v1alpha1

type ACLAction string

type ACLEntry struct {
	// The sequence number of the ACL entry.
	// +required
	// +kubebuilder:validation:Minimum=1
	Sequence int32 `json:"sequence"`

	// The forwarding action of the ACL entry.
	// +required
	Action ACLAction `json:"action"`

	// The protocol to match. If not specified, defaults to "IP".
	// Available options are: ICMP, IP, OSPF, PIM, TCP, UDP.
	// +optional
	// +kubebuilder:default=IP
	Protocol Protocol `json:"protocol"`

	// Source IP address prefix. Can be IPv4 or IPv6.
	// Use 0.0.0.0/0 (::/0) to represent 'any'.
	// +required
	SourceAddress IPPrefix `json:"sourceAddress"`

	// Destination IP address prefix. Can be IPv4 or IPv6.
	// Use 0.0.0.0/0 (::/0) to represent 'any'.
	// +required
	DestinationAddress IPPrefix `json:"destinationAddress"`

	// Description provides a human-readable description of the ACL entry.
	// +optional
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	Description string `json:"description,omitempty"`
}

type AccessControlList struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state of the resource.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +required
	Spec AccessControlListSpec `json:"spec,omitempty"`

	// Status of the resource. This is set and updated automatically.
	// Read-only.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +optional
	Status AccessControlListStatus `json:"status,omitempty,omitzero"`
}

type AccessControlListList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []AccessControlList `json:"items"`
}

type AccessControlListSpec struct {
	// DeviceName is the name of the Device this object belongs to. The Device object must exist in the same namespace.
	// Immutable.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="DeviceRef is immutable"
	DeviceRef LocalObjectReference `json:"deviceRef"`

	// ProviderConfigRef is a reference to a resource holding the provider-specific configuration of this interface.
	// This reference is used to link the AccessControlList to its provider-specific configuration.
	// +optional
	ProviderConfigRef *TypedLocalObjectReference `json:"providerConfigRef,omitempty"`

	// Name is the indentifier of the AccessControlList on the device.
	// Immutable.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Name is immutable"
	Name string `json:"name"`

	// A list of rules/entries to apply.
	// +required
	// +listType=map
	// +listMapKey=sequence
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=100
	Entries []ACLEntry `json:"entries"`
}

type AccessControlListStatus struct {
	// The conditions are a list of status objects that describe the state of the AccessControlList.
	//+listType=map
	//+listMapKey=type
	//+patchStrategy=merge
	//+patchMergeKey=type
	//+optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type AddressFamily string

type AddressFamilyStatus struct {
	// AfiSafi identifies the address family and subsequent address family.
	// +required
	AfiSafi BGPAddressFamilyType `json:"afiSafi"`

	// AcceptedPrefixes is the number of prefixes received from the peer that have passed the inbound policy
	// and are stored in the neighbor-specific table (Adj-RIB-In).
	// +kubebuilder:validation:Minimum=0
	// +optional
	AcceptedPrefixes int64 `json:"acceptedPrefixes,omitempty"`

	// AdvertisedPrefixes is the number of prefixes currently being advertised to the peer after passing
	// the outbound policy. This reflects the state of the outbound routing table for the peer (Adj-RIB-Out).
	// +kubebuilder:validation:Minimum=0
	// +optional
	AdvertisedPrefixes int64 `json:"advertisedPrefixes,omitempty"`
}

type AdminState string

type Aggregation struct {
	// MemberInterfaceRefs is a list of interface references that are part of the aggregate interface.
	// +required
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=32
	MemberInterfaceRefs []LocalObjectReference `json:"memberInterfaceRefs"`

	// ControlProtocol defines the lacp configuration for the aggregate interface.
	// +optional
	// +kubebuilder:default={mode: Active}
	ControlProtocol ControlProtocol `json:"controlProtocol"`

	// Multichassis defines the multichassis configuration for the aggregate interface.
	// +optional
	MultiChassis *MultiChassis `json:"multichassis,omitempty"`
}

type BGP struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state of the resource.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +required
	Spec BGPSpec `json:"spec"`

	// Status of the resource. This is set and updated automatically.
	// Read-only.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +optional
	Status BGPStatus `json:"status,omitempty,omitzero"`
}

type BGPAddressFamilies struct {
	// Ipv4Unicast configures IPv4 unicast address family support.
	// Enables exchange of IPv4 unicast routes between BGP peers.
	// +optional
	Ipv4Unicast *BGPAddressFamily `json:"ipv4Unicast,omitempty"`

	// Ipv6Unicast configures IPv6 unicast address family support.
	// Enables exchange of IPv6 unicast routes between BGP peers.
	// +optional
	Ipv6Unicast *BGPAddressFamily `json:"ipv6Unicast,omitempty"`

	// L2vpnEvpn configures L2VPN EVPN address family support.
	// Enables exchange of Ethernet VPN routes for overlay network services.
	// +optional
	L2vpnEvpn *BGPL2vpnEvpn `json:"l2vpnEvpn,omitempty"`
}

type BGPAddressFamily struct {
	// Enabled determines whether this address family is activated for BGP sessions.
	// When false, the address family is not negotiated with peers.
	// +optional
	Enabled bool `json:"enabled,omitempty"`

	// Multipath configures address family specific multipath behavior.
	// When specified, overrides global multipath settings for this address family.
	// +optional
	Multipath *BGPMultipath `json:"multipath,omitempty"`
}

type BGPAddressFamilyType string

type BGPCommunityType string

type BGPL2vpnEvpn struct {
	BGPAddressFamily `json:",inline"`

	// RouteTargetPolicy configures route target filtering behavior for EVPN routes.
	// Controls which routes are retained based on route target matching.
	// +optional
	RouteTargetPolicy *BGPRouteTargetPolicy `json:"routeTargetPolicy,omitempty"`
}

type BGPList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []BGP `json:"items"`
}

type BGPMultipath struct {
	// Enabled determines whether BGP is allowed to use multiple paths for forwarding.
	// When false, BGP will only use a single best path regardless of multiple equal-cost paths.
	// +optional
	Enabled bool `json:"enabled,omitempty"`

	// Ebgp configures multipath behavior for external BGP (eBGP) paths.
	// +optional
	Ebgp *BGPMultipathEbgp `json:"ebgp,omitempty"`

	// Ibgp configures multipath behavior for internal BGP (iBGP) paths.
	// +optional
	Ibgp *BGPMultipathIbgp `json:"ibgp,omitempty"`
}

type BGPMultipathEbgp struct {
	// AllowMultipleAs enables the use of multiple paths with different AS paths for eBGP.
	// When true, relaxes the requirement that multipath candidates must have identical AS paths.
	// This corresponds to the "RelaxAs" mode.
	// +optional
	AllowMultipleAs bool `json:"allowMultipleAs,omitempty"`

	// MaximumPaths sets the maximum number of eBGP paths that can be used for multipath load balancing.
	// Valid range is 1-64 when specified. When omitted, no explicit limit is configured.
	// +optional
	// +kubebuilder:validation:Minimum=1
	// +kubebuilder:validation:Maximum=64
	MaximumPaths int8 `json:"maximumPaths,omitempty"`
}

type BGPMultipathIbgp struct {
	// MaximumPaths sets the maximum number of iBGP paths that can be used for multipath load balancing.
	// Valid range is 1-64 when specified. When omitted, no explicit limit is configured.
	// +optional
	// +kubebuilder:validation:Minimum=1
	// +kubebuilder:validation:Maximum=64
	MaximumPaths int8 `json:"maximumPaths,omitempty"`
}

type BGPPeer struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state of the resource.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +required
	Spec BGPPeerSpec `json:"spec"`

	// Status of the resource. This is set and updated automatically.
	// Read-only.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +optional
	Status BGPPeerStatus `json:"status,omitempty,omitzero"`
}

type BGPPeerAddressFamilies struct {
	// Ipv4Unicast configures IPv4 unicast address family settings for this peer.
	// Controls IPv4 unicast route exchange and peer-specific behavior.
	// +optional
	Ipv4Unicast *BGPPeerAddressFamily `json:"ipv4Unicast,omitempty"`

	// Ipv6Unicast configures IPv6 unicast address family settings for this peer.
	// Controls IPv6 unicast route exchange and peer-specific behavior.
	// +optional
	Ipv6Unicast *BGPPeerAddressFamily `json:"ipv6Unicast,omitempty"`

	// L2vpnEvpn configures L2VPN EVPN address family settings for this peer.
	// Controls EVPN route exchange and peer-specific behavior.
	// +optional
	L2vpnEvpn *BGPPeerAddressFamily `json:"l2vpnEvpn,omitempty"`
}

type BGPPeerAddressFamily struct {
	// Enabled determines whether this address family is activated for this specific peer.
	// When false, the address family is not negotiated with this peer.
	// Defaults to false.
	// +optional
	Enabled bool `json:"enabled,omitempty"`

	// SendCommunity specifies which community attributes should be sent to this BGP peer
	// for this address family. If not specified, no community attributes are sent.
	// +optional
	SendCommunity BGPCommunityType `json:"sendCommunity,omitempty"`

	// RouteReflectorClient indicates whether this peer should be treated as a route reflector client
	// for this specific address family. Defaults to false.
	// +optional
	RouteReflectorClient bool `json:"routeReflectorClient,omitempty"`
}

type BGPPeerList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []BGPPeer `json:"items"`
}

type BGPPeerLocalAddress struct {
	// InterfaceRef is a reference to an Interface resource whose IP address will be used
	// as the source address for BGP packets sent to this peer.
	// The Interface object must exist in the same namespace.
	// +required
	InterfaceRef LocalObjectReference `json:"interfaceRef,omitempty"`
}

type BGPPeerSessionState string

type BGPPeerSpec struct {
	// DeviceName is the name of the Device this object belongs to. The Device object must exist in the same namespace.
	// Immutable.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="DeviceRef is immutable"
	DeviceRef LocalObjectReference `json:"deviceRef"`

	// ProviderConfigRef is a reference to a resource holding the provider-specific configuration of this interface.
	// This reference is used to link the BGP to its provider-specific configuration.
	// +optional
	ProviderConfigRef *TypedLocalObjectReference `json:"providerConfigRef,omitempty"`

	// Address is the IPv4 address of the BGP peer.
	// +required
	// +kubebuilder:validation:Format=ipv4
	Address string `json:"address"`

	// ASNumber is the autonomous system number (ASN) of the BGP peer.
	// Supports both plain format (1-4294967295) and dotted notation (1-65535.0-65535) as per RFC 5396.
	// +required
	ASNumber intstr.IntOrString `json:"asNumber"`

	// Description is an optional human-readable description for this BGP peer.
	// This field is used for documentation purposes and may be displayed in management interfaces.
	// +optional
	Description string `json:"description,omitempty"`

	// LocalAddress specifies the local address configuration for the BGP session with this peer.
	// This determines the source address/interface for BGP packets sent to this peer.
	// +optional
	LocalAddress *BGPPeerLocalAddress `json:"localAddress,omitempty"`

	// AddressFamilies configures address family specific settings for this BGP peer.
	// Controls which address families are enabled and their specific configuration.
	// +optional
	AddressFamilies *BGPPeerAddressFamilies `json:"addressFamilies,omitempty"`
}

type BGPPeerStatus struct {
	// SessionState is the current operational state of the BGP session.
	// +optional
	SessionState BGPPeerSessionState `json:"sessionState,omitempty"`

	// LastEstablishedTime is the timestamp when the BGP session last transitioned to the ESTABLISHED state.
	// A frequently changing timestamp indicates session instability (flapping).
	// +optional
	LastEstablishedTime *metav1.Time `json:"lastEstablishedTime,omitempty"`

	// AdvertisedPrefixesSummary provides a human-readable summary of advertised prefixes
	// across all address families (e.g., "10 (IPv4Unicast), 5 (IPv6Unicast)").
	// This field is computed by the controller from the AddressFamilies field.
	// +optional
	AdvertisedPrefixesSummary string `json:"advertisedPrefixesSummary,omitempty"`

	// AddressFamilies contains per-address-family statistics for this peer.
	// Only address families that are enabled and negotiated with the peer are included.
	// +optional
	// +listType=map
	// +listMapKey=afiSafi
	// +patchStrategy=merge
	// +patchMergeKey=afiSafi
	AddressFamilies []AddressFamilyStatus `json:"addressFamilies,omitempty"`

	// ObservedGeneration reflects the .metadata.generation that was last processed by the controller.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

	// The conditions are a list of status objects that describe the state of the BGP.
	// +listType=map
	// +listMapKey=type
	// +patchStrategy=merge
	// +patchMergeKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type BGPRouteTargetPolicy struct {
	// RetainAll controls whether all route targets are retained regardless of import policy.
	// +optional
	RetainAll bool `json:"retainAll,omitempty"`
}

type BGPSpec struct {
	// DeviceName is the name of the Device this object belongs to. The Device object must exist in the same namespace.
	// Immutable.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="DeviceRef is immutable"
	DeviceRef LocalObjectReference `json:"deviceRef"`

	// ProviderConfigRef is a reference to a resource holding the provider-specific configuration of this interface.
	// This reference is used to link the BGP to its provider-specific configuration.
	// +optional
	ProviderConfigRef *TypedLocalObjectReference `json:"providerConfigRef,omitempty"`

	// ASNumber is the autonomous system number (ASN) for the BGP router.
	// Supports both plain format (1-4294967295) and dotted notation (1-65535.0-65535) as per RFC 5396.
	// +required
	ASNumber intstr.IntOrString `json:"asNumber"`

	// RouterID is the BGP router identifier, used in BGP messages to identify the originating router.
	// Follows dotted quad notation (IPv4 format).
	// +required
	// +kubebuilder:validation:Format=ipv4
	RouterID string `json:"routerId"`

	// AddressFamilies configures supported BGP address families and their specific settings.
	// +optional
	AddressFamilies *BGPAddressFamilies `json:"addressFamilies,omitempty"`
}

type BGPStatus struct {
	// The conditions are a list of status objects that describe the state of the BGP.
	// +listType=map
	// +listMapKey=type
	// +patchStrategy=merge
	// +patchMergeKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type Banner struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state of the resource.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +required
	Spec BannerSpec `json:"spec,omitempty"`

	// Status of the resource. This is set and updated automatically.
	// Read-only.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +optional
	Status BannerStatus `json:"status,omitempty,omitzero"`
}

type BannerList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Banner `json:"items"`
}

type BannerSpec struct {
	// DeviceName is the name of the Device this object belongs to. The Device object must exist in the same namespace.
	// Immutable.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="DeviceRef is immutable"
	DeviceRef LocalObjectReference `json:"deviceRef"`

	// ProviderConfigRef is a reference to a resource holding the provider-specific configuration of this interface.
	// This reference is used to link the Banner to its provider-specific configuration.
	// +optional
	ProviderConfigRef *TypedLocalObjectReference `json:"providerConfigRef,omitempty"`

	// Pre-Login banner to display on login.
	// +required
	Message TemplateSource `json:"message"`
}

type BannerStatus struct {
	// The conditions are a list of status objects that describe the state of the Banner.
	//+listType=map
	//+listMapKey=type
	//+patchStrategy=merge
	//+patchMergeKey=type
	//+optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type Bootstrap struct {
	// Template defines the multiline string template that contains the initial configuration for the device.
	// +required
	Template TemplateSource `json:"template"`
}

type Certificate struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state of the resource.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +required
	Spec CertificateSpec `json:"spec,omitempty"`

	// Status of the resource. This is set and updated automatically.
	// Read-only.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +optional
	Status CertificateStatus `json:"status,omitempty,omitzero"`
}

type CertificateList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Certificate `json:"items"`
}

type CertificateSource struct {
	// Secret containing the certificate.
	// The secret must be of type kubernetes.io/tls and as such contain the following keys: 'tls.crt' and 'tls.key'.
	// +required
	SecretRef SecretReference `json:"secretRef,omitempty"`
}

type CertificateSpec struct {
	// DeviceName is the name of the Device this object belongs to. The Device object must exist in the same namespace.
	// Immutable.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="DeviceRef is immutable"
	DeviceRef LocalObjectReference `json:"deviceRef"`

	// ProviderConfigRef is a reference to a resource holding the provider-specific configuration of this interface.
	// This reference is used to link the Certificate to its provider-specific configuration.
	// +optional
	ProviderConfigRef *TypedLocalObjectReference `json:"providerConfigRef,omitempty"`

	// The certificate management id.
	// Immutable.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="ID is immutable"
	ID string `json:"id"`

	// Secret containing the certificate source.
	// The secret must be of type kubernetes.io/tls and as such contain the following keys: 'tls.crt' and 'tls.key'.
	// +required
	SecretRef SecretReference `json:"secretRef"`
}

type CertificateStatus struct {
	// The conditions are a list of status objects that describe the state of the Certificate.
	//+listType=map
	//+listMapKey=type
	//+patchStrategy=merge
	//+patchMergeKey=type
	//+optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type ConfigMapKeySelector struct {
	// Name of the configmap resource being referred to.
	ConfigMapReference `json:",inline"`

	// Key is the of the entry in the configmap resource's `data` or `binaryData`
	// field to be used.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=253
	Key string `json:"key"`
}

type ConfigMapReference struct {
	// Name is unique within a namespace to reference a configmap resource.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=253
	Name string `json:"name"`

	// Namespace defines the space within which the configmap name must be unique.
	// If omitted, the namespace of the object being reconciled will be used.
	// +optional
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	Namespace string `json:"namespace,omitempty"`
}

type ControlProtocol struct {
	// Mode defines the LACP mode for the aggregate interface.
	// +required
	Mode LACPMode `json:"mode"`
}

type DNS struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state of the resource.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +required
	Spec DNSSpec `json:"spec,omitempty"`

	// Status of the resource. This is set and updated automatically.
	// Read-only.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +optional
	Status DNSStatus `json:"status,omitempty,omitzero"`
}

type DNSList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []DNS `json:"items"`
}

type DNSSpec struct {
	// DeviceName is the name of the Device this object belongs to. The Device object must exist in the same namespace.
	// Immutable.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="DeviceRef is immutable"
	DeviceRef LocalObjectReference `json:"deviceRef"`

	// ProviderConfigRef is a reference to a resource holding the provider-specific configuration of this interface.
	// This reference is used to link the DNS to its provider-specific configuration.
	// +optional
	ProviderConfigRef *TypedLocalObjectReference `json:"providerConfigRef,omitempty"`

	// Default domain name that the device uses to complete unqualified hostnames.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=253
	// +kubebuilder:validation:Format=hostname
	Domain string `json:"domain"`

	// A list of DNS servers to use for address resolution.
	// +optional
	// +listType=map
	// +listMapKey=address
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=6
	Servers []NameServer `json:"servers,omitempty"`

	// Source interface for all DNS traffic.
	// +optional
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	SourceInterfaceName string `json:"sourceInterfaceName,omitempty"`
}

type DNSStatus struct {
	// The conditions are a list of status objects that describe the state of the DNS.
	//+listType=map
	//+listMapKey=type
	//+patchStrategy=merge
	//+patchMergeKey=type
	//+optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type Device struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state of the resource.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	Spec DeviceSpec `json:"spec,omitempty"`

	// Status of the resource. This is set and updated automatically.
	// Read-only.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	Status DeviceStatus `json:"status,omitempty"`
}

type DeviceList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Device `json:"items"`
}

type DevicePhase string

type DevicePort struct {
	// Name is the name of the port.
	// +required
	Name string `json:"name"`

	// Type is the type of the port, e.g. "10g".
	// +optional
	Type string `json:"type,omitempty"`

	// SupportedSpeedsGbps is the list of supported speeds in Gbps for this port.
	// +optional
	SupportedSpeedsGbps []int32 `json:"supportedSpeedsGbps,omitempty"`

	// Transceiver is the type of transceiver plugged into the port, if any.
	// +optional
	Trasceiver string `json:"transceiver,omitempty"`

	// InterfaceRef is the reference to the corresponding Interface resource
	// configuring this port, if any.
	// +optional
	InterfaceRef *LocalObjectReference `json:"interfaceName,omitzero"`
}

type DeviceSpec struct {
	// Endpoint contains the connection information for the device.
	// +required
	Endpoint Endpoint `json:"endpoint"`

	// Bootstrap is an optional configuration for the device bootstrap process.
	// It can be used to provide initial configuration templates or scripts that are applied during the device provisioning.
	// +optional
	Bootstrap *Bootstrap `json:"bootstrap,omitempty"`
}

type DeviceStatus struct {
	// Phase represents the current phase of the Device.
	// +kubebuilder:default=Pending
	// +required
	Phase DevicePhase `json:"phase,omitempty"`

	// Manufacturer is the manufacturer of the Device.
	// +optional
	Manufacturer string `json:"manufacturer,omitempty"`

	// Model is the model identifier of the Device.
	// +optional
	Model string `json:"model,omitempty"`

	// SerialNumber is the serial number of the Device.
	// +optional
	SerialNumber string `json:"serialNumber,omitempty"`

	// FirmwareVersion is the firmware version running on the Device.
	// +optional
	FirmwareVersion string `json:"firmwareVersion,omitempty"`

	// Ports is the list of ports on the Device.
	// +optional
	Ports []DevicePort `json:"ports,omitempty"`

	// PostSummary shows a summary of the port configured, grouped by type, e.g. "1/4 (10g), 3/64 (100g)".
	// +optional
	PostSummary string `json:"portSummary,omitempty"`

	// The conditions are a list of status objects that describe the state of the Device.
	//+listType=map
	//+listMapKey=type
	//+patchStrategy=merge
	//+patchMergeKey=type
	//+optional
	Conditions []metav1.Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`
}

type Endpoint struct {
	// Address is the management address of the device provided as <ip:port>.
	// +kubebuilder:validation:Pattern=`^(\d{1,3}\.){3}\d{1,3}:\d{1,5}$`
	// +required
	Address string `json:"address"`

	// SecretRef is name of the authentication secret for the device containing the username and password.
	// The secret must be of type kubernetes.io/basic-auth and as such contain the following keys: 'username' and 'password'.
	// +optional
	SecretRef *SecretReference `json:"secretRef,omitempty"`

	// Transport credentials for grpc connection to the switch.
	// +optional
	TLS *TLS `json:"tls,omitempty"`
}

type GNMI struct {
	// The maximum number of concurrent gNMI calls that can be made to the gRPC server on the switch for each VRF.
	// Configure a limit from 1 through 16. The default limit is 8.
	// +optional
	// +kubebuilder:default=8
	// +kubebuilder:validation:Minimum=1
	// +kubebuilder:validation:Maximum=16
	// +kubebuilder:validation:ExclusiveMaximum=false
	MaxConcurrentCall int8 `json:"maxConcurrentCall"`

	// Configure the keepalive timeout for inactive or unauthorized connections.
	// The gRPC agent is expected to periodically send an empty response to the client, on which the client is expected to respond with an empty request.
	// If the client does not respond within the keepalive timeout, the gRPC agent should close the connection.
	// The default interval value is 10 minutes.
	// +optional
	// +kubebuilder:default="10m"
	// +kubebuilder:validation:Type=string
	// +kubebuilder:validation:Pattern="^([0-9]+(\\.[0-9]+)?(ns|us|µs|ms|s|m|h))+$"
	KeepAliveTimeout metav1.Duration `json:"keepAliveTimeout"`
}

type GRPC struct {
	// Enable or disable the gRPC server on the device.
	// If not specified, the gRPC server is enabled by default.
	// +optional
	// +kubebuilder:default=true
	Enabled bool `json:"enabled"`

	// The TCP port on which the gRPC server should listen.
	// The range of port-id is from 1024 to 65535.
	// Port 9339 is the default.
	// +optional
	// +kubebuilder:default=9339
	// +kubebuilder:validation:Minimum=1024
	// +kubebuilder:validation:Maximum=65535
	// +kubebuilder:validation:ExclusiveMaximum=false
	Port int32 `json:"port"`

	// Name of the certificate that is associated with the gRPC service.
	// The certificate is provisioned through other interfaces on the device,
	// such as e.g. the gNOI certificate management service.
	// +optional
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	CertificateID string `json:"certificateId,omitempty"`

	// Enable the gRPC agent to accept incoming (dial-in) RPC requests from a given vrf.
	// +optional
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	VrfName string `json:"vrfName"`

	// Additional gNMI configuration for the gRPC server.
	// This may not be supported by all devices.
	// +optional
	// +kubebuilder:default={maxConcurrentCall:8, keepAliveTimeout:"10m"}
	GNMI GNMI `json:"gnmi,omitzero"`
}

type IPPrefix struct {
	netip.Prefix `json:"-"`
}

type ISIS struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state of the resource.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +required
	Spec ISISSpec `json:"spec,omitempty"`

	// Status of the resource. This is set and updated automatically.
	// Read-only.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +optional
	Status ISISStatus `json:"status,omitempty,omitzero"`
}

type ISISBFD struct {
	// Enabled indicates whether BFD is enabled on the interface.
	// +optional
	// +kubebuilder:default=false
	Enabled bool `json:"enabled"`
}

type ISISInterface struct {
	// Ref is a reference to the interface object.
	// The interface object must exist in the same namespace.
	// +required
	Ref LocalObjectReference `json:"ref"`

	// BFD contains BFD configuration for the interface.
	// +optional
	// +kubebuilder:default={}
	BFD ISISBFD `json:"bfd,omitzero"`
}

type ISISLevel string

type ISISList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ISIS `json:"items"`
}

type ISISSpec struct {
	// DeviceName is the name of the Device this object belongs to. The Device object must exist in the same namespace.
	// Immutable.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="DeviceRef is immutable"
	DeviceRef LocalObjectReference `json:"deviceRef"`

	// ProviderConfigRef is a reference to a resource holding the provider-specific configuration of this interface.
	// This reference is used to link the Interface to its provider-specific configuration.
	// +optional
	ProviderConfigRef *TypedLocalObjectReference `json:"providerConfigRef,omitempty"`

	// Instance is the name of the ISIS instance.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Instance is immutable"
	Instance string `json:"instance"`

	// NetworkEntityTitle is the NET of the ISIS instance.
	// +required
	// +kubebuilder:validation:Pattern=`^[a-fA-F0-9]{2}(\.[a-fA-F0-9]{4}){3,9}\.[a-fA-F0-9]{2}$`
	NetworkEntityTitle string `json:"networkEntityTitle"`

	// Type indicates the level of the ISIS instance.
	// +required
	Type ISISLevel `json:"type"`

	// OverloadBit indicates the overload bit of the ISIS instance.
	// +optional
	// +kubebuilder:default=Never
	OverloadBit OverloadBit `json:"overloadBit,omitempty"`

	// AddressFamilies is a list of address families for the ISIS instance.
	// +required
	// +listType=set
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=2
	AddressFamilies []AddressFamily `json:"addressFamilies"`

	// Interfaces is a list of interfaces that are part of the ISIS instance.
	// +optional
	// +listType=atomic
	Interfaces []ISISInterface `json:"interfaces,omitempty"`
}

type ISISStatus struct {
	// The conditions are a list of status objects that describe the state of the ISIS.
	//+listType=map
	//+listMapKey=type
	//+patchStrategy=merge
	//+patchMergeKey=type
	//+optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type Interface struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state of the resource.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +required
	Spec InterfaceSpec `json:"spec,omitempty"`

	// Status of the resource. This is set and updated automatically.
	// Read-only.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +optional
	Status InterfaceStatus `json:"status,omitempty,omitzero"`
}

type InterfaceIPv4 struct {
	// Addresses defines the list of IPv4 addresses assigned to the interface.
	// The first address in the list is considered the primary address,
	// and any additional addresses are considered secondary addresses.
	// +optional
	// +listType=atomic
	// +kubebuilder:validation:MinItems=1
	Addresses []IPPrefix `json:"addresses,omitempty"`

	// Unnumbered defines the unnumbered interface configuration.
	// When specified, the interface borrows the IP address from another interface.
	// +optional
	Unnumbered *InterfaceIPv4Unnumbered `json:"unnumbered,omitempty"`
}

type InterfaceIPv4Unnumbered struct {
	// InterfaceRef is a reference to the interface from which to borrow the IP address.
	// The referenced interface must exist and have at least one IPv4 address configured.
	// +required
	InterfaceRef LocalObjectReference `json:"interfaceRef"`
}

type InterfaceList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Interface `json:"items"`
}

type InterfaceSpec struct {
	// DeviceName is the name of the Device this object belongs to. The Device object must exist in the same namespace.
	// Immutable.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="DeviceRef is immutable"
	DeviceRef LocalObjectReference `json:"deviceRef"`

	// ProviderConfigRef is a reference to a resource holding the provider-specific configuration of this interface.
	// This reference is used to link the Interface to its provider-specific configuration.
	// +optional
	ProviderConfigRef *TypedLocalObjectReference `json:"providerConfigRef,omitempty"`

	// Name is the name of the interface.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=255
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Name is immutable"
	Name string `json:"name"`

	// AdminState indicates whether the interface is administratively up or down.
	// +required
	AdminState AdminState `json:"adminState"`

	// Description provides a human-readable description of the interface.
	// +optional
	// +kubebuilder:validation:MaxLength=255
	Description string `json:"description,omitempty"`

	// Type indicates the type of the interface.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Type is immutable"
	Type InterfaceType `json:"type"`

	// MTU (Maximum Transmission Unit) specifies the size of the largest packet that can be sent over the interface.
	// +optional
	// +kubebuilder:validation:Minimum=576
	// +kubebuilder:validation:Maximum=9216
	MTU int32 `json:"mtu,omitempty"`

	// Switchport defines the switchport configuration for the interface.
	// This is only applicable for Ethernet and Aggregate interfaces.
	// +optional
	Switchport *Switchport `json:"switchport,omitempty"`

	// IPv4 defines the IPv4 configuration for the interface.
	// +optional
	IPv4 *InterfaceIPv4 `json:"ipv4,omitempty"`

	// Aggregation defines the aggregation (bundle) configuration for the interface.
	// This is only applicable for interfaces of type Aggregate.
	// +optional
	Aggregation *Aggregation `json:"aggregation,omitempty"`
}

type InterfaceStatus struct {
	// The conditions are a list of status objects that describe the state of the Interface.
	//+listType=map
	//+listMapKey=type
	//+patchStrategy=merge
	//+patchMergeKey=type
	//+optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`

	// MemberOf references the aggregate interface this interface is a member of, if any.
	// This field only applies to physical interfaces that are part of an aggregate interface.
	// +optional
	MemberOf *LocalObjectReference `json:"memberOf,omitempty"`
}

type InterfaceType string

type LACPMode string

type LocalObjectReference struct {
	// Name of the referent.
	// More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	Name string `json:"name"`
}

type LogFacility struct {
	// The name of the log facility.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	Name string `json:"name"`

	// The severity level of the log messages for this facility.
	// +required
	Severity Severity `json:"severity"`
}

type LogServer struct {
	// IP address or hostname of the remote log server
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=253
	Address string `json:"address"`

	// The servity level of the log messages sent to the server.
	// +required
	Severity Severity `json:"severity"`

	// The name of the vrf used to reach the log server.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	VrfName string `json:"vrfName"`

	// The destination port number for syslog UDP messages to
	// the server. The default is 514.
	// +optional
	// +kubebuilder:default=514
	Port int32 `json:"port"`
}

type ManagementAccess struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state of the resource.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +required
	Spec ManagementAccessSpec `json:"spec,omitempty"`

	// Status of the resource. This is set and updated automatically.
	// Read-only.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +optional
	Status ManagementAccessStatus `json:"status,omitempty,omitzero"`
}

type ManagementAccessList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ManagementAccess `json:"items"`
}

type ManagementAccessSpec struct {
	// DeviceName is the name of the Device this object belongs to. The Device object must exist in the same namespace.
	// Immutable.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="DeviceRef is immutable"
	DeviceRef LocalObjectReference `json:"deviceRef"`

	// ProviderConfigRef is a reference to a resource holding the provider-specific configuration of this interface.
	// This reference is used to link the Interface to its provider-specific configuration.
	// +optional
	ProviderConfigRef *TypedLocalObjectReference `json:"providerConfigRef,omitempty"`

	// Configuration for the gRPC server on the device.
	// Currently, only a single "default" gRPC server is supported.
	// +optional
	// +kubebuilder:default={enabled:true, port:9339}
	GRPC GRPC `json:"grpc,omitzero"`

	// Configuration for the SSH server on the device.
	// +optional
	// +kubebuilder:default={enabled:true, timeout:"10m", sessionLimit:32}
	SSH SSH `json:"ssh,omitzero"`
}

type ManagementAccessStatus struct {
	// The conditions are a list of status objects that describe the state of the ManagementAccess.
	//+listType=map
	//+listMapKey=type
	//+patchStrategy=merge
	//+patchMergeKey=type
	//+optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type MultiChassis struct {
	// Enabled indicates whether the aggregate interface is part of a multichassis setup.
	// +required
	// +kubebuilder:default=true
	Enabled bool `json:"enabled"`

	// ID is the multichassis identifier.
	// +required
	// +kubebuilder:validation:Minimum=1
	// +kubebuilder:validation:Maximum=4094
	ID int16 `json:"id"`
}

type NTP struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state of the resource.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +required
	Spec NTPSpec `json:"spec,omitempty"`

	// Status of the resource. This is set and updated automatically.
	// Read-only.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +optional
	Status NTPStatus `json:"status,omitempty,omitzero"`
}

type NTPList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []NTP `json:"items"`
}

type NTPServer struct {
	// Hostname/IP address of the NTP server.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=253
	Address string `json:"address"`

	// Indicates whether this server should be preferred or not.
	// +optional
	// +kubebuilder:default=false
	Prefer bool `json:"prefer,omitempty"`

	// The name of the vrf used to communicate with the NTP server.
	// +optional
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	VrfName string `json:"vrfName,omitempty"`
}

type NTPSpec struct {
	// DeviceName is the name of the Device this object belongs to. The Device object must exist in the same namespace.
	// Immutable.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="DeviceRef is immutable"
	DeviceRef LocalObjectReference `json:"deviceRef"`

	// ProviderConfigRef is a reference to a resource holding the provider-specific configuration of this interface.
	// This reference is used to link the NTP to its provider-specific configuration.
	// +optional
	ProviderConfigRef *TypedLocalObjectReference `json:"providerConfigRef,omitempty"`

	// Source interface for all NTP traffic.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	SourceInterfaceName string `json:"sourceInterfaceName"`

	// NTP servers.
	// +required
	// +listType=map
	// +listMapKey=address
	// +kubebuilder:validation:MinItems=1
	Servers []NTPServer `json:"servers"`
}

type NTPStatus struct {
	// The conditions are a list of status objects that describe the state of the NTP.
	//+listType=map
	//+listMapKey=type
	//+patchStrategy=merge
	//+patchMergeKey=type
	//+optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type NameServer struct {
	// The Hostname or IP address of the DNS server.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=253
	Address string `json:"address"`

	// The name of the vrf used to communicate with the DNS server.
	// +optional
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	VrfName string `json:"vrfName,omitempty"`
}

type OSPF struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state of the resource.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +required
	Spec OSPFSpec `json:"spec,omitempty"`

	// Status of the resource. This is set and updated automatically.
	// Read-only.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +optional
	Status OSPFStatus `json:"status,omitempty,omitzero"`
}

type OSPFInterface struct {
	LocalObjectReference `json:",inline"`

	// Area is the OSPF area identifier for this interface.
	// Must be specified in dotted-quad notation (e.g., "0.0.0.0" for the backbone area).
	// This is semantically a 32-bit identifier displayed in IPv4 address format,
	// not an actual IPv4 address. Area 0 (0.0.0.0) is the OSPF backbone area and
	// is required for proper OSPF operation in multi-area configurations.
	// +required
	// +kubebuilder:validation:Format=ipv4
	Area string `json:"area"`

	// Passive indicates whether this interface should operate in passive mode.
	// In passive mode, OSPF will advertise the interface's network in LSAs but will not
	// send or receive OSPF protocol packets (Hello, LSU, etc.) on this interface.
	// This is typically used for loopback interfaces where OSPF adjacencies
	// should not be formed but the network should still be advertised.
	// Defaults to false (active mode).
	// +optional
	Passive *bool `json:"passive,omitempty"`
}

type OSPFList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []OSPF `json:"items"`
}

type OSPFNeighbor struct {
	// RouterID is the router identifier of the remote OSPF neighbor.
	// +required
	RouterID string `json:"routerId"`

	// Address is the IP address of the remote OSPF neighbor.
	// +required
	Address string `json:"address"`

	// InterfaceRef is a reference to the local interface through which this neighbor is connected.
	// +required
	InterfaceRef LocalObjectReference `json:"interfaceRef"`

	// Priority is the remote system's priority to become the designated router.
	// Valid range is 0-255.
	// +optional
	Priority *uint8 `json:"priority,omitempty"`

	// LastEstablishedTime is the timestamp when the adjacency last transitioned to the FULL state.
	// A frequently changing timestamp indicates adjacency instability (flapping).
	// +optional
	LastEstablishedTime *metav1.Time `json:"lastEstablishedTime,omitempty"`

	// AdjacencyState is the current state of the adjacency with this neighbor.
	// +optional
	AdjacencyState OSPFNeighborState `json:"adjacencyState,omitempty"`
}

type OSPFNeighborState string

type OSPFSpec struct {
	// DeviceName is the name of the Device this object belongs to. The Device object must exist in the same namespace.
	// Immutable.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="DeviceRef is immutable"
	DeviceRef LocalObjectReference `json:"deviceRef"`

	// ProviderConfigRef is a reference to a resource holding the provider-specific configuration of this interface.
	// This reference is used to link the Interface to its provider-specific configuration.
	// +optional
	ProviderConfigRef *TypedLocalObjectReference `json:"providerConfigRef,omitempty"`

	// Instance is the process tag of the OSPF instance.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Instance is immutable"
	Instance string `json:"instance"`

	// RouterID is the OSPF router identifier, used in OSPF messages to identify the originating router.
	// Follows dotted quad notation (IPv4 format).
	// +required
	// +kubebuilder:validation:Format=ipv4
	RouterID string `json:"routerId"`

	// LogAdjacencyChanges enables logging when the state of an OSPF neighbor changes.
	// When true, a log message is generated for adjacency state transitions.
	// +optional
	LogAdjacencyChanges *bool `json:"logAdjacencyChanges,omitempty"`

	// InterfaceRefs is a list of interfaces that are part of the OSPF instance.
	// +optional
	// +listType=atomic
	// +kubebuilder:validation:MinItems=1
	InterfaceRefs []OSPFInterface `json:"interfaceRefs,omitempty"`
}

type OSPFStatus struct {
	// AdjacencySummary provides a human-readable summary of neighbor adjacencies
	// by state (e.g., "3 Full, 1 ExStart, 1 Down").
	// This field is computed by the controller from the Neighbors field.
	// +optional
	AdjacencySummary string `json:"adjacencySummary,omitempty"`

	// ObservedGeneration reflects the .metadata.generation that was last processed by the controller.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

	// Neighbors is a list of OSPF neighbors and their adjacency states.
	// +optional
	// +listType=map
	// +listMapKey=routerId
	// +patchStrategy=merge
	// +patchMergeKey=routerId
	Neighbors []OSPFNeighbor `json:"neighbors,omitempty"`

	// The conditions are a list of status objects that describe the state of the OSPF.
	// +listType=map
	// +listMapKey=type
	// +patchStrategy=merge
	// +patchMergeKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type OverloadBit string

type PIM struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state of the resource.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +required
	Spec PIMSpec `json:"spec,omitempty"`

	// Status of the resource. This is set and updated automatically.
	// Read-only.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +optional
	Status PIMStatus `json:"status,omitempty,omitzero"`
}

type PIMInterface struct {
	LocalObjectReference `json:",inline"`

	// Mode is the PIM mode to use when delivering multicast traffic via this interface.
	// +optional
	// +kubebuilder:default=Sparse
	Mode PIMInterfaceMode `json:"mode"`
}

type PIMInterfaceMode string

type PIMList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []PIM `json:"items"`
}

type PIMSpec struct {
	// DeviceName is the name of the Device this object belongs to. The Device object must exist in the same namespace.
	// Immutable.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="DeviceRef is immutable"
	DeviceRef LocalObjectReference `json:"deviceRef"`

	// ProviderConfigRef is a reference to a resource holding the provider-specific configuration of this interface.
	// This reference is used to link the PIM to its provider-specific configuration.
	// +optional
	ProviderConfigRef *TypedLocalObjectReference `json:"providerConfigRef,omitempty"`

	// RendezvousPoints defines the list of rendezvous points for sparse mode multicast.
	// +optional
	// +listType=map
	// +listMapKey=address
	// +kubebuilder:validation:MinItems=1
	RendezvousPoints []RendezvousPoint `json:"rendezvousPoints,omitempty"`

	// InterfaceRefs is a list of interfaces that are part of the PIM instance.
	// +optional
	// +listType=atomic
	// +kubebuilder:validation:MinItems=1
	InterfaceRefs []PIMInterface `json:"interfaceRefs,omitempty"`
}

type PIMStatus struct {
	// The conditions are a list of status objects that describe the state of the PIM.
	//+listType=map
	//+listMapKey=type
	//+patchStrategy=merge
	//+patchMergeKey=type
	//+optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type PasswordSource struct {
	// Selects a key of a secret.
	// +required
	SecretKeyRef SecretKeySelector `json:"secretKeyRef"`
}

type Protocol string

type RendezvousPoint struct {
	// Address is the IPv4 address of the rendezvous point.
	// +required
	// +kubebuilder:validation:Format=ipv4
	Address string `json:"address"`

	// MulticastGroups defined the list of multicast IPv4 address ranges associated with the rendezvous point.
	// If not specified, the rendezvous point will be used for all multicast groups.
	// +optional
	MulticastGroups []IPPrefix `json:"multicastGroups,omitempty"`

	// AnycastAddresses is a list of redundant anycast ipv4 addresses associated with the rendezvous point.
	// +optional
	// +listType=set
	// +kubebuilder:validation:items:Format=ipv4
	AnycastAddresses []string `json:"anycastAddresses,omitempty"`
}

type RouteTarget struct {
	// Value is the route target value, must have the format as VRFSpec.RouteDistinguisher. Validation via
	// admission webhook.
	//
	// +required
	Value string `json:"value"`

	// AddressFamilies is the list of address families for the route target.
	// +required
	// +listType=set
	// +kubebuilder:validation:MinItems=1
	AddressFamilies []RouteTargetAF `json:"addressFamilies,omitempty"`

	// Action defines whether the route target is imported, exported, or both
	// +required
	Action RouteTargetAction `json:"action"`
}

type RouteTargetAF string

type RouteTargetAction string

type SNMP struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state of the resource.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +required
	Spec SNMPSpec `json:"spec,omitempty"`

	// Status of the resource. This is set and updated automatically.
	// Read-only.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +optional
	Status SNMPStatus `json:"status,omitempty,omitzero"`
}

type SNMPCommunity struct {
	// Name of the community.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	Name string `json:"name"`

	// Group to which the community belongs.
	// +optional
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	Group string `json:"group,omitempty"`

	// ACL name to filter SNMP requests.
	// +optional
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	ACLName string `json:"aclName,omitempty"`
}

type SNMPHosts struct {
	// The Hostname or IP address of the SNMP host to send notifications to.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	Address string `json:"address"`

	// Type of message to send to host. Default is traps.
	// +optional
	// +kubebuilder:default=Traps
	// +kubebuilder:validation:Enum=Traps;Informs
	Type string `json:"type"`

	// SNMP version. Default is v2c.
	// +optional
	// +kubebuilder:default=v2c
	// +kubebuilder:validation:Enum=v1;v2c;v3
	Version string `json:"version"`

	// SNMP community or user name.
	// +optional
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	Community string `json:"community,omitempty"`

	// The name of the vrf instance to use to source traffic.
	// +optional
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	VrfName string `json:"vrfName,omitempty"`
}

type SNMPList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []SNMP `json:"items"`
}

type SNMPSpec struct {
	// DeviceName is the name of the Device this object belongs to. The Device object must exist in the same namespace.
	// Immutable.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="DeviceRef is immutable"
	DeviceRef LocalObjectReference `json:"deviceRef"`

	// ProviderConfigRef is a reference to a resource holding the provider-specific configuration of this interface.
	// This reference is used to link the SNMP to its provider-specific configuration.
	// +optional
	ProviderConfigRef *TypedLocalObjectReference `json:"providerConfigRef,omitempty"`

	// The contact information for the SNMP server.
	// +optional
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	Contact string `json:"contact,omitempty"`

	// The location information for the SNMP server.
	// +optional
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	Location string `json:"location,omitempty"`

	// The name of the interface to be used for sending out SNMP Trap/Inform notifications.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	SourceInterfaceName string `json:"sourceInterfaceName"`

	// SNMP communities for SNMPv1 or SNMPv2c.
	// +optional
	// +listType=map
	// +listMapKey=name
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=16
	Communities []SNMPCommunity `json:"communities,omitempty"`

	// SNMP destination hosts for SNMP traps or informs messages.
	// +required
	// +listType=map
	// +listMapKey=address
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=16
	Hosts []SNMPHosts `json:"hosts"`

	// The list of trap notifications to enable.
	// +optional
	// +listType=set
	// +kubebuilder:validation:MinItems=1
	Traps []string `json:"traps,omitempty"`
}

type SNMPStatus struct {
	// The conditions are a list of status objects that describe the state of the SNMP.
	//+listType=map
	//+listMapKey=type
	//+patchStrategy=merge
	//+patchMergeKey=type
	//+optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type SSH struct {
	// Enable or disable the SSH server on the device.
	// If not specified, the SSH server is enabled by default.
	// +optional
	// +kubebuilder:default=true
	Enabled bool `json:"enabled"`

	// The timeout duration for SSH sessions.
	// If not specified, the default timeout is 10 minutes.
	// +optional
	// +kubebuilder:default="10m"
	// +kubebuilder:validation:Type=string
	Timeout metav1.Duration `json:"timeout,omitzero"`

	// The maximum number of concurrent SSH sessions allowed.
	// If not specified, the default limit is 32.
	// +optional
	// +kubebuilder:default=32
	// +kubebuilder:validation:Minimum=1
	// +kubebuilder:validation:Maximum=64
	// +kubebuilder:validation:ExclusiveMaximum=false
	SessionLimit int8 `json:"sessionLimit,omitempty"`
}

type SSHPublicKeySource struct {
	// Selects a key of a secret.
	// +required
	SecretKeyRef SecretKeySelector `json:"secretKeyRef"`
}

type SecretKeySelector struct {
	// Name of the secret resource being referred to.
	SecretReference `json:",inline"`

	// Key is the of the entry in the secret resource's `data` or `stringData`
	// field to be used.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=253
	Key string `json:"key"`
}

type SecretReference struct {
	// Name is unique within a namespace to reference a secret resource.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=253
	Name string `json:"name"`

	// Namespace defines the space within which the secret name must be unique.
	// If omitted, the namespace of the object being reconciled will be used.
	// +optional
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	Namespace string `json:"namespace,omitempty"`
}

type Severity string

type Switchport struct {
	// Mode defines the switchport mode, such as access or trunk.
	// +required
	Mode SwitchportMode `json:"mode"`

	// AccessVlan specifies the VLAN ID for access mode switchports.
	// Only applicable when Mode is set to "Access".
	// +optional
	// +kubebuilder:validation:Minimum=1
	// +kubebuilder:validation:Maximum=4094
	AccessVlan int32 `json:"accessVlan,omitempty"`

	// NativeVlan specifies the native VLAN ID for trunk mode switchports.
	// Only applicable when Mode is set to "Trunk".
	// +optional
	// +kubebuilder:validation:Minimum=1
	// +kubebuilder:validation:Maximum=4094
	NativeVlan int32 `json:"nativeVlan,omitempty"`

	// AllowedVlans is a list of VLAN IDs that are allowed on the trunk port.
	// Only applicable when Mode is set to "Trunk".
	// +optional
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:items:Minimum=1
	// +kubebuilder:validation:items:Maximum=4094
	AllowedVlans []int32 `json:"allowedVlans,omitempty"`
}

type SwitchportMode string

type Syslog struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state of the resource.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +required
	Spec SyslogSpec `json:"spec,omitempty"`

	// Status of the resource. This is set and updated automatically.
	// Read-only.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +optional
	Status SyslogStatus `json:"status,omitempty,omitzero"`
}

type SyslogList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Syslog `json:"items"`
}

type SyslogSpec struct {
	// DeviceName is the name of the Device this object belongs to. The Device object must exist in the same namespace.
	// Immutable.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="DeviceRef is immutable"
	DeviceRef LocalObjectReference `json:"deviceRef"`

	// ProviderConfigRef is a reference to a resource holding the provider-specific configuration of this interface.
	// This reference is used to link the Interface to its provider-specific configuration.
	// +optional
	ProviderConfigRef *TypedLocalObjectReference `json:"providerConfigRef,omitempty"`

	// Servers is a list of remote log servers to which the device will send logs.
	// +required
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=16
	Servers []LogServer `json:"servers"`

	// Facilities is a list of log facilities to configure on the device.
	// +required
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=64
	Facilities []LogFacility `json:"facilities"`
}

type SyslogStatus struct {
	// The conditions are a list of status objects that describe the state of the Banner.
	//+listType=map
	//+listMapKey=type
	//+patchStrategy=merge
	//+patchMergeKey=type
	//+optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type TLS struct {
	// The CA certificate to verify the server's identity.
	// +required
	CA SecretKeySelector `json:"ca"`

	// The client certificate and private key to use for mutual TLS authentication.
	// Leave empty if mTLS is not desired.
	// +optional
	Certificate *CertificateSource `json:"certificate,omitempty"`
}

type TemplateSource struct {
	// Inline template content
	// +optional
	// +kubebuilder:validation:MinLength=1
	Inline *string `json:"inline,omitempty"`

	// Reference to a Secret containing the template
	// +optional
	SecretRef *SecretKeySelector `json:"secretRef,omitempty"`

	// Reference to a ConfigMap containing the template
	// +optional
	ConfigMapRef *ConfigMapKeySelector `json:"configMapRef,omitempty"`
}

type TypedLocalObjectReference struct {
	// Kind of the resource being referenced.
	// Kind must consist of alphanumeric characters or '-', start with an alphabetic character, and end with an alphanumeric character.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	// +kubebuilder:validation:Pattern=`^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$`
	Kind string `json:"kind"`

	// Name of the resource being referenced.
	// Name must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=253
	// +kubebuilder:validation:Pattern=`^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$`
	Name string `json:"name"`

	// APIVersion is the api group version of the resource being referenced.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=253
	//+kubebuilder:validation:Pattern=`^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*\/)?([a-z0-9]([-a-z0-9]*[a-z0-9])?)$`
	APIVersion string `json:"apiVersion"`
}

type User struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state of the resource.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +required
	Spec UserSpec `json:"spec,omitempty"`

	// Status of the resource. This is set and updated automatically.
	// Read-only.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +optional
	Status UserStatus `json:"status,omitempty,omitzero"`
}

type UserList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []User `json:"items"`
}

type UserRole struct {
	// The name of the role.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	Name string `json:"name"`
}

type UserSpec struct {
	// DeviceName is the name of the Device this object belongs to. The Device object must exist in the same namespace.
	// Immutable.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="DeviceRef is immutable"
	DeviceRef LocalObjectReference `json:"deviceRef"`

	// ProviderConfigRef is a reference to a resource holding the provider-specific configuration of this interface.
	// This reference is used to link the User to its provider-specific configuration.
	// +optional
	ProviderConfigRef *TypedLocalObjectReference `json:"providerConfigRef,omitempty"`

	// Assigned username for this user.
	// Immutable.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Username is immutable"
	Username string `json:"username"`

	// The user password, supplied in cleartext.
	// +required
	Password PasswordSource `json:"password"`

	// Role which the user is to be assigned to.
	// +required
	// +listType=map
	// +listMapKey=name
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=64
	Roles []UserRole `json:"roles"`

	// SSH public key for this user.
	// +optional
	SSHPublicKey *SSHPublicKeySource `json:"sshPublicKey,omitempty"`
}

type UserStatus struct {
	// The conditions are a list of status objects that describe the state of the User.
	//+listType=map
	//+listMapKey=type
	//+patchStrategy=merge
	//+patchMergeKey=type
	//+optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type VLAN struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state of the resource.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +required
	Spec VLANSpec `json:"spec,omitempty"`

	// Status of the resource. This is set and updated automatically.
	// Read-only.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +optional
	Status VLANStatus `json:"status,omitempty,omitzero"`
}