is annotated as
	// destructive: it registers with --allow-write, but its handler refuses
	// some targets unless the server also runs with --allow-destructive, so a
	// client should treat a call with the care a destructive annotation asks
	// for. Read- and destructive-tier rows never set it: the tier alone
	// already decides their annotation.
	Destructive bool

	// Credential declares which Kubernetes credential this tool's handler
	// reaches the API with: one of the CredentialSource values. Registration
	// records it beside the admitted tool, so a row that reaches the API
	// without declaring a source records an empty one, which pkg/cli's
	// credential-source pin fails on.
	Credential CredentialSource

	// Add adds the tool's typed handler to srv under t. The handler travels
	// with the row — built from the same version, connector and policy the
	// catalog was built with — so the registrar admits a descriptor without
	// ever naming a handler's type parameters.
	Add func(srv *sdk.Server, t *sdk.Tool)
}

type UninstallIn struct{}

type UninstallPreviewIn struct{}

type UninstallPreviewOut struct {
	Targets []UninstallTarget `json:"targets"`
	Present int               `json:"present" jsonschema:"how many of them exist on this node"`
	// Conditionals is the shared preview's items, unchanged: the same
	// uninstall.Preview() the CLI dry run renders, so the two surfaces
	// enumerate the same effects. Schema change reviewed under api-compat.
	Conditionals []uninstall.PreviewItem `` /* 301-byte string literal not displayed */
	Note         string                  `json:"note"`
}

type UninstallTarget struct {
	Path   string `json:"path"`
	Exists bool   `json:"exists" jsonschema:"whether it is present on this node right now"`
	IsDir  bool   `json:"isDir,omitempty"`
	Size   int64  `json:"size,omitempty" jsonschema:"bytes, for files only"`
}

type UpgradeApplyIn struct {
	Scope                 string `json:"scope" jsonschema:"node to upgrade only this node, or cluster to roll every node in the cluster"`
	Target                string `json:"target,omitempty" jsonschema:"Kubernetes version as vMAJOR.MINOR.PATCH; defaults to the version this binary carries"`
	From                  string `` /* 321-byte string literal not displayed */
	WorkersMaxUnavailable int    `json:"workers_max_unavailable,omitempty" jsonschema:"how many workers may be upgraded at once; defaults to 1"`
	SoakSeconds           int    `` /* 154-byte string literal not displayed */
	SkipSnapshot          bool   `json:"skip_snapshot,omitempty" jsonschema:"skip the pre-upgrade etcd snapshot; strongly discouraged"`
}

type UpgradePlanIn struct {
	Target                string `json:"target" jsonschema:"the Kubernetes version to upgrade to, as vMAJOR.MINOR.PATCH"`
	WorkersMaxUnavailable int    `json:"workers_max_unavailable,omitempty" jsonschema:"how many workers may be upgraded at once; defaults to 1"`
}

type UpgradePlanOut struct {
	Target    string        `json:"target"`
	Allowed   bool          `json:"allowed" jsonschema:"false when a preflight gate rejects this upgrade"`
	Blocker   string        `json:"blocker,omitempty" jsonschema:"why the upgrade is refused, when it is"`
	Steps     []UpgradeStep `json:"steps,omitempty"`
	NodeCount int           `json:"nodeCount"`
	Note      string        `json:"note,omitempty"`
}

type UpgradeStep struct {
	Order   int      `json:"order"`
	Nodes   []string `json:"nodes" jsonschema:"the nodes upgraded together in this step"`
	Role    string   `json:"role" jsonschema:"control-plane or worker"`
	Serial  bool     `json:"serial" jsonschema:"true when this step must not run alongside another"`
	Comment string   `json:"comment,omitempty"`
}

type VersionIn struct{}

type VersionOut struct {
	Version string `json:"version" jsonschema:"the Stratum release this binary reports"`
	OS      string `json:"os" jsonschema:"the operating system the binary was built for"`
	Arch    string `json:"arch" jsonschema:"the CPU architecture the binary was built for"`
}

type WritePolicy struct {
	// AllowDestructive mirrors --allow-destructive.
	AllowDestructive bool
}