types

type AWS struct {
	ServiceAccount string `yaml:"serviceAccount,omitempty" json:"serviceAccount,omitempty"`
	Zone           string `yaml:"zone,omitempty" json:"zone,omitempty"`
	AccessKey      string `yaml:"access_key,omitempty" json:"access_key,omitempty"`
	SecretKey      string `yaml:"secret_key,omitempty" json:"secret_key,omitempty"`
}

type AlertManager struct {
	Version          string   `yaml:"version,omitempty" json:"version,omitempty"`
	Disabled         bool     `yaml:"disabled,omitempty" json:"disabled,omitempty"`
	ConfigNamespaces []string `yaml:"configNamespaces" json:"configNamespaces"`
	AlertRelabeling  string   `yaml:"alertRelabelingConfig" json:"alertRelabelingConfig"`
}

type Antrea struct {
	// +optional
	XDisabled `yaml:",inline" json:",inline"`
	// +optional
	IsCertReady bool `yaml:"isCertReady" json:"isCertReady"`
}

type ArgoRollouts struct {
	XDisabled `yaml:",inline" json:",inline"`
}

type ArgocdOperator struct {
	XDisabled `yaml:",inline" json:",inline"`
}

type AuditConfig struct {
	PolicyFile string `yaml:"policyFile,omitempty" json:"policyFile,omitempty"`
}

type Auditbeat struct {
	XDisabled `yaml:",inline" json:",inline"`
	Kibana    *Connection `yaml:"kibana,omitempty" json:"kibana,omitempty"`
}

type Boolean bool

type Brand struct {
	Name string `yaml:"name,omitempty" json:"name,omitempty"`
	URL  string `yaml:"url,omitempty" json:"url,omitempty"`
	Logo string `yaml:"logo,omitempty" json:"logo,omitempty"`
}

type CA struct {
	Cert       string `yaml:"cert,omitempty" json:"cert,omitempty"`
	PrivateKey string `yaml:"privateKey,omitempty" json:"privateKey,omitempty"`
	Password   string `yaml:"password,omitempty" json:"password,omitempty"`
}

type Calico struct {
	// +optional
	XDisabled `yaml:",inline" json:",inline"`
	// +optional
	IPIP calico.IPIPMode `yaml:"ipip" json:"ipip"`
	// +optional
	VxLAN calico.VXLANMode `yaml:"vxlan" json:"vxLAN"`
	// +optional
	Log string `yaml:"log,omitempty" json:"log,omitempty"`
	// +optional
	BGPPeers []calico.BGPPeer `yaml:"bgpPeers,omitempty" json:"bgpPeers,omitempty"`
	// +optional
	BGPConfig calico.BGPConfiguration `yaml:"bgpConfig,omitempty" json:"bgpConfig,omitempty"`
	// +optional
	IPPools []calico.IPPool `yaml:"ipPools,omitempty" json:"ipPools,omitempty"`
}

type CanaryChecker struct {
	XDisabled `yaml:",inline" json:",inline"`
}

type CertManager struct {
	Version string `yaml:"version" json:"version"`

	// Details of a vault server to use for signing ingress certificates
	Vault *VaultClient `yaml:"vault,omitempty" json:"vault,omitempty"`
	// Details of a Letsencrypt issuer to use for signing ingress certificates
	Letsencrypt     *LetsencryptIssuer `yaml:"letsencrypt,omitempty" json:"letsencrypt,omitempty"`
	DefaultIssuerCA string             `yaml:"-" json:"-"`
	// Set to true if ingress CA will be configured via kustomise or similar
	ExternalCA bool `yaml:"externalCA,omitempty" json:"externalCA,omitempty"`
}

type Cluster interface {
	Clone(template VM, config *konfigadm.Config) (Machine, error)
	CloneTemplate(template VM, config *konfigadm.Config) (Machine, error)
	GetMachine(name string) (Machine, error)
	GetMachines() (map[string]Machine, error)
	GetMachinesFor(vm *VM) (map[string]Machine, error)
	SetTags(vm Machine, tags map[string]string) error
}

type ConfigDirective struct {
	FilePath   string             `yaml:"file,omitempty" json:"file,omitempty"`
	SopsPath   string             `yaml:"sops,omitempty" json:"sops,omitempty"`
	SecretPath v1.SecretReference `yaml:"secretRef,omitempty" json:"secretRef,omitempty"`
}

type ConfigMapReloader struct {
	Version  string `yaml:"version" json:"version"`
	Disabled bool   `yaml:"disabled,omitempty" json:"disabled,omitempty"`
}

type Connection struct {
	URL      string         `yaml:"url" json:"url"`
	User     string         `yaml:"user,omitempty" json:"user,omitempty"`
	Password kommons.EnvVar `yaml:"password,omitempty" json:"password,omitempty"`
	Port     string         `yaml:"port,omitempty" json:"port,omitempty"`
	Scheme   string         `yaml:"scheme,omitempty" json:"scheme,omitempty"`
	Verify   string         `yaml:"verify,omitempty" json:"verify,omitempty"`
}

type Consul struct {
	Version        string `yaml:"version" json:"version"`
	Disabled       bool   `yaml:"disabled,omitempty" json:"disabled,omitempty"`
	Bucket         string `yaml:"bucket,omitempty" json:"bucket,omitempty"`
	BackupSchedule string `yaml:"backupSchedule,omitempty" json:"backupSchedule,omitempty"`
	BackupImage    string `yaml:"backupImage,omitempty" json:"backupImage,omitempty"`
}

type DB struct {
	Host     string `yaml:"host" json:"host"`
	Username string `yaml:"username" json:"username"`
	Password string `yaml:"password" json:"password"`
	Port     int    `yaml:"port" json:"port"`
}

type Dashboard struct {
	XDisabled `yaml:",inline" json:",inline"`
}

type DefaultBackupRetention struct {
	KeepLast    int `yaml:"keepLast,omitempty" json:"keepLast,omitempty"`
	KeepHourly  int `yaml:"keepHourly,omitempty" json:"keepHourly,omitempty"`
	KeepDaily   int `yaml:"keepDaily,omitempty" json:"keepDaily,omitempty"`
	KeepWeekly  int `yaml:"keepWeekly,omitempty" json:"keepWeekly,omitempty"`
	KeepMonthly int `yaml:"keepMonthly,omitempty" json:"keepMonthly,omitempty"`
	KeepYearly  int `yaml:"keepYearly,omitempty" json:"keepYearly,omitempty"`
}

type Dex struct {
	XDisabled `yaml:",inline" json:",inline"`
	Google    GoogleOIDC `yaml:"google,omitempty" json:"google,omitempty"`
	Github    GithubOIDC `yaml:"github,omitempty" json:"github,omitempty"`
	Gitlab    GitlabOIDC `yaml:"gitlab,omitempty" json:"gitlab,omitempty"`
}

type DynamicDNS struct {
	Disabled bool `yaml:"disabled,omitempty" json:"disabled,omitempty"`
	// Set to true if you want DNS records added to k8s-api and "*" for every new
	// worker and master created.
	UpdateHosts bool `yaml:"updateHosts,omitempty" json:"updateHosts,omitempty"`
	// Nameserver and port for dynamic DNS updates
	Nameserver string `yaml:"nameserver,omitempty" json:"nameserver,omitempty"`
	// Dynamic DNS key secret
	Key string `yaml:"key,omitempty" json:"key,omitempty"`
	// Dynamic DNS key name
	KeyName string `yaml:"keyName,omitempty" json:"keyName,omitempty"`
	// A Dynamic DNS signature algorithm, one of: hmac-md5, hmac-sha1, hmac-256, hmac-512
	Algorithm string `yaml:"algorithm,omitempty" json:"algorithm,omitempty"`
	Zone      string `yaml:"zone,omitempty" json:"zone,omitempty"`
	Region    string `yaml:"region,omitempty" json:"region,omitempty"`
	AccessKey string `yaml:"accessKey,omitempty" json:"accessKey,omitempty"`
	SecretKey string `yaml:"secretKey,omitempty" json:"secretKey,omitempty"`
	// Type of DNS provider. Defaults to RFC 2136 Dynamic DNS. If using "route53" you
	// must specify accessKey, secretKey and zone
	Type string `yaml:"type,omitempty" json:"type,omitempty"`
}

type ECK struct {
	XDisabled `yaml:",inline" json:",inline"`
}

type Elasticsearch struct {
	Version     string       `yaml:"version" json:"version"`
	Mem         *Memory      `yaml:"mem,omitempty" json:"mem,omitempty"`
	Replicas    int          `yaml:"replicas,omitempty" json:"replicas,omitempty"`
	Persistence *Persistence `yaml:"persistence,omitempty" json:"persistence,omitempty"`
	Disabled    bool         `yaml:"disabled,omitempty" json:"disabled,omitempty"`
}

type EncryptionConfig struct {
	EncryptionProviderConfigFile string `yaml:"encryptionProviderConfigFile,omitempty" json:"encryptionProviderConfigFile,omitempty"`
}

type EventRouter struct {
	XDisabled `yaml:",inline" json:",inline"`
}

type ExternalClusters map[string]string

type ExternalDNS struct {
	XDisabled `yaml:",inline" json:",inline"`
	Args      map[string]string `yaml:"args" json:"args"`
}

type Filebeat struct {
	XDisabled     `yaml:",inline" json:",inline"`
	Name          string            `yaml:"name" json:"name"`
	Index         string            `yaml:"index" json:"index"`
	Prefix        string            `yaml:"prefix" json:"prefix"`
	Elasticsearch *Connection       `yaml:"elasticsearch,omitempty" json:"elasticsearch,omitempty"`
	Logstash      *Connection       `yaml:"logstash,omitempty" json:"logstash,omitempty"`
	Kibana        *Connection       `yaml:"kibana,omitempty" json:"kibana,omitempty"`
	SSL           map[string]string `yaml:"ssl,omitempty" json:"ssl,omitempty"`
}

type Flux struct {
	Enabled                        bool   `yaml:"enabled" json:"enabled"`
	SourceControllerVersion        string `yaml:"sourceControllerVersion,omitempty" json:"sourceControllerVersion,omitempty"`
	NotificationsControllerVersion string `yaml:"notificationsControllerVersion,omitempty" json:"notificationsControllerVersion,omitempty"`
	KustomizeControllerVersion     string `yaml:"kustomizeControllerVersion,omitempty" json:"kustomizeControllerVersion,omitempty"`
	HelmControllerVersion          string `yaml:"helmControllerVersion,omitempty" json:"helmControllerVersion,omitempty"`
}

type GCP struct {
	Project        string `yaml:"project,omitempty" json:"project,omitempty"`
	ServiceAccount string `yaml:"serviceAccount,omitempty" json:"serviceAccount,omitempty"`
	Zone           string `yaml:"zone,omitempty" json:"zone,omitempty"`
}

type Gatekeeper struct {
	XDisabled `yaml:",inline" json:",inline"`
	// Templates is a path to directory containing gatekeeper templates
	Templates string `yaml:"templates,omitempty" json:"templates,omitempty"`
	// Templates is a path to directory containing gatekeeper constraints
	Constraints         string        `yaml:"constraints,omitempty" json:"constraints,omitempty"`
	AuditInterval       int           `yaml:"auditInterval,omitempty" json:"auditInterval,omitempty"`
	WhitelistNamespaces []string      `yaml:"whitelistNamespaces,omitempty" json:"whitelistNamespaces,omitempty"`
	E2E                 GatekeeperE2E `yaml:"e2e,omitempty" json:"e2e,omitempty"`
}

type GatekeeperE2E struct {
	Fixtures string `yaml:"fixtures,omitempty" json:"fixtures,omitempty"`
}

type GitOperator struct {
	XDisabled `yaml:",inline" json:",inline"`
}

type GitOps struct {
	// The name of the gitops deployment, defaults to namespace name
	Name string `yaml:"name,omitempty" json:"name,omitempty"`

	// Do not scan container image registries to fill in the registry cache, implies `--git-read-only` (default: true)
	DisableScanning *bool `yaml:"disableScanning,omitempty" json:"disableScanning,omitempty"`

	// The namespace to deploy the GitOps operator into, if empty then it will be deployed cluster-wide into kube-system
	Namespace string `yaml:"namespace,omitempty" json:"namespace,omitempty"`

	// The URL to git repository to clone
	GitURL string `yaml:"gitUrl" json:"gitUrl,omitempty"`

	// The git branch to use (default: `master`)
	GitBranch string `yaml:"gitBranch,omitempty" json:"gitBranch,omitempty"`

	// The path with in the git repository to look for YAML in (default: `.`)
	GitPath string `yaml:"gitPath,omitempty" json:"gitPath,omitempty"`

	// The frequency with which to fetch the git repository (default: `5m0s`)
	GitPollInterval string `yaml:"gitPollInterval,omitempty" json:"gitPollInterval,omitempty"`

	// The frequency with which to sync the manifests in the repository to the cluster (default: `5m0s`)
	SyncInterval string `yaml:"syncInterval,omitempty" json:"syncInterval,omitempty"`

	// The Kubernetes secret to use for cloning, if it does not exist it will be generated (default: `flux-$name-git-deploy`)
	GitKey string `yaml:"gitKey,omitempty" json:"gitKey,omitempty"`

	// The contents of the known_hosts file to mount into Flux and helm-operator
	KnownHosts string `yaml:"knownHosts,omitempty" json:"knownHosts,omitempty"`

	// The contents of the ~/.ssh/config file to mount into Flux and helm-operator
	SSHConfig string `yaml:"sshConfig,omitempty" json:"sshConfig,omitempty"`

	// The version to use for flux (default: 1.20.0 )
	FluxVersion string `yaml:"fluxVersion,omitempty" json:"fluxVersion,omitempty"`

	// The version to use for helm operator (default: 1.20.0 )
	HelmOperatorVersion string `yaml:"helmOperatorVersion,omitempty" json:"helmOperatorVersion,omitempty"`

	// a map of args to pass to flux without -- prepended. See [fluxd](https://docs.fluxcd.io/en/1.19.0/references/daemon/) for a full list
	Args map[string]string `yaml:"args,omitempty" json:"args,omitempty"`
}

type GithubOIDC struct {
	ClientID      string      `yaml:"clientID,omitempty" json:"clientID,omitempty"`
	ClientSecret  string      `yaml:"clientSecret,omitempty" json:"clientSecret,omitempty"`
	Organizations []GithubOrg `yaml:"orgs,omitempty" json:"orgs,omitempty"`
}

type GithubOrg struct {
	Name  string   `yaml:"name" json:"name"`
	Teams []string `yaml:"teams,omitempty" json:"teams,omitempty"`
}

type GitlabOIDC struct {
	URL           string   `yaml:"url,omitempty" json:"url,omitempty"`
	ApplicationID string   `yaml:"applicationID,omitempty" json:"applicationID,omitempty"`
	ClientSecret  string   `yaml:"clientSecret,omitempty" json:"clientSecret,omitempty"`
	Groups        []string `yaml:"groups,omitempty" json:"groups,omitempty"`
}

type GoogleOIDC struct {
	ClientID      string   `yaml:"clientID,omitempty" json:"clientID,omitempty"`
	ClientSecret  string   `yaml:"clientSecret,omitempty" json:"clientSecret,omitempty"`
	HostedDomains []string `yaml:"hostedDomains,omitempty" json:"hostedDomains,omitempty"`
}

type Grafana struct {
	Version          string   `yaml:"version,omitempty" json:"version,omitempty"`
	Disabled         bool     `yaml:"disabled,omitempty" json:"disabled,omitempty"`
	SkipDashboards   bool     `yaml:"skipDashboards,omitempty" json:"skipDashboards,omitempty" `
	CustomDashboards []string `yaml:"customDashboards,omitempty" json:"customDashboards,omitempty"`
}

type Harbor struct {
	Disabled        bool   `yaml:"disabled,omitempty" json:"disabled,omitempty"`
	Version         string `yaml:"version,omitempty" json:"version,omitempty"`
	RegistryPVC     string `yaml:"registryPVC,omitempty" json:"registryPVC,omitempty"`
	ChartPVC        string `yaml:"chartPVC,omitempty" json:"chartPVC,omitempty"`
	ChartVersion    string `yaml:"chartVersion,omitempty" json:"chartVersion,omitempty"`
	AdminPassword   string `yaml:"-" json:"-"`
	TrivyVersion    string `yaml:"trivyVersion" json:"trivyVersion,omitempty"`
	RegistryVersion string `yaml:"registryVersion" json:"registryVersion"`
	// Logging level for various components, valid options are `info`,`warn`,`debug` (default: `warn`)
	LogLevel          string                   `yaml:"logLevel,omitempty" json:"logLevel,omitempty"`
	DB                *DB                      `yaml:"db,omitempty" json:"db,omitempty"`
	URL               string                   `yaml:"url,omitempty" json:"url,omitempty"`
	Projects          map[string]HarborProject `yaml:"projects,omitempty" json:"projects,omitempty"`
	Settings          *HarborSettings          `yaml:"settings,omitempty" json:"settings,omitempty"`
	Replicas          int                      `yaml:"replicas,omitempty" json:"replicas,omitempty"`
	S3                *S3Connection            `yaml:"s3,omitempty" json:"s3,omitempty"`
	S3DisableRedirect bool                     `yaml:"s3DisableRedirect" json:"s3DisableRedirect,omitempty"`
	// S3 bucket for the docker registry to use
	Bucket string `yaml:"bucket" json:"bucket"`
}

type HarborProject struct {
	Name  string            `yaml:"name,omitempty" json:"name,omitempty"`
	Roles map[string]string `yaml:"roles,omitempty" json:"roles,omitempty"`
}

type HarborSettings struct {
	AuthMode                     string `json:"auth_mode,omitempty" yaml:"auth_mode,omitempty"`
	EmailFrom                    string `json:"email_from,omitempty" yaml:"email_from,omitempty"`
	EmailHost                    string `json:"email_host,omitempty" yaml:"email_host,omitempty"`
	EmailIdentity                string `json:"email_identity,omitempty" yaml:"email_identity,omitempty"`
	EmailPassword                string `json:"email_password,omitempty" yaml:"email_password,omitempty"`
	EmailInsecure                string `json:"email_insecure,omitempty" yaml:"email_insecure,omitempty"`
	EmailPort                    string `json:"email_port,omitempty" yaml:"email_port,omitempty"`
	EmailSsl                     *bool  `json:"email_ssl,omitempty" yaml:"email_ssl,omitempty"`
	EmailUsername                string `json:"email_username,omitempty" yaml:"email_username,omitempty"`
	LdapURL                      string `json:"ldap_url,omitempty" yaml:"ldap_url,omitempty"`
	LdapBaseDN                   string `json:"ldap_base_dn,omitempty" yaml:"ldap_base_dn,omitempty"`
	LdapFilter                   string `json:"ldap_filter,omitempty" yaml:"ldap_filter,omitempty"`
	LdapScope                    string `json:"ldap_scope,omitempty" yaml:"ldap_scope,omitempty"`
	LdapSearchDN                 string `json:"ldap_search_dn,omitempty" yaml:"ldap_search_dn,omitempty"`
	LdapSearchPassword           string `json:"ldap_search_password,omitempty" yaml:"ldap_search_password,omitempty"`
	LdapTimeout                  string `json:"ldap_timeout,omitempty" yaml:"ldap_timeout,omitempty"`
	LdapUID                      string `json:"ldap_uid,omitempty" yaml:"ldap_uid,omitempty"`
	LdapVerifyCert               *bool  `json:"ldap_verify_cert,omitempty" yaml:"ldap_verify_cert,omitempty"`
	LdapGroupAdminDN             string `json:"ldap_group_admin_dn,omitempty" yaml:"ldap_group_admin_dn,omitempty"`
	LdapGroupAttributeName       string `json:"ldap_group_attribute_name,omitempty" yaml:"ldap_group_attribute_name,omitempty"`
	LdapGroupBaseDN              string `json:"ldap_group_base_dn,omitempty" yaml:"ldap_group_base_dn,omitempty"`
	LdapGroupSearchFilter        string `json:"ldap_group_search_filter,omitempty" yaml:"ldap_group_search_filter,omitempty"`
	LdapGroupSearchScope         string `json:"ldap_group_search_scope,omitempty" yaml:"ldap_group_search_scope,omitempty"`
	LdapGroupMembershipAttribute string `json:"ldap_group_membership_attribute,omitempty" yaml:"ldap_group_membership_attribute,omitempty"`
	ProjectCreationRestriction   string `json:"project_creation_restriction,omitempty" yaml:"project_creation_restriction,omitempty"`
	ReadOnly                     string `json:"read_only,omitempty" yaml:"read_only,omitempty"`
	SelfRegistration             *bool  `json:"self_registration,omitempty" yaml:"self_registration,omitempty"`
	TokenExpiration              int    `json:"token_expiration,omitempty" yaml:"token_expiration,omitempty"`
	OidcName                     string `json:"oidc_name,omitempty" yaml:"oidc_name,omitempty"`
	OidcEndpoint                 string `json:"oidc_endpoint,omitempty" yaml:"oidc_endpoint,omitempty"`
	OidcClientID                 string `json:"oidc_client_id,omitempty" yaml:"oidc_client_id,omitempty"`
	OidcClientSecret             string `json:"oidc_client_secret,omitempty" yaml:"oidc_client_secret,omitempty"`
	OidcScope                    string `json:"oidc_scope,omitempty" yaml:"oidc_scope,omitempty"`
	OidcVerifyCert               string `json:"oidc_verify_cert,omitempty" yaml:"oidc_verify_cert,omitempty"`
	RobotTokenDuration           int    `json:"robot_token_duration,omitempty" yaml:"robot_token_duration,omitempty"`
}

type Image struct {
	BuildInit         string `yaml:"buildInit,omitempty" json:"buildInit,omitempty"`
	BuildInitWindows  string `yaml:"buildInitWindows,omitempty" json:"buildInitWindows,omitempty"`
	Rebase            string `yaml:"rebase,omitempty" json:"rebase,omitempty"`
	Lifecycle         string `yaml:"lifecycle,omitempty" json:"lifecycle,omitempty"`
	Completion        string `yaml:"completion,omitempty" json:"completion,omitempty"`
	CompletionWindows string `yaml:"completionWindows,omitempty" json:"completionWindows,omitempty"`
	Controller        string `yaml:"controller,omitempty" json:"controller,omitempty"`
	Webhook           string `yaml:"webhook,omitempty" json:"webhook,omitempty"`
}

type IstioOperator struct {
	XDisabled `yaml:",inline" json:",inline"`
}

type Journalbeat struct {
	XDisabled `yaml:",inline" json:",inline"`
	Kibana    *Connection `yaml:"kibana,omitempty" json:"kibana,omitempty"`
}

type KarinaOperator struct {
	XDisabled  `yaml:",inline" json:",inline"`
	SyncPeriod string `yaml:"syncPeriod,omitempty" json:"syncPeriod,omitempty"`
}

type Karma struct {
	Version       string            `yaml:"version,omitempty" json:"version,omitempty"`
	AlertManagers map[string]string `yaml:"alertManagers" json:"alertManagers"`
}

type Keptn struct {
	XDisabled `yaml:",inline" json:",inline"`
}

type Kind struct {
	// Skip attempting to mount local files into the docker daemon
	RemoteDocker bool             `yaml:"remoteDocker" json:"remoteDocker"`
	PortMappings map[string]int32 `yaml:"portMappings,omitempty" json:"portMappings,omitempty"`
	WorkerCount  int              `yaml:"workerCount,omitempty" json:"workerCount,omitempty"`
	Image        string           `yaml:"image,omitempty" json:"image,omitempty"`
}

type Kiosk struct {
	XDisabled `yaml:",inline" json:",inline"`
}

type KonfigManager struct {
	XDisabled  `yaml:",inline" json:",inline"`
	SyncPeriod string `yaml:"syncPeriod,omitempty" json:"syncPeriod,omitempty"`
}

type Kpack struct {
	Disabled bool  `yaml:"disabled,omitempty" json:"disabled,omitempty"`
	Image    Image `yaml:"image,omitempty" json:"image,omitempty"`
}

type KubeResourceReport struct {
	// Disable kube-resource-report
	Disabled bool `yaml:"disabled,omitempty" json:"disabled,omitempty"`
	// Specify version to use (see [releases](https://github.com/hjacobs/kube-resource-report/releases))
	Version string `yaml:"version,omitempty" json:"version,omitempty"`
	// update interval in minutes
	UpdateInterval int `yaml:"updateInterval,omitempty" json:"updateInterval,omitempty"`
	// add a fixed extra cost per cluster
	AdditionalClusterCost int32 `yaml:"additionalClusterCost,omitempty" json:"additionalClusterCost,omitempty"`
	// specify costs inline
	Costs map[string]int32 `yaml:"costs,omitempty" json:"costs,omitempty"`
	// specify a CSV file with custom costs for nodes with rows in the form:
	// columns: region,instance-type,monthly-price-usd
	// to apply this add labels to cluster nodes:
	// region is defined via the node label "failure-domain.beta.kubernetes.io/region"
	// instance-type is defined via the node label "beta.kubernetes.io/instance-type"
	CostsFile string `yaml:"costsfile,omitempty" json:"costsFile,omitempty"`
	// a map of extra clusters that kube-resource report will report on.
	// in the form:
	// clusterName: cluster API endpoint
	// e.g.:
	//  extraClusters:
	//    k8s-reports2: "https://10.100.2.69:6443"
	// the CA for the current cluster needs to be trusted by
	// the given external cluster.
	ExternalClusters ExternalClusters `yaml:"extraClusters,omitempty" json:"extraClusters,omitempty"`
	// A comma separated list of labels applied to k8s objects
	// to identify team ownership. These are reported on in the *Teams* tab of the report.
	// Multiple labels may be specified.
	// Default value is "team,owner".
	TeamLabels string `yaml:"teamlabels,omitempty" json:"teamLabels,omitempty"`
}

type KubeWebView struct {
	Disabled       bool   `yaml:"disabled,omitempty" json:"disabled,omitempty"`
	Version        string `yaml:"version,omitempty" json:"version,omitempty"`
	LogsEnabled    bool   `yaml:"viewLogs,omitempty" json:"viewLogs,omitempty"`
	SecretsEnabled bool   `yaml:"viewSecrets,omitempty" json:"viewSecrets,omitempty"`
	// a map of extra clusters that kube-resource report will report on.
	// in the form:
	// clusterName: cluster API endpoint
	// e.g.:
	//  extraClusters:
	//    k8s-reports2: "https://10.100.2.69:6443"
	// the CA for the current cluster needs to be trusted by
	// the given external cluster.
	ExternalClusters ExternalClusters `yaml:"extraClusters,omitempty" json:"extraClusters,omitempty"`
}

type Kubernetes struct {
	Version string `yaml:"version" json:"version"`
	// Configure additional kubelet [flags](https://kubernetes.io/docs/reference/command-line-tools-reference/kubelet/)
	KubeletExtraArgs map[string]string `yaml:"kubeletExtraArgs,omitempty" json:"kubeletExtraArgs,omitempty"`
	// Configure additional kube-controller-manager [flags](https://kubernetes.io/docs/reference/command-line-tools-reference/kube-controller-manager/)
	ControllerExtraArgs map[string]string `yaml:"controllerExtraArgs,omitempty" json:"controllerExtraArgs,omitempty"`
	// Configure additional kube-scheduler [flags](https://kubernetes.io/docs/reference/command-line-tools-reference/kube-scheduler/)
	SchedulerExtraArgs map[string]string `yaml:"schedulerExtraArgs,omitempty" json:"schedulerExtraArgs,omitempty"`
	// Configure additional kube-apiserver [flags](https://kubernetes.io/docs/reference/command-line-tools-reference/kube-apiserver/)
	APIServerExtraArgs map[string]string `yaml:"apiServerExtraArgs,omitempty" json:"apiServerExtraArgs,omitempty"`
	// Configure additional etcd [flags](https://github.com/etcd-io/etcd/blob/master/Documentation/op-guide/configuration.md)
	EtcdExtraArgs map[string]string `yaml:"etcdExtraArgs,omitempty" json:"etcdExtraArgs,omitempty"`
	MasterIP      string            `yaml:"masterIP,omitempty" json:"masterIP,omitempty"`
	// Configure Kubernetes auditing
	AuditConfig AuditConfig `yaml:"auditing,omitempty" json:"auditing,omitempty"`
	// EncryptionConfig is used to specify the encryption configuration file.
	EncryptionConfig EncryptionConfig `yaml:"encryption,omitempty" json:"encryption,omitempty"`
	// Configure container runtime: docker/containerd
	ContainerRuntime string `yaml:"containerRuntime" json:"containerRuntime,omitempty"`
	// True for a managed cluster where the user does not have access to the control plane
	Managed bool `yaml:"managed,omitempty" json:"managed,omitempty"`
}

type Ldap struct {
	Disabled bool   `yaml:"disabled,omitempty" json:"disabled,omitempty"`
	Host     string `yaml:"host,omitempty" json:"host,omitempty"`
	Port     string `yaml:"port,omitempty" json:"port,omitempty"`
	Username string `yaml:"username,omitempty" json:"username,omitempty"`
	Password string `yaml:"password,omitempty" json:"password,omitempty"`
	Domain   string `yaml:"domain,omitempty" json:"domain,omitempty"`
	// Members of this group will become cluster-admins
	AdminGroup string `yaml:"adminGroup,omitempty" json:"adminGroup,omitempty"`
	UserDN     string `yaml:"userDN,omitempty" json:"userDN,omitempty"`
	GroupDN    string `yaml:"groupDN,omitempty" json:"groupDN,omitempty"`
	// GroupObjectClass is used for searching user groups in LDAP. Default is `group` for Active Directory and `groupOfNames` for Apache DS
	GroupObjectClass string `yaml:"groupObjectClass,omitempty" json:"groupObjectClass,omitempty"`
	// GroupNameAttr is the attribute used for returning group name in OAuth tokens. Default is `name` in ActiveDirectory and `DN` in Apache DS
	GroupNameAttr string   `yaml:"groupNameAttr,omitempty" json:"groupNameAttr,omitempty"`
	UserGroups    []string `yaml:"userGroups" json:"userGroups"`
	E2E           LdapE2E  `yaml:"e2e,omitempty" json:"e2e,omitempty"`
}

type LdapE2E struct {
	// Ff true, deploy a mock LDAP server for testing
	Mock bool `yaml:"mock,omitempty" json:"mock,omitempty"`
	// Username to be used for OIDC integration tests
	Username string `yaml:"username,omitempty" json:"username,omitempty"`
	// Password to be used for or OIDC integration tests
	Password string `yaml:"password,omitempty" json:"password,omitempty"`
}

type LetsencryptIssuer struct {
	XDisabled `yaml:",inline" json:",inline"`
	Email     string `yaml:"email,omitempty" json:"email,omitempty"`
	URL       string `yaml:"url,omitempty" json:"url,omitempty"`
}

type LoadBalancerConfig struct {
	Ports       []string     `json:"ports" yaml:"ports"`
	MonitorPort *MonitorPort `json:"monitorPort,omitempty" yaml:"monitorPort,omitempty"`
}

type LocalPath struct {
	XEnabled `yaml:",inline" json:",inline"`
}

type LogsExporter struct {
	XDisabled  `yaml:",inline" json:",inline"`
	SyncPeriod string `yaml:"syncPeriod" json:"syncPeriod"`
}

type Machine interface {
	TagInterface
	String() string
	WaitForPoweredOff() error
	GetIP(timeout time.Duration) (string, error)
	WaitForIP() (string, error)
	SetAttributes(attributes map[string]string) error
	GetAttributes() (map[string]string, error)
	Shutdown() error
	PowerOff() error
	Terminate() error
	Name() string
	GetAge() time.Duration
	GetTemplate() string
	IP() string
	Reference() types.ManagedObjectReference
}

type Memory struct {
	Requests string `yaml:"requests,omitempty" json:"requests,omitempty"`
	Limits   string `yaml:"limits,omitempty" json:"limits,omitempty"`
}

type Minio struct {
	XDisabled    `yaml:",inline" json:",inline"`
	Replicas     int         `yaml:"replicas,omitempty" json:"replicas,omitempty"`
	AccessKey    string      `yaml:"access_key,omitempty" json:"access_key,omitempty"`
	SecretKey    string      `yaml:"secret_key,omitempty" json:"secret_key,omitempty"`
	KMSMasterKey string      `yaml:"kmsMasterKey,omitempty" json:"kmsMasterKey,omitempty"`
	Persistence  Persistence `yaml:"persistence,omitempty" json:"persistence,omitempty"`
}

type Modsecurity struct {
	Disabled        bool        `yaml:"disabled,omitempty" json:"disabled,omitempty"`
	FilebeatVersion string      `yaml:"filebeatVersion,omitempty" json:"filebeatVersion,omitempty"`
	Index           string      `yaml:"index" json:"index"`
	Elasticsearch   *Connection `yaml:"elasticsearch,omitempty" json:"elasticsearch,omitempty"`
}

type MongodbOperator struct {
	XDisabled `yaml:",inline" json:",inline"`
}

type MonitorPort struct {
	Port      string `json:"port" yaml:"port"`
	Timeout   int64  `json:"timeout" yaml:"timeout"`
	Interval  int64  `json:"interval" yaml:"interval"`
	RiseCount int64  `json:"riseCount" yaml:"riseCount"`
	FallCount int64  `json:"fallCount" yaml:"fallCount"`
}

type Monitoring struct {
	Disabled           Boolean       `yaml:"disabled,omitempty" json:"disabled,omitempty"`
	AlertEmail         string        `yaml:"alert_email,omitempty" json:"alert_email,omitempty"`
	Version            string        `yaml:"version,omitempty" json:"version,omitempty"`
	Prometheus         Prometheus    `yaml:"prometheus,omitempty" json:"prometheus,omitempty"`
	Karma              Karma         `yaml:"karma,omitempty" json:"karma,omitempty"`
	Grafana            Grafana       `yaml:"grafana,omitempty" json:"grafana,omitempty"`
	AlertManager       AlertManager  `yaml:"alertmanager,omitempty" json:"alertManager,omitempty"`
	KubeStateMetrics   string        `yaml:"kubeStateMetrics,omitempty" json:"kubeStateMetrics,omitempty"`
	KubeRbacProxy      string        `yaml:"kubeRbacProxy,omitempty" json:"kubeRbacProxy,omitempty"`
	NodeExporter       string        `yaml:"nodeExporter,omitempty" json:"nodeExporter,omitempty"`
	AddonResizer       string        `yaml:"addonResizer,omitempty" json:"addonResizer,omitempty"`
	PrometheusOperator string        `yaml:"prometheus_operator,omitempty" json:"prometheus_operator,omitempty"`
	ExcludeAlerts      []string      `yaml:"excludeAlerts,omitempty" json:"excludeAlerts,omitempty"`
	PushGateway        PushGateway   `yaml:"pushGateway,omitempty" json:"pushGateway,omitempty"`
	E2E                MonitoringE2E `yaml:"e2e,omitempty" json:"e2e,omitempty"`
}

type MonitoringE2E struct {
	// MinAlertLevel is the minimum alert level for which E2E tests should fail. can be
	// can be one of critical, warning, info
	MinAlertLevel string `yaml:"minAlertLevel,omitempty" json:"minAlertLevel,omitempty"`
}

type NFS struct {
	Host string `yaml:"host,omitempty" json:"host,omitempty"`
	Path string `yaml:"path,omitempty" json:"path,omitempty"`
}

type NSX struct {
	LoadBalancerIPPool string `yaml:"loadbalancer_ip_pool,omitempty" json:"loadBalancerIPPool,omitempty"`
	Tier0              string `yaml:"tier0,omitempty" json:"tier0,omitempty"`
	Disabled           bool   `structs:"-" yaml:"disabled" json:"disabled,omitempty"`
	CNIDisabled        bool   `structs:"-" yaml:"cniDisabled" json:"cniDisabled,omitempty"`
	Image              string `structs:"image" yaml:"image" json:"image"`
	Version            string `structs:"-" yaml:"version" json:"version"`
	// If set to true, the logging level will be set to DEBUG instead of the
	// default INFO level.
	Debug *bool `structs:"debug,omitempty" yaml:"debug,omitempty" json:"debug,omitempty"`
	// If set to true, log output to standard error.
	UseStderr *bool `structs:"use_stderr,omitempty" yaml:"use_stderr,omitempty" json:"use_stderr,omitempty"`

	// If set to true, use syslog for logging.
	UseSyslog *bool `structs:"use_syslog,omitempty" yaml:"use_syslog,omitempty" json:"use_syslog,omitempty"`

	// The base directory used for relative log_file paths.
	LogDir string `structs:"log_dir,omitempty" yaml:"log_dir,omitempty" json:"log_dir,omitempty"`

	// Name of log file to send logging output to.
	LogFile string `structs:"log_file,omitempty" yaml:"log_file,omitempty" json:"log_file,omitempty"`

	// max MB for each compressed file. Defaults to 100 MB.
	//log_rotation_file_max_mb = 100
	LogRotationFileMaxMb *int `` /* 128-byte string literal not displayed */

	// Total number of compressed backup files to store. Defaults to 5.
	LogRotationBackupCount *int `` /* 131-byte string literal not displayed */

	// Specify the directory where nsx-python-logging is installed
	NsxPythonLoggingPath string `structs:"nsx_python_logging_path,omitempty" yaml:"nsx_python_logging_path,omitempty" json:"nsx_python_logging_path,omitempty"`

	// Specify the directory where nsx-cli is installed
	NsxCliPath string `structs:"nsx_cli_path,omitempty" yaml:"nsx_cli_path,omitempty" json:"nsx_cli_path,omitempty"`

	NsxV3 *NsxV3 `structs:"nsx_v3,omitempty" yaml:"nsx_v3,omitempty" json:"nsx_v3,omitempty"`

	NsxHA *NsxHA `structs:"ha,omitempty" yaml:"nsx_ha,omitempty" json:"nsx_ha,omitempty"`

	NsxCOE *NsxCOE `structs:"coe,omitempty" yaml:"coe,omitempty" json:"coe,omitempty"`

	NsxK8s *NsxK8s `structs:"k8s" yaml:"nsx_k8s,omitempty" json:"nsx_k8s,omitempty"`

	NsxNodeAgent *NsxNodeAgent `structs:"nsx_node_agent" yaml:"nsx_node_agent,omitempty" json:"nsx_node_agent,omitempty"`
}

type NamespaceConfigurator struct {
	XEnabled `yaml:",inline" json:",inline"`
}

type Nginx struct {
	Disabled bool `yaml:"disabled" json:"disabled"`
	// The version of the nginx controller to deploy (default: `0.25.1.flanksource.1`)
	Version            string `yaml:"version" json:"version"`
	DisableHostNetwork bool   `yaml:"disableHostNetwork" json:"disableHostNetwork"`

	// Configurations to apply to Nginx, see [configmap](https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/) for a full list of options
	Config      map[string]string `yaml:"config,omitempty" json:"config,omitempty"`
	Modsecurity *Modsecurity      `yaml:"modsecurity,omitempty" json:"modsecurity,omitempty"`
}

type NodeLocalDNS struct {
	Disabled  bool   `yaml:"disabled,omitempty" json:"disabled,omitempty"`
	DNSServer string `yaml:"dnsServer,omitempty" json:"dnsServer,omitempty"`
	LocalDNS  string `yaml:"localDNS,omitempty" json:"localDNS,omitempty"`
	DNSDomain string `yaml:"dnsDomain,omitempty" json:"dnsDomain,omitempty"`
}

type NsxCOE struct {

	// Container orchestrator adaptor to plug in.
	Adaptor string `structs:"adaptor,omitempty" yaml:"adaptor,omitempty" json:"adaptor,omitempty"`

	// Specify cluster for adaptor.
	Cluster string `structs:"cluster,omitempty" yaml:"cluster,omitempty" json:"cluster,omitempty"`

	// Log level for NCP operations
	// Choices: NOTSET DEBUG INFO WARNING ERROR CRITICAL
	Loglevel string `structs:"loglevel,omitempty" yaml:"loglevel,omitempty" json:"loglevel,omitempty"`

	// Log level for NSX API client operations
	// Choices: NOTSET DEBUG INFO WARNING ERROR CRITICAL
	NsxlibLoglevel string `structs:"nsxlib_loglevel,omitempty" yaml:"nsxlib_loglevel,omitempty" json:"nsxlib_loglevel,omitempty"`

	// Enable SNAT for all projects in this cluster
	EnableSnat *bool `structs:"enable_snat,omitempty" yaml:"enable_snat,omitempty" json:"enable_snat,omitempty"`

	// Option to enable profiling
	Profiling *bool `structs:"profiling,omitempty" yaml:"profiling,omitempty" json:"profiling,omitempty"`

	// The type of container host node
	// Choices: HOSTVM BAREMETAL CLOUD WCP_WORKER
	NodeType string `structs:"node_type,omitempty" yaml:"node_type,omitempty" json:"node_type,omitempty"`

	// The time in seconds for NCP/nsx_node_agent to recover the connection to
	// NSX manager/container orchestrator adaptor/Hyperbus before exiting. If
	// the value is 0, NCP/nsx_node_agent wont exit automatically when the
	// connection check fails
	ConnectRetryTimeout *int `structs:"connect_retry_timeout,omitempty" yaml:"connect_retry_timeout,omitempty" json:"connect_retry_timeout,omitempty"`
}

type NsxHA struct {

	// Time duration in seconds of mastership timeout. NCP instance will remain
	// master for this duration after elected. Note that the heartbeat period
	// plus the update timeout must not be greater than this period. This is
	// done to ensure that the master instance will either confirm liveness or
	// fail before the timeout.
	MasterTimeout *int `structs:"master_timeout,omitempty" json:"master_timeout,omitempty"`

	// Time in seconds between heartbeats for elected leader. Once an NCP
	// instance is elected master, it will periodically confirm liveness based
	// on this value.
	HeartbeatPeriod *int `structs:"heartbeat_period,omitempty" json:"heartbeat_period,omitempty"`

	// Timeout duration in seconds for update to election resource. The default
	// value is calculated by subtracting heartbeat period from master timeout.
	// If the update request does not complete before the timeout it will be
	// aborted. Used for master heartbeats to ensure that the update fstructs:shes or
	// is aborted before the master timeout occurs.
	UpdateTimeout *int `structs:"update_timeout,omitempty" json:"update_timeout,omitempty"`
}

type NsxK8s struct {
	// Kubernetes API server IP address.
	ApiserverHostIP string `structs:"apiserver_host_ip,omitempty" yaml:"apiserver_host_ip,omitempty" json:"apiserver_host_ip,omitempty"`

	// Kubernetes API server port.
	ApiserverHostPort string `structs:"apiserver_host_port,omitempty" yaml:"apiserver_host_port,omitempty" json:"apiserver_host_port,omitempty"`

	// Full path of the Token file to use for authenticating with the k8s API
	// server.
	ClientTokenFile string `structs:"client_token_file,omitempty" yaml:"client_token_file,omitempty" json:"client_token_file,omitempty"`

	// Full path of the client certificate file to use for authenticating with
	// the k8s API server. It must be specified together with
	// "client_private_key_file".
	ClientCertFile string `structs:"client_cert_file,omitempty" yaml:"client_cert_file,omitempty" json:"client_cert_file,omitempty"`

	ClientPrivateKeyFile string `structs:"client_private_key_file,omitempty" yaml:"client_private_key_file,omitempty" json:"client_private_key_file,omitempty"`

	// Specify a CA bundle file to use in verifying the k8s API server
	// certificate.
	CaFile string `structs:"ca_file,omitempty" yaml:"ca_file,omitempty" json:"ca_file,omitempty"`

	// Specify whether ingress controllers are expected to be deployed in
	// hostnework mode or as regular pods externally accessed via NAT
	// Choices: hostnetwork nat
	IngressMode string `structs:"ingress_mode,omitempty" yaml:"ingress_mode,omitempty" json:"ingress_mode,omitempty"`

	// Log level for the kubernetes adaptor
	// Choices: NOTSET DEBUG INFO WARNING ERROR CRITICAL
	Loglevel string `structs:"loglevel,omitempty" yaml:"loglevel,omitempty" json:"loglevel,omitempty"`

	HTTPIngressPort *int `structs:"http_ingress_port,omitempty" yaml:"http_ingress_port,omitempty" json:"http_ingress_port,omitempty"`

	// The default HTTPS ingress port
	HTTPSIngressPort *int `structs:"https_ingress_port,omitempty" yaml:"https_ingress_port,omitempty" json:"https_ingress_port,omitempty"`

	// Specify thread pool size to process resource events
	ResourceWatcherThreadPoolSize *int `` /* 155-byte string literal not displayed */

	// User specified IP address for HTTP and HTTPS ingresses
	// nolint: golint, stylecheck
	HttpAndHttpsIngressIp string `` /* 131-byte string literal not displayed */

	// Set this to True to enable NCP to create segment port for VM through
	// NsxNetworkInterface CRD.
	EnableNsxNetifCrd *bool `structs:"enable_nsx_netif_crd,omitempty" yaml:"enable_nsx_netif_crd,omitempty" json:"enable_nsx_netif_crd,omitempty"`

	// Option to set the type of baseline cluster policy. ALLOW_CLUSTER creates
	// an explicit baseline policy to allow any pod to communicate any other pod
	// within the cluster. ALLOW_NAMESPACE creates an explicit baseline policy
	// to allow pods within the same namespace to communicate with each other.
	// By default, no baseline rule will be created and the cluster will assume
	// the default behavior as specified by the backend.
	// Choices: <None> allow_cluster allow_namespace
	BaselinePolicyType string `structs:"baseline_policy_type,omitempty" yaml:"baseline_policy_type,omitempty" json:"baseline_policy_type,omitempty"`
}

type NsxNodeAgent struct {

	// The log level of NSX RPC library
	// Choices: NOTSET DEBUG INFO WARNING ERROR CRITICAL
	LogLevel string `structs:"nsxrpc_loglevel,omitempty" yaml:"log_level,omitempty" json:"log_level,omitempty"`

	// OVS bridge name
	OvsBridge string `structs:"ovs_bridge,omitempty" yaml:"ovs_bridge,omitempty" json:"ovs_bridge,omitempty"`

	// The OVS uplink OpenFlow port where to apply the NAT rules to.
	OvsUplinkPort string `structs:"ovs_uplink_port,omit_empty" yaml:"ovs_uplink_port,omitempty" json:"ovs_uplink_port,omitempty"`

	// The time in seconds for nsx_node_agent to wait CIF config from HyperBus
	// before returning to CNI
	ConfigRetryTimeout *int `structs:"config_retry_timeout,omitempty" yaml:"config_retry_timeout,omitempty" json:"config_retry_timeout,omitempty"`

	// The time in seconds for nsx_node_agent to backoff before re-using an
	// existing cached CIF to serve CNI request. Must be less than config_retry_timeout.
	ConfigReuseBackoffTime *int `` /* 131-byte string literal not displayed */
}

type NsxV3 struct {
	NsxAPIUser   string `structs:"nsx_api_user,omitempty" yaml:"nsx_api_user,omitempty" json:"nsx_api_user,omitempty"`
	NsxAPIPass   string `structs:"nsx_api_password,omitempty" yaml:"nsx_api_password,omitempty" json:"nsx_api_password,omitempty"`
	PolicyNSXAPI *bool  `structs:"policy_nsxapi" yaml:"policy_nsxapi,omitempty" json:"policy_nsxapi,omitempty"`
	// Path to NSX client certificate file. If specified, the nsx_api_user and
	// nsx_api_password options will be ignored. Must be specified along with
	// nsx_api_private_key_file option
	NsxAPICertFile string `structs:"nsx_api_cert_file,omitempty" yaml:"nsx_api_cert_file,omitempty" json:"nsx_api_cert_file,omitempty"`

	// Path to NSX client private key file. If specified, the nsx_api_user and
	// nsx_api_password options will be ignored. Must be specified along with
	// nsx_api_cert_file option
	NsxAPIPrivateKeyFile string `` /* 128-byte string literal not displayed */

	// IP address of one or more NSX managers separated by commas. The IP
	// address should be of the form:
	// [<scheme>://]<ip_adress>[:<port>]
	// If
	// scheme is not provided https is used. If port is not provided port 80 is
	// used for http and port 443 for https.
	NsxAPIManagers []string `structs:"nsx_api_managers,omitempty" yaml:"nsx_api_managers,omitempty" json:"nsx_api_managers,omitempty"`

	// If True, skip fatal errors when no endpoint in the NSX management cluster
	// is available to serve a request, and retry the request instead
	ClusterUnavailableRetry *bool `` /* 131-byte string literal not displayed */

	// Maximum number of times to retry API requests upon stale revision errors.
	Retries *int `structs:"retries,omitempty" yaml:"retries,omitempty" json:"retries,omitempty"`

	// Specify one or a list of CA bundle files to use in verifying the NSX
	// Manager server certificate. This option is ignored if "insecure" is set
	// to True. If "insecure" is set to False and ca_file is unset, the system
	// root CAs will be used to verify the server certificate.
	CaFile []string `structs:"ca_file,omitempty" yaml:"ca_file,omitempty" json:"ca_file,omitempty"`

	// If true, the NSX Manager server certificate is not verified. If false the
	// CA bundle specified via "ca_file" will be used or if unset the default
	// system root CAs will be used.
	Insecure *bool `structs:"insecure,omitempty" yaml:"insecure,omitempty" json:"insecure,omitempty"`

	// The time in seconds before aborting a HTTP connection to a NSX manager.
	HTTPTimeout *int `structs:"http_timeout,omitempty" yaml:"http_timeout,omitempty" json:"http_timeout,omitempty"`

	// The time in seconds before aborting a HTTP read response from a NSX
	// manager.
	HTTPReadTimeout *int `structs:"http_read_timeout,omitempty" yaml:"http_read_timeout,omitempty" json:"http_read_timeout,omitempty"`

	// Maximum number of times to retry a HTTP connection.
	HTTPRetries *int `structs:"http_retries,omitempty" yaml:"http_retries,omitempty" json:"http_retries,omitempty"`

	// Maximum concurrent connections to each NSX manager.
	ConcurrentConnections *int `structs:"concurrent_connections,omitempty" yaml:"concurrent_connections,omitempty" json:"concurrent_connections,omitempty"`

	// The amount of time in seconds to wait before ensuring connectivity to the
	// NSX manager if no manager connection has been used.
	ConnIdltTimeout *int `structs:"conn_idlt_timeout,omitempty" yaml:"conn_idlt_timeout,omitempty" json:"conn_idlt_timeout,omitempty"`

	// Number of times a HTTP redirect should be followed.
	Redirects *int `structs:"redirects,omitempty" yaml:"redirects,omitempty" json:"redirects,omitempty"`

	// Subnet prefix of IP block.
	SubnetPrefix *int `structs:"subnet_prefix,omitempty" yaml:"subnet_prefix,omitempty" json:"subnet_prefix,omitempty"`

	// Indicates whether distributed firewall DENY rules are logged.
	LogDroppedTraffic *bool `structs:"log_dropped_traffic,omitempty" yaml:"log_dropped_traffic,omitempty" json:"log_dropped_traffic,omitempty"`

	// Option to use native load balancer or not
	UseNativeLoadbalancer *bool `structs:"use_native_loadbalancer,omitempty" yaml:"use_native_loadbalancer,omitempty" json:"use_native_loadbalancer,omitempty"`

	// Option to auto scale layer 4 load balancer or not. If set to True, NCP
	// will create additional LB when necessary upon K8s Service of type LB
	// creation/update.
	L4LBAutoScaling *bool `structs:"l_4_lb_auto_scaling,omitempty" yaml:"l_4_lb_auto_scaling,omitempty" json:"l_4_lb_auto_scaling,omitempty"`

	// Option to use native load balancer or not when ingress class annotation
	// is missing. Only effective if use_native_loadbalancer is set to true
	DefaultIngressClassNsx *bool `` /* 131-byte string literal not displayed */

	// Path to the default certificate file for HTTPS load balancing. Must be
	// specified along with lb_priv_key_path option
	LBDefaultCertPath string `structs:"lb_default_cert_path,omitempty" yaml:"lb_default_cert_path,omitempty" json:"lb_default_cert_path,omitempty"`

	// Path to the private key file for default certificate for HTTPS load
	// balancing. Must be specified along with lb_default_cert_path option
	LBPrivKeyPath string `structs:"lb_priv_key_path,omitempty" yaml:"lb_priv_key_path,omitempty" json:"lb_priv_key_path,omitempty"`

	// Option to set load balancing algorithm in load balancer pool object.
	// Choices: ROUND_ROBIN LEAST_CONNECTION IP_HASH WEIGHTED_ROUND_ROBIN
	PoolAlgorithm string `structs:"pool_algorithm,omitempty" yaml:"pool_algorithm,omitempty" json:"pool_algorithm,omitempty"`

	// Option to set load balancer service size. MEDIUM Edge VM (4 vCPU, 8GB)
	// only supports SMALL LB. LARGE Edge VM (8 vCPU, 16GB) only supports MEDIUM
	// and SMALL LB. Bare Metal Edge (IvyBridge, 2 socket, 128GB) supports
	// LARGE, MEDIUM and SMALL LB
	// Choices: SMALL MEDIUM LARGE
	ServiceSize string `structs:"service_size,omitempty" yaml:"service_size,omitempty" json:"service_size,omitempty"`

	// Option to set load balancer persistence option. If cookie is selected,
	// cookie persistence will be offered.If source_ip is selected, source IP
	// persistence will be offered for ingress traffic through L7 load balancer
	// Choices: <None> cookie source_ip
	L7Persistence string `structs:"l7_persistence,omitempty" yaml:"l7_persistence,omitempty" json:"l7_persistence,omitempty"`

	// An integer for LoadBalancer side timeout value in seconds on layer 7
	// persistence profile, if the profile exists.
	L7PersistenceTimeout *int `structs:"l7_persistence_timeout,omitempty" yaml:"l7_persistence_timeout,omitempty" json:"l7_persistence_timeout,omitempty"`

	// Option to set load balancer persistence option. If source_ip is selected,
	// source IP persistence will be offered for ingress traffic through L4 load
	// balancer
	L4Persistence string `structs:"l4_persistence,omitempty" yaml:"l4_persistence,omitempty" json:"l4_persistence,omitempty"`

	// The interval to check VIF for node. It is a workaroud for bug 2006790.
	// Old orphan LSP may not be removed on MP, so NCP will retrieve parent VIF
	// back once in a while. NCP will use the last created LSP from the list
	VIFCheckInterval *int `structs:"vif_check_interval,omitempty" yaml:"vif_check_interval,omitempty" json:"vif_check_interval,omitempty"`

	// Name or UUID of the container ip blocks that will be used for creating
	// subnets. If name, it must be unique. If policy_nsxapi is enabled, it also
	// support automatically creating the IP blocks. The definition is a comma
	// separated list: CIDR,CIDR,... Mixing different formats (e.g. UUID,CIDR)
	// is not supported.
	ContainerIPBlocks []string `structs:"container_ip_blocks,omitempty" yaml:"container_ip_blocks,omitempty" json:"container_ip_blocks,omitempty"`

	// Name or UUID of the container ip blocks that will be used for creating
	// subnets for no-SNAT projects. If specified, no-SNAT projects will use
	// these ip blocks ONLY. Otherwise they will use container_ip_blocks
	NoSNATIPBlocks []string `structs:"no_snat_ip_blocks,omitempty" yaml:"no_snat_ip_blocks,omitempty" json:"no_snat_ip_blocks,omitempty"`

	// Name or UUID of the external ip pools that will be used for allocating IP
	// addresses which will be used for translating container IPs via SNAT
	// rules. If policy_nsxapi is enabled, it also support automatically
	// creating the ip pools. The definition is a comma separated list:
	// CIDR,IP_1-IP_2,... Mixing different formats (e.g. UUID, CIDR&IP_Range) is
	// not supported.
	ExternalIPPools []string `structs:"external_ip_pools,omitempty" yaml:"external_ip_pools,omitempty" json:"external_ip_pools,omitempty"`

	// Name or UUID of the top-tier router for the container cluster network,
	// which could be either tier0 or tier1. When policy_nsxapi is enabled,
	// single_tier_topology is True and tier0_gateway is defined,
	// top_tier_router value can be empty and a tier1 gateway is automatically
	// created for the cluster
	TopTierRouter string `structs:"top_tier_router,omitempty" yaml:"top_tier_router,omitempty" json:"top_tier_router,omitempty"`

	// Name or UUID of the external ip pools that will be used only for
	// allocating IP addresses for Ingress controller and LB service
	ExternalIPPoolsLB []string `structs:"external_ip_pools_lb,omitempty" yaml:"external_ip_pools_lb,omitempty" json:"external_ip_pools_lb,omitempty"`

	// Name or UUID of the NSX overlay transport zone that will be used for
	// creating logical switches for container networking. It must refer to an
	// already existing resource on NSX and every transport node where VMs
	// hosting containers are deployed must be enabled on this transport zone
	OverlayTZ string `structs:"overlay_tz,omitempty" yaml:"overlay_tz,omitempty" json:"overlay_tz,omitempty"`

	// Enable X_forward_for for ingress. Available values are INSERT or REPLACE.
	// When this config is set, if x_forwarded_for is missing, LB will add
	// x_forwarded_for in the request header with value client ip. When
	// x_forwarded_for is present and its set to REPLACE, LB will replace
	// x_forwarded_for in the header to client_ip. When x_forwarded_for is
	// present and its set to INSERT, LB will append client_ip to
	// x_forwarded_for in the header. If not wanting to use x_forwarded_for,
	// remove this config
	// Choices: <None> INSERT REPLACE
	XForwardedFor string `structs:"x_forwarded_for,omitempty" yaml:"x_forwarded_for,omitempty" json:"x_forwarded_for,omitempty"`

	// Name or UUID of the spoof guard switching profile that will be used by
	// NCP for leader election
	ElectionProfile string `structs:"election_profile,omitempty" yaml:"election_profile,omitempty" json:"election_profile,omitempty"`

	// Name or UUID of the firewall section that will be used to create firewall
	// sections below this mark section
	TopFirewallSectionMarker string `` /* 137-byte string literal not displayed */

	// Name or UUID of the firewall section that will be used to create firewall
	// sections above this mark section
	BottomFirewallSectionMarker string `` /* 146-byte string literal not displayed */

	// Replication mode of container logical switch, set SOURCE for cloud as it
	// only supports head replication mode
	// Choices: MTEP SOURCE
	LSReplicationMode string `structs:"ls_replication_mode,omitempty" yaml:"ls_replication_mode,omitempty" json:"ls_replication_mode,omitempty"`

	// Allocate vlan ID for container interface or not. Set it to False for
	// cloud mode.
	AllocVlanTag string `structs:"alloc_vlan_tag,omitempty" yaml:"alloc_vlan_tag,omitempty" json:"alloc_vlan_tag,omitempty"`

	// The resource which NCP will search tag 'node_name' on, to get parent VIF
	// or transport node uuid for container LSP API context field. For HOSTVM
	// mode, it will search tag on LSP. For BM mode, it will search tag on LSP
	// then search TN. For CLOUD mode, it will search tag on VM. For WCP_WORKER
	// mode, it will search TN by hostname.
	// Choices: tag_on_lsp tag_on_tn tag_on_vm hostname_on_tn
	//search_node_tag_on = tag_on_lsp
	SearchNodeTagOn string `structs:"search_node_tag_on,omitempty" yaml:"search_node_tag_on,omitempty" json:"search_node_tag_on,omitempty"`

	// Determines which kind of information to be used as VIF app_id. Defaults
	// to pod_resource_key. In WCP mode, pod_uid is used.
	// Choices: pod_resource_key pod_uid
	VifAppIDType string `structs:"vif_app_id_type,omitempty" yaml:"vif_app_id_type,omitempty" json:"vif_app_id_type,omitempty"`

	// SNAT IP to secondary IPs mapping. In the cloud case, SNAT rules are
	// created using the PCG public or link local IPs, local IPs which will be
	// translated to PCG secondary IPs for on-prem traffic. The secondary IPs
	// might be used by admstructs:strator to configure on-prem firewall or other
	// physical network services.
	SnatSecondaryIps []string `structs:"snat_secondary_ips,omitempty" yaml:"snat_secondary_ips,omitempty" json:"snat_secondary_ips,omitempty"`

	// If this value is not empty, NCP will append it to nameserver list
	DNSServers []string `structs:"dns_servers,omitempty" yaml:"dns_servers,omitempty" json:"dns_servers,omitempty"`

	// Set this to True to enable NCP to report errors through NSXError CRD.
	EnableNsxErrCrd *bool `structs:"enable_nsx_err_crd,omitempty" yaml:"enable_nsx_err_crd,omitempty" json:"enable_nsx_err_crd,omitempty"`

	// Maximum number of virtual servers allowed to create in cluster for
	// LoadBalancer type of services.
	MaxAllowedVirtualServers *int `` /* 137-byte string literal not displayed */

	// Edge cluster ID needed when creating Tier1 router for loadbalancer
	// service. Information could be retrieved from Tier0 router
	EdgeCluster string `structs:"edge_cluster,omitempty" yaml:"edge_cluster,omitempty" json:"edge_cluster,omitempty"`
}

type NullMachine struct {
	Hostname string
}

type OAuth2Proxy struct {
	Disabled bool   `yaml:"disabled" json:"disabled"`
	Version  string `yaml:"version,omitempty" json:"version,omitempty"`
	Redis    *Redis `yaml:"redis,omitempty" json:"redis,omitempty"`
}

type Packetbeat struct {
	XDisabled     `yaml:",inline" json:",inline"`
	Elasticsearch *Connection `yaml:"elasticsearch,omitempty" json:"elasticsearch,omitempty"`
	Kibana        *Connection `yaml:"kibana,omitempty" json:"kibana,omitempty"`
}

type Persistence struct {
	// Enable persistence for Prometheus
	Enabled bool `yaml:"enabled" json:"enabled"`
	// Storage class to use. If not set default one will be used
	StorageClass string `yaml:"storageClass,omitempty" json:"storageClass,omitempty"`
	// Capacity. Required if persistence is enabled
	Capacity string `yaml:"capacity,omitempty" json:"capacity,omitempty"`
}

type PlatformConfig struct {
	AWS               AWS               `yaml:"aws,omitempty" json:"aws,omitempty"`
	Antrea            Antrea            `yaml:"antrea,omitempty" json:"antrea,omitempty"`
	ArgocdOperator    ArgocdOperator    `yaml:"argocdOperator,omitempty" json:"argocdOperator,omitempty"`
	ArgoRollouts      ArgoRollouts      `yaml:"argoRollouts,omitempty" json:"argoRollouts,omitempty"`
	Auditbeat         Auditbeat         `yaml:"auditbeat,omitempty" json:"auditbeat,omitempty"`
	Brand             Brand             `yaml:"brand,omitempty" json:"brand,omitempty"`
	CA                *CA               `yaml:"ca" json:"ca,omitempty"`
	Calico            Calico            `yaml:"calico,omitempty" json:"calico,omitempty"`
	CanaryChecker     CanaryChecker     `yaml:"canaryChecker,omitempty" json:"canaryChecker,omitempty"`
	CertManager       CertManager       `yaml:"certmanager,omitempty" json:"certmanager,omitempty"`
	ConfigFrom        []ConfigDirective `yaml:"configFrom,omitempty" json:"configFrom,omitempty"`
	ConfigMapReloader ConfigMapReloader `yaml:"configmapReloader,omitempty" json:"configmapReloader,omitempty"`
	// The endpoint for an externally hosted consul cluster  that is used for master discovery
	Consul    string    `yaml:"consul" json:"consul,omitempty"`
	Dashboard Dashboard `yaml:"dashboard,omitempty" json:"dashboard,omitempty"`
	// Semistructured data to be reused using YAML anchors
	Data           map[string]json.RawMessage `yaml:"data,omitempty" json:"data,omitempty"`
	Datacenter     string                     `yaml:"datacenter" json:"datacenter,omitempty"`
	Dex            Dex                        `yaml:"dex,omitempty" json:"dex,omitempty"`
	DNS            DynamicDNS                 `yaml:"dns,omitempty" json:"dns,omitempty"`
	DockerRegistry string                     `yaml:"dockerRegistry,omitempty" json:"dockerRegistry,omitempty"`
	// The wildcard domain that cluster will be available at
	Domain        string         `yaml:"domain" json:"domain,omitempty"`
	ECK           ECK            `yaml:"eck,omitempty" json:"eck,omitempty"`
	Elasticsearch *Elasticsearch `yaml:"elasticsearch,omitempty" json:"elasticsearch,omitempty"`
	EventRouter   EventRouter    `yaml:"eventrouter,omitempty" json:"eventrouter,omitempty"`
	ExternalDNS   ExternalDNS    `yaml:"externalDns,omitempty" json:"externalDns,omitempty"`
	Filebeat      []Filebeat     `yaml:"filebeat,omitempty" json:"filebeat,omitempty"`
	Flux          Flux           `yaml:"flux,omitempty" json:"flux,omitempty"`
	GCP           GCP            `yaml:"gcp,omitempty" json:"gcp:omitempty"`
	Gatekeeper    Gatekeeper     `yaml:"gatekeeper,omitempty" json:"gatekeeper,omitempty"`
	GitOperator   GitOperator    `yaml:"gitOperator,omitempty" json:"gitOperator,omitempty"`
	GitOps        []GitOps       `yaml:"gitops,omitempty" json:"gitops,omitempty"`
	Harbor        Harbor         `yaml:"harbor,omitempty" json:"harbor,omitempty"`
	// A prefix to be added to VM hostnames.
	HostPrefix string `yaml:"hostPrefix" json:"hostPrefix,omitempty"`
	// Deprecated, use configFrom instead
	ImportConfigs         []string               `yaml:"importConfigs,omitempty" json:"importConfigs,omitempty"`
	ImportSecrets         []v1.SecretReference   `yaml:"importSecrets,omitempty" json:"importSecrets,omitempty"`
	IngressCA             *CA                    `yaml:"ingressCA" json:"ingressCA,omitempty"`
	IstioOperator         IstioOperator          `yaml:"istioOperator,omitempty" json:"istioOperator,omitempty"`
	Journalbeat           Journalbeat            `yaml:"journalbeat,omitempty" json:"journalbeat,omitempty"`
	Keptn                 Keptn                  `yaml:"keptn,omitempty" json:"keptn,omitempty"`
	KarinaOperator        KarinaOperator         `yaml:"karinaOperator,omitempty" json:"karinaOperator,omitempty"`
	Kind                  Kind                   `yaml:"kind,omitempty" json:"kind,omitempty"`
	Kiosk                 Kiosk                  `yaml:"kiosk,omitempty" json:"kiosk,omitempty"`
	KonfigManager         KonfigManager          `yaml:"konfigManager,omitempty" json:"konfigManager,omitempty"`
	Kpack                 Kpack                  `yaml:"kpack,omitempty" json:"kpack,omitempty"`
	KubeResourceReport    *KubeResourceReport    `yaml:"kubeResourceReport,omitempty" json:"kubeResourceReport,omitempty"`
	Kubernetes            Kubernetes             `yaml:"kubernetes" json:"kubernetes,omitempty"`
	KubeWebView           *KubeWebView           `yaml:"kubeWebView,omitempty" json:"kubeWebView,omitempty"`
	Ldap                  *Ldap                  `yaml:"ldap,omitempty" json:"ldap,omitempty"`
	LocalPath             LocalPath              `yaml:"localPath" json:"localPath"`
	LogsExporter          LogsExporter           `yaml:"logsExporter,omitempty" json:"logsExporter,omitempty"`
	Master                VM                     `yaml:"master,omitempty" json:"master,omitempty"`
	Minio                 Minio                  `yaml:"minio,omitempty" json:"minio,omitempty"`
	MongodbOperator       MongodbOperator        `yaml:"mongodbOperator,omitempty" json:"mongodbOperator,omitempty"`
	Monitoring            Monitoring             `yaml:"monitoring,omitempty" json:"monitoring,omitempty"`
	Name                  string                 `yaml:"name" json:"name,omitempty"`
	NamespaceConfigurator *NamespaceConfigurator `yaml:"namespaceConfigurator,omitempty" json:"namespaceConfigurator,omitempty"`
	NFS                   *NFS                   `yaml:"nfs,omitempty" json:"nfs,omitempty"`
	Nginx                 *Nginx                 `yaml:"nginx,omitempty" json:"nginx,omitempty"`
	NodeLocalDNS          NodeLocalDNS           `yaml:"nodeLocalDNS,omitempty" json:"nodeLocalDNS,omitempty"`
	Nodes                 map[string]VM          `yaml:"workers,omitempty" json:"nodes,omitempty"`
	NSX                   *NSX                   `yaml:"nsx,omitempty" json:"nsx,omitempty"`
	OAuth2Proxy           *OAuth2Proxy           `yaml:"oauth2Proxy,omitempty" json:"oauth2Proxy,omitempty"`
	Packetbeat            Packetbeat             `yaml:"packetbeat,omitempty" json:"packetbeat,omitempty"`
	// A list of strategic merge patches that will be applied to all resources created, can either be a path to a file or an inline patch
	Patches             []string             `yaml:"patches,omitempty" json:"patches,omitempty"`
	PlatformOperator    PlatformOperator     `yaml:"platformOperator,omitempty" json:"platformOperator,omitempty"`
	PodSubnet           string               `yaml:"podSubnet" json:"podSubnet,omitempty"`
	Policies            []string             `yaml:"policies,omitempty" json:"policies,omitempty"`
	PostgresOperator    PostgresOperator     `yaml:"postgresOperator,omitempty" json:"postgresOperator,omitempty"`
	Quack               *Quack               `yaml:"quack,omitempty" json:"quack,omitempty"`
	RabbitmqOperator    RabbitmqOperator     `yaml:"rabbitmqOperator,omitempty" json:"rabbitmqOperator,omitempty"`
	RedisOperator       RedisOperator        `yaml:"redisOperator,omitempty" json:"redisOperator,omitempty"`
	RegistryCredentials *RegistryCredentials `yaml:"registryCredentials,omitempty" json:"registryCredentials,omitempty"`
	Resources           map[string]string    `yaml:"resources,omitempty" json:"resources,omitempty"`
	S3                  S3                   `yaml:"s3,omitempty" json:"s3,omitempty"`
	S3UploadCleaner     *S3UploadCleaner     `yaml:"s3uploadCleaner,omitempty" json:"s3UploadCleaner,omitempty"`
	SealedSecrets       SealedSecrets        `yaml:"sealedSecrets,omitempty" json:"sealedSecrets,omitempty"`
	ServiceSubnet       string               `yaml:"serviceSubnet" json:"serviceSubnet,omitempty"`
	SMTP                SMTP                 `yaml:"smtp,omitempty" json:"smtp,omitempty"`
	Specs               []string             `yaml:"specs,omitempty" json:"specs,omitempty"`
	Tekton              Tekton               `yaml:"tekton,omitempty" json:"tekton,omitempty"`
	TemplateOperator    TemplateOperator     `yaml:"templateOperator,omitempty" json:"templateOperator,omitempty"`

	// If true, terminate operations will return an error. Used to  protect stateful clusters
	TerminationProtection bool              `yaml:"terminationProtection,omitempty" json:"terminationProtection,omitempty"`
	Test                  Test              `yaml:"test,omitempty" json:"test,omitempty"`
	Thanos                Thanos            `yaml:"thanos,omitempty" json:"thanos,omitempty"`
	TrustedCA             string            `yaml:"trustedCA,omitempty" json:"trustedCA,omitempty"`
	Vault                 *Vault            `yaml:"vault,omitempty" json:"vault,omitempty"`
	Velero                Velero            `yaml:"velero,omitempty" json:"velero,omitempty"`
	Version               string            `yaml:"version" json:"version,omitempty"`
	Versions              map[string]string `yaml:"versions" json:"versions,omitempty"`
	VPA                   VPA               `yaml:"vpa,omitempty" json:"vpa,omitempty"`
	Vsphere               *Vsphere          `yaml:"vsphere,omitempty" json:"vsphere,omitempty"`
	BootstrapToken        string            `yaml:"-" json:"-"`
	DryRun                bool              `yaml:"-" json:"-"`
	SkipDecrypt           bool              `yaml:"-" json:"-"`
	Trace                 bool              `yaml:"-" json:"-"`
	Prune                 bool              `yaml:"-" json:"-"`
	JoinEndpoint          string            `yaml:"-" json:"-"`
	Source                string            `yaml:"-" json:"-"`
	ControlPlaneEndpoint  string            `yaml:"-" json:"-"`
	// E2E is true if end to end tests are being run
	E2E bool `yaml:"-" json:"-"`
	// If the platform should use in cluster config
	InClusterConfig bool `yaml:"-" json:"-"`
}

type PlatformOperator struct {
	XDisabled                  `yaml:",inline" json:",inline"`
	EnableClusterResourceQuota bool              `yaml:"enableClusterResourceQuota" json:"enableClusterResourceQuota,omitempty"`
	DefaultImagePullSecret     string            `yaml:"defaultImagePullSecret,omitempty" json:"defaultImagePullSecret,omitempty"`
	RegistryWhitelist          []string          `yaml:"registryWhitelist,omitempty" json:"registryWhitelist,omitempty"`
	DefaultRegistry            string            `yaml:"defaultRegistry,omitempty" json:"defaultRegistry,omitempty"`
	WhitelistedPodAnnotations  []string          `yaml:"whitelistedPodAnnotations,omitempty" json:"whitelistedPodAnnotations,omitempty"`
	Args                       map[string]string `yaml:"args,omitempty" json:"args,omitempty"`
}

type PostgresOperator struct {
	XDisabled              `yaml:",inline" json:",inline"`
	DBVersion              string                 `yaml:"dbVersion,omitempty" json:"dbVersion,omitempty"`
	SpiloImage             string                 `yaml:"spiloImage,omitempty" json:"spiloImage,omitempty"`
	BackupImage            string                 `yaml:"backupImage,omitempty" json:"backupImage,omitempty"`
	BackupPassword         string                 `yaml:"backupPassword,omitempty" json:"backupPassword,omitempty"`
	DefaultBackupBucket    string                 `yaml:"defaultBackupBucket,omitempty" json:"defaultBackupBucket,omitempty"`
	DefaultBackupSchedule  string                 `yaml:"defaultBackupSchedule,omitempty" json:"defaultBackupSchedule,omitempty"`
	DefaultBackupRetention DefaultBackupRetention `yaml:"defaultBackupRetention,omitempty" json:"defaultBackupRetention,omitempty"`
}

type Prometheus struct {
	Version     string      `yaml:"version,omitempty" json:"version,omitempty"`
	Disabled    bool        `yaml:"disabled,omitempty" json:"disabled,omitempty"`
	Persistence Persistence `yaml:"persistence,omitempty" json:"persistence,omitempty"`
}

type PushGateway struct {
	XDisabled `yaml:",inline" json:",inline"`
}

type Quack struct {
	XEnabled `yaml:",inline" json:",inline"`
}

type RabbitmqOperator struct {
	XDisabled `yaml:",inline" json:",inline"`
}

type Redis struct {
	Enabled          bool   `yaml:"enabled,omitempty" json:"enabled,omitempty"`
	Replicas         int    `yaml:"replicas,omitempty" json:"replicas,omitempty"`
	SentinelReplicas int    `yaml:"sentinelReplicas,omitempty" json:"sentinelReplicas,omitempty"`
	StorageClass     string `yaml:"storageClass,omitempty" json:"storageClass:omitempty"`
}

type RedisOperator struct {
	XDisabled `yaml:",inline" json:",inline"`
}

type RegistryCredentials struct {
	Disabled              bool                   `yaml:"disabled,omitempty" json:"disabled,omitempty"`
	Version               string                 `yaml:"version,omitempty" json:"version,omitempty"`
	Namespace             string                 `yaml:"namespace,omitempty" json:"namespace,omitempty"`
	Aws                   RegistryCredentialsECR `yaml:"aws,omitempty" json:"aws,omitempty"`
	DockerPrivateRegistry RegistryCredentialsDPR `yaml:"dockerRegistry,omitempty" json:"dockerRegistry,omitempty"`
	GCR                   RegistryCredentialsGCR `yaml:"gcr,omitempty" json:"gcr,omitempty"`
	ACR                   RegistryCredentialsACR `yaml:"azure,omitempty" json:"acr,omitempty"`
}

type RegistryCredentialsACR struct {
	Enabled  bool   `yaml:"enabled,omitempty" json:"enabled,omitempty"`
	URL      string `yaml:"string,omitempty" json:"url,omitempty"`
	ClientID string `yaml:"clientId,omitempty" json:"clientID,omitempty"`
	Password string `yaml:"password,omitempty" json:"password,omitempty"`
}

type RegistryCredentialsDPR struct {
	Enabled  bool   `yaml:"enabled,omitempty" json:"enabled,omitempty"`
	Server   string `yaml:"server,omitempty" json:"server,omitempty"`
	Username string `yaml:"username,omitempty" json:"username,omitempty"`
	Password string `yaml:"password,omitempty" json:"password,omitempty"`
}

type RegistryCredentialsECR struct {
	Enabled      bool   `yaml:"enabled,omitempty" json:"enabled,omitempty"`
	AccessKey    string `yaml:"accessKey,omitempty" json:"accessKey,omitempty"`
	SecretKey    string `yaml:"secretKey,omitempty" json:"secretKey,omitempty"`
	SessionToken string `yaml:"secretToken,omitempty" json:"sessionToken,omitempty"`
	Account      string `yaml:"account,omitempty" json:"account,omitempty"`
	Region       string `yaml:"region,omitempty" json:"region,omitempty"`
	AssumeRole   string `yaml:"assumeRole,omitempty" json:"assumeRole,omitempty"`
}

type RegistryCredentialsGCR struct {
	Enabled                bool   `yaml:"enabled,omitempty" json:"enabled,omitempty"`
	URL                    string `yaml:"url,omitempty" json:"url,omitempty"`
	ApplicationCredentials string `yaml:"applicationCredentials,omitempty" json:"applicationCredentials,omitempty"`
}

type S3 struct {
	S3Connection `yaml:",inline" json:",inline"`
	CSIVolumes   bool `yaml:"csiVolumes,omitempty" json:"csiVolumes,omitempty"`
	// Provide a KMS Master Key
	KMSMasterKey string `yaml:"kmsMasterKey,omitempty" json:"kmsMasterKey,omitempty"`
	E2E          S3E2E  `yaml:"e2e,omitempty" json:"e2e,omitempty"`
}

type S3Connection struct {
	AccessKey string `yaml:"access_key,omitempty" json:"access_key,omitempty"`
	SecretKey string `yaml:"secret_key,omitempty" json:"secret_key,omitempty"`
	Bucket    string `yaml:"bucket,omitempty" json:"bucket,omitempty"`
	Region    string `yaml:"region,omitempty" json:"region,omitempty"`
	// The endpoint at which the S3-like object storage will be available from inside the cluster
	// e.g. if minio is deployed inside the cluster, specify: `http://minio.minio.svc:9000`
	Endpoint string `yaml:"endpoint,omitempty" json:"endpoint,omitempty"`
	// UsePathStyle http://s3host/bucket instead of http://bucket.s3host
	UsePathStyle bool `yaml:"usePathStyle" json:"usePathStyle,omitempty"`
	// Skip TLS verify when connecting to S3
	SkipTLSVerify bool `yaml:"skipTLSVerify" json:"skipTLSVerify,omitempty"`
}

type S3E2E struct {
	Minio bool `yaml:"minio,omitempty" json:"minio,omitempty"`
}

type S3UploadCleaner struct {
	XEnabled `yaml:",inline" json:",inline"`
	Version  string `yaml:"version" json:"version"`
	Endpoint string `yaml:"endpoint" json:"endpoint"`
	Bucket   string `yaml:"bucket" json:"bucket"`
	Schedule string `yaml:"schedule" json:"schedule"`
}

type SMTP struct {
	Server   string `yaml:"server,omitempty" json:"server,omitempty"`
	Username string `yaml:"username,omitempty" json:"username,omitempty"`
	Password string `yaml:"password,omitempty" json:"password,omitempty"`
	Port     int    `yaml:"port,omitempty" json:"port,omitempty"`
	From     string `yaml:"from,omitempty" json:"from,omitempty"`
}

type SealedSecrets struct {
	XDisabled   `yaml:",inline" json:",inline"`
	Certificate *CA `yaml:"certificate,omitempty" json:"certificate,omitempty"`
}

type TagInterface interface {
	GetTags() map[string]string
}

type Tekton struct {
	XDisabled        `yaml:",inline" json:",inline"`
	DashboardVersion string            `yaml:"dashboardVersion,omitempty" json:"dashboardVersion,omitempty"`
	EventsVersion    string            `yaml:"eventsVersion,omitempty" json:"eventsVersion,omitempty"`
	Persistence      Persistence       `yaml:"persistence,omitempty" json:"persistence,omitempty"`
	FeatureFlags     map[string]string `yaml:"featureFlags,omitempty" json:"featureFlags,omitempty"`
}

type TemplateOperator struct {
	XDisabled  `yaml:",inline" json:",inline"`
	SyncPeriod string `yaml:"syncPeriod,omitempty" json:"syncPeriod,omitempty"`
}

type Test struct {
	// A list of tests to exclude from testings
	Exclude []string `yaml:"exclude,omitempty" json:"exclude,omitempty"`
}

type Thanos struct {
	XDisabled `yaml:",inline" json:",inline"`
	// Retention of long-term storage, defaults to 180d
	Retention string `yaml:"retention,omitempty" json:"retention,omitempty"`
	// Must be either `client` or `observability`.
	Mode string `yaml:"mode,omitempty" json:"mode,omitempty"`
	// Bucket to store metrics. Must be the same across all environments
	Bucket string `yaml:"bucket,omitempty" json:"bucket,omitempty"`
	// Only for observability mode. List of client sidecars in `<hostname>:<port>“ format
	ClientSidecars []string `yaml:"clientSidecars,omitempty" json:"clientSidecars,omitempty"`
	// Only for observability mode. Disable compactor singleton if there are multiple observability clusters
	EnableCompactor bool      `yaml:"enableCompactor,omitempty" json:"enableCompactor,omitempty"`
	E2E             ThanosE2E `yaml:"e2e,omitempty" json:"e2e,omitempty"`
	// Whether to automatically skip creating an S3 bucket that doesn't exist or getting one that does. Defaults to 'false'
	SkipCreateBucket bool `yaml:"skipCreateBucket,omitempty" json:"skipCreateBucket,omitempty"`
}

type ThanosE2E struct {
	Server string `yaml:"server,omitempty" json:"server,omitempty"`
}

type VM struct {
	Name   string `yaml:"name,omitempty" json:"name,omitempty"`
	Prefix string `yaml:"prefix,omitempty" json:"prefix,omitempty"`
	// Number of VM's to provision
	Count          int      `yaml:"count" json:"count,omitempty"`
	ContentLibrary string   `yaml:"contentLibrary" json:"contentLibrary,omitempty"`
	Template       string   `yaml:"template" json:"template,omitempty"`
	Cluster        string   `yaml:"cluster,omitempty" json:"cluster,omitempty"`
	Folder         string   `yaml:"folder,omitempty" json:"folder,omitempty"`
	Datastore      string   `yaml:"datastore,omitempty" json:"datastore,omitempty"`
	ResourcePool   string   `yaml:"resourcePool,omitempty" json:"resourcePool,omitempty"`
	CPUs           int32    `yaml:"cpu" json:"cpu,omitempty"`
	MemoryGB       int64    `yaml:"memory" json:"memory,omitempty"`
	Network        []string `yaml:"networks,omitempty" json:"networks,omitempty"`
	// Size in GB of the VM root volume
	DiskGB int `yaml:"disk" json:"disk"`
	// Tags to be applied to the VM
	Tags     map[string]string `yaml:"tags,omitempty" json:"tags,omitempty"`
	Commands []string          `yaml:"commands,omitempty" json:"commands,omitempty"`
	// A path to a konfigadm specification used for configuring the VM on creation.
	KonfigadmFile      string             `yaml:"konfigadm,omitempty" json:"konfigadm,omitempty"`
	IP                 string             `yaml:"-" json:"-"`
	Konfigadm          *konfigadm.Config  `yaml:"-" json:"-"`
	Annotations        map[string]string  `yaml:"annotations,omitempty" json:"annotations,omitempty"`
	KubeletExtraArgs   map[string]string  `yaml:"kubeletExtraArgs,omitempty" json:"kubeletExtraArgs,omitempty"`
	LoadBalancerConfig LoadBalancerConfig `yaml:"loadBalancerConfig,omitempty" json:"loadBalancerConfig,omitempty"`
}

type VPA struct {
	XDisabled `yaml:",inline" json:",inline"`
}

type Vault struct {
	Version string `yaml:"version" json:"version"`
	// A VAULT_TOKEN to use when authenticating with Vault
	Token         string                 `yaml:"token,omitempty" json:"token,omitempty"`
	Policies      map[string]VaultPolicy `yaml:"policies,omitempty" json:"policies,omitempty"`
	GroupMappings map[string][]string    `yaml:"groupMappings,omitempty" json:"groupMappings,omitempty"`
	Disabled      bool                   `yaml:"disabled,omitempty" json:"disabled,omitempty"`
	AccessKey     string                 `yaml:"accessKey,omitempty" json:"accessKey,omitempty"`
	SecretKey     string                 `yaml:"secretKey,omitempty" json:"secretKey,omitempty"`
	// The AWS KMS ARN Id to use to unseal vault
	KmsKeyID string `yaml:"kmsKeyId,omitempty" json:"kmsKeyId,omitempty"`
	Region   string `yaml:"region,omitempty" json:"region,omitempty"`
	Consul   Consul `yaml:"consul,omitempty" json:"consul,omitempty"`
}

type VaultClient struct {
	// The address of a remote Vault server to use for signing
	Address string `yaml:"address" json:"address"`

	// The path to the PKI Role to use for signing ingress certificates e.g. /pki/role/ingress-ca
	Path string `yaml:"path" json:"path"`

	// A VAULT_TOKEN to use when authenticating with Vault
	Token string `yaml:"token" json:"token"`
}

type VaultPolicy map[string]VaultPolicyPath

type VaultPolicyPath struct {
	Capabilities      []string            `yaml:"capabilities,omitempty" json:"capabilities,omitempty"`
	DeniedParameters  map[string][]string `yaml:"denied_parameters,omitempty" json:"denied_parameters,omitempty"`
	AllowedParameters map[string][]string `yaml:"allowed_parameters,omitempty" json:"allowed_parameters,omitempty"`
}

type Velero struct {
	XDisabled `yaml:",inline" json:",inline"`
	Schedule  string            `yaml:"schedule,omitempty" json:"schedule,omitempty"`
	Bucket    string            `yaml:"bucket,omitempty" json:"bucket,omitempty"`
	Volumes   bool              `yaml:"volumes" json:"volumes,omitempty"`
	Config    map[string]string `yaml:"config,omitempty" json:"config,omitempty"`
}

type Vsphere struct {
	// GOVC_USER
	Username string `yaml:"username,omitempty" json:"username,omitempty"`
	// GOVC_PASS
	Password string `yaml:"password,omitempty" json:"password,omitempty"`
	// GOVC_DATACENTER
	Datacenter string `yaml:"datacenter,omitempty" json:"datacenter,omitempty"`
	// e.g. ds:///vmfs/volumes/vsan:<id>/
	DatastoreURL string `yaml:"datastoreUrl,omitempty" json:"datastoreUrl,omitempty"`
	// GOVC_DATASTORE
	Datastore string `yaml:"datastore,omitempty" json:"datastore,omitempty"`
	// GOVC_NETWORK
	Network string `yaml:"network,omitempty" json:"network,omitempty"`
	// Cluster for VM placement via DRS (GOVC_CLUSTER)
	Cluster string `yaml:"cluster,omitempty" json:"cluster,omitempty"`
	// GOVC_RESOURCE_POOL
	ResourcePool string `yaml:"resourcePool,omitempty" json:"resourcePool,omitempty"`
	//  Inventory folder (GOVC_FOLDER)
	Folder string `yaml:"folder,omitempty" json:"folder,omitempty"`
	// GOVC_FQDN
	Hostname string `yaml:"hostname,omitempty" json:"hostname,omitempty"`
	// Version of the vSphere CSI Driver
	CSIVersion string `yaml:"csiVersion,omitempty" json:"csiVersion,omitempty"`
	// Version of the vSphere External Cloud Provider
	CPIVersion string `yaml:"cpiVersion,omitempty" json:"cpiVersion,omitempty"`
	// Skip verification of server certificate
	SkipVerify bool `yaml:"verify" json:"verify,omitempty"`
}

type XDisabled struct {
	// +optional
	Disabled Boolean `yaml:"disabled" json:"disabled"`
	// +optional
	Version string `yaml:"version" json:"version"`
}

type XEnabled struct {
	// +optional
	Disabled Boolean `yaml:"disabled" json:"disabled"`
}