v1alpha1

type Certificate struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   CertificateSpec   `json:"spec,omitempty"`
	Status CertificateStatus `json:"status,omitempty"`
}

type CertificateConfig struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   CertificateConfigSpec   `json:"spec,omitempty"`
	Status CertificateConfigStatus `json:"status,omitempty"`
}

type CertificateConfigList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []CertificateConfig `json:"items"`
}

type CertificateConfigSpec struct {
	// SecretRef is a reference to the Kubernetes Secret containing credentials for authenticating with the cert API.
	SecretRef SecretRef `json:"secretRef"`
	// DaysBeforeRenewal represents the number of days to renew the certificate before expiration.
	DaysBeforeRenewal int `json:"daysBeforeRenewal"`
	// WaitTimeout specifies the maximum time duration for waiting for response from cert.
	WaitTimeout *metav1.Duration `json:"waitTimeout,omitempty"`
	// ForceExpirationUpdate indicates whether to force an update of the Certificate details even when it's valid.
	ForceExpirationUpdate bool `json:"forceExpirationUpdate,omitempty"`
}

type CertificateConfigStatus struct {
}

type CertificateData struct {
	// Subject represents the subject of the certificate.
	Subject Subject `json:"subject,omitempty"`
	// San represents Subject Alternative Names of the certificate.
	San San `json:"san,omitempty"`
	// Template is an optional field specifying the template for the certificate.
	Template string `json:"template,omitempty"`
	// Form is an optional field specifying the format of the certificate.
	// +kubebuilder:default:="pfx"
	// +kubebuilder:validation:Enum=pfx;
	Form string `json:"form,omitempty"`
}

type CertificateList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Certificate `json:"items"`
}

type CertificateSpec struct {
	// CertificateData contains the data for generating the certificate.
	CertificateData CertificateData `json:"certificateData,omitempty"`
	// SecretName is the name of the Kubernetes Secret where the extracted certificate is stored.
	SecretName string `json:"secretName,omitempty"`
	// ConfigRef is the referance to the CertificateConfig associated with this Certificate.
	ConfigRef ConfigReference `json:"configRef,omitempty"`
}

type CertificateStatus struct {
	// Conditions represent the current conditions of the Certificate.
	Conditions []metav1.Condition `json:"conditions,omitempty"`
	// ValidFrom represents the time when the certificate becomes valid.
	ValidFrom metav1.Time `json:"validFrom,omitempty"`
	// ValidTo represents the time when the certificate expires.
	ValidTo metav1.Time `json:"validTo,omitempty"`
	// Issuer is the entity that issued the certificate.
	Issuer string `json:"issuer,omitempty"`
	// Guid is a unique identifier for the certificate.
	Guid string `json:"guid,omitempty"`
	// SignatureHashAlgorithm is the algorithm used to sign the certificate.
	SignatureHashAlgorithm string `json:"signatureHashAlgorithm,omitempty"`
	// SecretName is the name of the Kubernetes Secret where the extracted certificate is stored.
	SecretName string `json:"secretName,omitempty"`
}

type ConfigReference struct {
	// Name of the CertificateConfig.
	Name string `json:"name"`
}

type San struct {
	// DNS represents the DNS names included in the certificate.
	DNS []string `json:"dns,omitempty"`
	// IPs represents the IP addresses included in the certificate.
	IPs []string `json:"ips,omitempty"`
}

type SecretRef struct {
	// Name is the name of the Secret.
	Name string `json:"name"`
	// Namespace is the namespace where the Secret is located.
	Namespace string `json:"namespace"`
}

type Subject struct {
	// CommonName is the common name of the subject.
	CommonName         string `json:"commonName,omitempty"`
	Country            string `json:"country,omitempty"`
	State              string `json:"state,omitempty"`
	Locality           string `json:"locality,omitempty"`
	Organization       string `json:"organization,omitempty"`
	OrganizationalUnit string `json:"organizationUnit,omitempty"`
}