v1alpha1

type Address struct {
	// ip contains a fixed IP address assigned to the port. It must belong
	// to the referenced subnet's CIDR. If not specified, OpenStack
	// allocates an available IP from the referenced subnet.
	// +optional
	IP *IPvAny `json:"ip,omitempty"`

	// subnetRef references the subnet from which to allocate the IP
	// address.
	// +required
	SubnetRef KubernetesNameRef `json:"subnetRef,omitempty"`
}

type AddressScope struct {
	metav1.TypeMeta `json:",inline"`

	// metadata contains the object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// spec specifies the desired state of the resource.
	// +required
	Spec AddressScopeSpec `json:"spec,omitzero"`

	// status defines the observed state of the resource.
	// +optional
	Status AddressScopeStatus `json:"status,omitempty"`
}

type AddressScopeFilter struct {
	// name of the existing resource
	// +optional
	Name *OpenStackName `json:"name,omitempty"`

	// projectRef is a reference to the ORC Project which this resource is associated with.
	// +optional
	ProjectRef *KubernetesNameRef `json:"projectRef,omitempty"`

	// ipVersion is the IP protocol version.
	// +optional
	IPVersion IPVersion `json:"ipVersion,omitempty"`

	// shared indicates whether this resource is shared across all
	// projects or not. By default, only admin users can change set
	// this value.
	// +optional
	Shared *bool `json:"shared,omitempty"`
}

type AddressScopeImport struct {
	// id contains the unique identifier of an existing OpenStack resource. Note
	// that when specifying an import by ID, the resource MUST already exist.
	// The ORC object will enter an error state if the resource does not exist.
	// +kubebuilder:validation:Format:=uuid
	// +kubebuilder:validation:MaxLength:=36
	// +optional
	ID *string `json:"id,omitempty"` //nolint:kubeapilinter

	// filter contains a resource query which is expected to return a single
	// result. The controller will continue to retry if filter returns no
	// results. If filter returns multiple results the controller will set an
	// error state and will not continue to retry.
	// +optional
	Filter *AddressScopeFilter `json:"filter,omitempty"`
}

type AddressScopeList struct {
	metav1.TypeMeta `json:",inline"`

	// metadata contains the list metadata
	// +optional
	metav1.ListMeta `json:"metadata,omitempty"`

	// items contains a list of AddressScope.
	// +required
	Items []AddressScope `json:"items"`
}

type AddressScopeResourceSpec struct {
	// name will be the name of the created resource. If not specified, the
	// name of the ORC object will be used.
	// +optional
	Name *OpenStackName `json:"name,omitempty"`

	// projectRef is a reference to the ORC Project which this resource is associated with.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="projectRef is immutable"
	ProjectRef *KubernetesNameRef `json:"projectRef,omitempty"`

	// ipVersion is the IP protocol version.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="ipVersion is immutable"
	IPVersion IPVersion `json:"ipVersion"`

	// shared indicates whether this resource is shared across all
	// projects or not. By default, only admin users can change set
	// this value. We can't unshared a shared address scope; Neutron
	// enforces this.
	// +optional
	// +kubebuilder:validation:XValidation:rule="!(oldSelf && !self)",message="shared address scope can't be unshared"
	Shared *bool `json:"shared,omitempty"`
}

type AddressScopeResourceStatus struct {
	// name is a Human-readable name for the resource. Might not be unique.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	Name string `json:"name,omitempty"`

	// projectID is the ID of the Project to which the resource is associated.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	ProjectID string `json:"projectID,omitempty"`

	// ipVersion is the IP protocol version.
	// +optional
	IPVersion int32 `json:"ipVersion,omitempty"`

	// shared indicates whether this resource is shared across all
	// projects or not. By default, only admin users can change set
	// this value.
	// +optional
	Shared *bool `json:"shared,omitempty"`
}

type AddressScopeSpec struct {
	// import refers to an existing OpenStack resource which will be imported instead of
	// creating a new one.
	// +optional
	Import *AddressScopeImport `json:"import,omitempty"`

	// resource specifies the desired state of the resource.
	//
	// resource may not be specified if the management policy is `unmanaged`.
	//
	// resource must be specified if the management policy is `managed`.
	// +optional
	Resource *AddressScopeResourceSpec `json:"resource,omitempty"`

	// managementPolicy defines how ORC will treat the object. Valid values are
	// `managed`: ORC will create, update, and delete the resource; `unmanaged`:
	// ORC will import an existing resource, and will not apply updates to it or
	// delete it.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="managementPolicy is immutable"
	// +kubebuilder:default:=managed
	// +optional
	ManagementPolicy ManagementPolicy `json:"managementPolicy,omitempty"`

	// managedOptions specifies options which may be applied to managed objects.
	// +optional
	ManagedOptions *ManagedOptions `json:"managedOptions,omitempty"`

	// cloudCredentialsRef points to a secret containing OpenStack credentials
	// +required
	CloudCredentialsRef CloudCredentialsReference `json:"cloudCredentialsRef,omitzero"`
}

type AddressScopeStatus struct {
	// conditions represents the observed status of the object.
	// Known .status.conditions.type are: "Available", "Progressing"
	//
	// Available represents the availability of the OpenStack resource. If it is
	// true then the resource is ready for use.
	//
	// Progressing indicates whether the controller is still attempting to
	// reconcile the current state of the OpenStack resource to the desired
	// state. Progressing will be False either because the desired state has
	// been achieved, or because some terminal error prevents it from ever being
	// achieved and the controller is no longer attempting to reconcile. If
	// Progressing is True, an observer waiting on the resource should continue
	// to wait.
	//
	// +kubebuilder:validation:MaxItems:=32
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`

	// id is the unique identifier of the OpenStack resource.
	// +kubebuilder:validation:MaxLength:=1024
	// +optional
	ID *string `json:"id,omitempty"`

	// resource contains the observed state of the OpenStack resource.
	// +optional
	Resource *AddressScopeResourceStatus `json:"resource,omitempty"`
}

type AllocationPool struct {
	// start is the first IP address in the allocation pool.
	// +required
	Start IPvAny `json:"start,omitempty"`

	// end is the last IP address in the allocation pool.
	// +required
	End IPvAny `json:"end,omitempty"`
}

type AllocationPoolStatus struct {
	// start is the first IP address in the allocation pool.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	Start string `json:"start,omitempty"`

	// end is the last IP address in the allocation pool.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	End string `json:"end,omitempty"`
}

type AllowedAddressPair struct {
	// ip contains an IP address which a server connected to the port can
	// send packets with. It can be an IP Address or a CIDR (if supported
	// by the underlying extension plugin).
	// +required
	IP IPvAny `json:"ip,omitempty"`

	// mac contains a MAC address which a server connected to the port can
	// send packets with. Defaults to the MAC address of the port.
	// +optional
	MAC *MAC `json:"mac,omitempty"`
}

type AllowedAddressPairStatus struct {
	// ip contains an IP address which a server connected to the port can
	// send packets with.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	IP string `json:"ip,omitempty"`

	// mac contains a MAC address which a server connected to the port can
	// send packets with.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	MAC string `json:"mac,omitempty"`
}

type ApplicationCredential struct {
	metav1.TypeMeta `json:",inline"`

	// metadata contains the object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// spec specifies the desired state of the resource.
	// +required
	Spec ApplicationCredentialSpec `json:"spec,omitzero"`

	// status defines the observed state of the resource.
	// +optional
	Status ApplicationCredentialStatus `json:"status,omitempty"`
}

type ApplicationCredentialAccessRule struct {
	// path that the application credential is permitted to access
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	Path *string `json:"path,omitempty"`

	// method that the application credential is permitted to use for a given API endpoint
	// +optional
	Method *HTTPMethod `json:"method,omitempty"`

	// serviceRef identifier for the service that the application credential is permitted to access
	// +optional
	ServiceRef *KubernetesNameRef `json:"serviceRef,omitempty"`
}

type ApplicationCredentialAccessRuleStatus struct {
	// id is the ID of this access rule
	// +kubebuilder:validation:MaxLength:=1024
	// +optional
	ID *string `json:"id,omitempty"`

	// path that the application credential is permitted to access
	// +kubebuilder:validation:MaxLength:=1024
	// +optional
	Path *string `json:"path,omitempty"`

	// method that the application credential is permitted to use for a given API endpoint
	// +kubebuilder:validation:MaxLength=32
	// +optional
	Method *string `json:"method,omitempty"`

	// service type identifier for the service that the application credential is permitted to access
	// +kubebuilder:validation:MaxLength:=1024
	// +optional
	Service *string `json:"service,omitempty"`
}

type ApplicationCredentialFilter struct {
	// userRef is a reference to the ORC User which this resource is associated with.
	// Note: Due to the nature of the OpenStack API, managing application credentials for a user different than the one ORC is authenticated against can be computationally expensive. In the worst case, all application credentials of all users have to be queried.
	// +required
	UserRef KubernetesNameRef `json:"userRef,omitempty"`

	// name of the existing resource
	// +optional
	Name *OpenStackName `json:"name,omitempty"`

	// description of the existing resource
	// +kubebuilder:validation:MaxLength:=1024
	// +optional
	Description *string `json:"description,omitempty"`
}

type ApplicationCredentialImport struct {
	// id contains the unique identifier of an existing OpenStack resource. Note
	// that when specifying an import by ID, the resource MUST already exist.
	// The ORC object will enter an error state if the resource does not exist.
	// +kubebuilder:validation:Format:=uuid
	// +kubebuilder:validation:MaxLength:=36
	// +optional
	ID *string `json:"id,omitempty"` //nolint:kubeapilinter

	// filter contains a resource query which is expected to return a single
	// result. The controller will continue to retry if filter returns no
	// results. If filter returns multiple results the controller will set an
	// error state and will not continue to retry.
	// +optional
	Filter *ApplicationCredentialFilter `json:"filter,omitempty"`
}

type ApplicationCredentialList struct {
	metav1.TypeMeta `json:",inline"`

	// metadata contains the list metadata
	// +optional
	metav1.ListMeta `json:"metadata,omitempty"`

	// items contains a list of ApplicationCredential.
	// +required
	Items []ApplicationCredential `json:"items"`
}

type ApplicationCredentialResourceSpec struct {
	// name will be the name of the created resource. If not specified, the
	// name of the ORC object will be used.
	// +optional
	Name *OpenStackName `json:"name,omitempty"`

	// description is a human-readable description for the resource.
	// +kubebuilder:validation:MinLength:=1
	// +kubebuilder:validation:MaxLength:=255
	// +optional
	Description *string `json:"description,omitempty"`

	// userRef is a reference to the ORC User which this resource is associated with.
	// Note: Due to the nature of the OpenStack API, managing application credentials for a user different than the one ORC is authenticated against can be computationally expensive. In the worst case, all application credentials of all users have to be queried.
	// +required
	UserRef KubernetesNameRef `json:"userRef,omitempty"`

	// unrestricted is a flag indicating whether the application credential may be used for creation or destruction of other application credentials or trusts
	// +optional
	Unrestricted *bool `json:"unrestricted,omitempty"`

	// secretRef is a reference to a Secret containing the application credential secret
	// +required
	SecretRef KubernetesNameRef `json:"secretRef,omitempty"`

	// roleRefs may only contain roles that the user has assigned on the project. If not provided, the roles assigned to the application credential will be the same as the roles in the current token.
	// +kubebuilder:validation:MaxItems:=256
	// +listType=atomic
	// +optional
	RoleRefs []KubernetesNameRef `json:"roleRefs,omitempty"`

	// accessRules is a list of fine grained access control rules
	// +kubebuilder:validation:MaxItems:=256
	// +listType=atomic
	// +optional
	AccessRules []ApplicationCredentialAccessRule `json:"accessRules,omitempty"`

	// expiresAt is the time of expiration for the application credential. If unset, the application credential does not expire.
	// +optional
	ExpiresAt *metav1.Time `json:"expiresAt,omitempty"`
}

type ApplicationCredentialResourceStatus struct {
	// name is a Human-readable name for the resource. Might not be unique.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	Name string `json:"name,omitempty"`

	// description is a human-readable description for the resource.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	Description string `json:"description,omitempty"`

	// unrestricted is a flag indicating whether the application credential may be used for creation or destruction of other application credentials or trusts
	// +optional
	Unrestricted bool `json:"unrestricted,omitempty"`

	// projectID of the project the application credential was created for and that authentication requests using this application credential will be scoped to.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	ProjectID string `json:"projectID,omitempty"`

	// roles is a list of role objects may only contain roles that the user has assigned on the project
	// +kubebuilder:validation:MaxItems:=64
	// +listType=atomic
	// +optional
	Roles []ApplicationCredentialRoleStatus `json:"roles"`

	// expiresAt is the time of expiration for the application credential. If unset, the application credential does not expire.
	// +optional
	ExpiresAt *metav1.Time `json:"expiresAt"`

	// accessRules is a list of fine grained access control rules
	// +kubebuilder:validation:MaxItems:=64
	// +listType=atomic
	// +optional
	AccessRules []ApplicationCredentialAccessRuleStatus `json:"accessRules,omitempty"`
}

type ApplicationCredentialRoleStatus struct {
	// name of an existing role
	// +kubebuilder:validation:MaxLength:=1024
	// +optional
	Name *string `json:"name,omitempty"`

	// id is the ID of a role
	// +kubebuilder:validation:MaxLength:=1024
	// +optional
	ID *string `json:"id,omitempty"`

	// domainID of the domain of this role
	// +kubebuilder:validation:MaxLength:=1024
	// +optional
	DomainID *string `json:"domainID,omitempty"`
}

type ApplicationCredentialSpec struct {
	// import refers to an existing OpenStack resource which will be imported instead of
	// creating a new one.
	// +optional
	Import *ApplicationCredentialImport `json:"import,omitempty"`

	// resource specifies the desired state of the resource.
	//
	// resource may not be specified if the management policy is `unmanaged`.
	//
	// resource must be specified if the management policy is `managed`.
	// +optional
	Resource *ApplicationCredentialResourceSpec `json:"resource,omitempty"`

	// managementPolicy defines how ORC will treat the object. Valid values are
	// `managed`: ORC will create, update, and delete the resource; `unmanaged`:
	// ORC will import an existing resource, and will not apply updates to it or
	// delete it.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="managementPolicy is immutable"
	// +kubebuilder:default:=managed
	// +optional
	ManagementPolicy ManagementPolicy `json:"managementPolicy,omitempty"`

	// managedOptions specifies options which may be applied to managed objects.
	// +optional
	ManagedOptions *ManagedOptions `json:"managedOptions,omitempty"`

	// cloudCredentialsRef points to a secret containing OpenStack credentials
	// +required
	CloudCredentialsRef CloudCredentialsReference `json:"cloudCredentialsRef,omitzero"`
}

type ApplicationCredentialStatus struct {
	// conditions represents the observed status of the object.
	// Known .status.conditions.type are: "Available", "Progressing"
	//
	// Available represents the availability of the OpenStack resource. If it is
	// true then the resource is ready for use.
	//
	// Progressing indicates whether the controller is still attempting to
	// reconcile the current state of the OpenStack resource to the desired
	// state. Progressing will be False either because the desired state has
	// been achieved, or because some terminal error prevents it from ever being
	// achieved and the controller is no longer attempting to reconcile. If
	// Progressing is True, an observer waiting on the resource should continue
	// to wait.
	//
	// +kubebuilder:validation:MaxItems:=32
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`

	// id is the unique identifier of the OpenStack resource.
	// +kubebuilder:validation:MaxLength:=1024
	// +optional
	ID *string `json:"id,omitempty"`

	// resource contains the observed state of the OpenStack resource.
	// +optional
	Resource *ApplicationCredentialResourceStatus `json:"resource,omitempty"`
}

type AvailabilityZoneHint string

type CIDR string

type CloudCredentialsRefProvider interface {
	GetCloudCredentialsRef() (*string, *CloudCredentialsReference)
}

type CloudCredentialsReference struct {
	// secretName is the name of a secret in the same namespace as the resource being provisioned.
	// The secret must contain a key named `clouds.yaml` which contains an OpenStack clouds.yaml file.
	// The secret may optionally contain a key named `cacert` containing a PEM-encoded CA certificate.
	// +required
	// +kubebuilder:validation:MinLength:=1
	// +kubebuilder:validation:MaxLength:=253
	SecretName string `json:"secretName,omitempty"`

	// cloudName specifies the name of the entry in the clouds.yaml file to use.
	// +required
	// +kubebuilder:validation:MinLength:=1
	// +kubebuilder:validation:MaxLength:=256
	CloudName string `json:"cloudName,omitempty"`
}

type DNSDomain string

type Domain struct {
	metav1.TypeMeta `json:",inline"`

	// metadata contains the object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// spec specifies the desired state of the resource.
	// +required
	Spec DomainSpec `json:"spec,omitzero"`

	// status defines the observed state of the resource.
	// +optional
	Status DomainStatus `json:"status,omitempty"`
}

type DomainFilter struct {
	// name of the existing resource
	// +optional
	Name *KeystoneName `json:"name,omitempty"`

	// enabled defines whether a domain is enabled or not. Default is true.
	// Note: Users can only authorize against an enabled domain (and any of its projects).
	// +optional
	Enabled *bool `json:"enabled,omitempty"`
}

type DomainImport struct {
	// id contains the unique identifier of an existing OpenStack resource. Note
	// that when specifying an import by ID, the resource MUST already exist.
	// The ORC object will enter an error state if the resource does not exist.
	// +kubebuilder:validation:Format:=uuid
	// +kubebuilder:validation:MaxLength:=36
	// +optional
	ID *string `json:"id,omitempty"` //nolint:kubeapilinter

	// filter contains a resource query which is expected to return a single
	// result. The controller will continue to retry if filter returns no
	// results. If filter returns multiple results the controller will set an
	// error state and will not continue to retry.
	// +optional
	Filter *DomainFilter `json:"filter,omitempty"`
}

type DomainList struct {
	metav1.TypeMeta `json:",inline"`

	// metadata contains the list metadata
	// +optional
	metav1.ListMeta `json:"metadata,omitempty"`

	// items contains a list of Domain.
	// +required
	Items []Domain `json:"items"`
}

type DomainResourceSpec struct {
	// name will be the name of the created resource. If not specified, the
	// name of the ORC object will be used.
	// +optional
	Name *KeystoneName `json:"name,omitempty"`

	// description is a human-readable description for the resource.
	// +kubebuilder:validation:MinLength:=1
	// +kubebuilder:validation:MaxLength:=255
	// +optional
	Description *string `json:"description,omitempty"`

	// enabled defines whether a domain is enabled or not. Default is true.
	// Note: Users can only authorize against an enabled domain (and any of its projects).
	// +optional
	Enabled *bool `json:"enabled,omitempty"`
}

type DomainResourceStatus struct {
	// name is a Human-readable name for the resource. Might not be unique.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	Name string `json:"name,omitempty"`

	// description is a human-readable description for the resource.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	Description string `json:"description,omitempty"`

	// enabled defines whether a domain is enabled or not. Default is true.
	// Note: Users can only authorize against an enabled domain (and any of its projects).
	// +optional
	Enabled *bool `json:"enabled,omitempty"`
}

type DomainSpec struct {
	// import refers to an existing OpenStack resource which will be imported instead of
	// creating a new one.
	// +optional
	Import *DomainImport `json:"import,omitempty"`

	// resource specifies the desired state of the resource.
	//
	// resource may not be specified if the management policy is `unmanaged`.
	//
	// resource must be specified if the management policy is `managed`.
	// +optional
	Resource *DomainResourceSpec `json:"resource,omitempty"`

	// managementPolicy defines how ORC will treat the object. Valid values are
	// `managed`: ORC will create, update, and delete the resource; `unmanaged`:
	// ORC will import an existing resource, and will not apply updates to it or
	// delete it.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="managementPolicy is immutable"
	// +kubebuilder:default:=managed
	// +optional
	ManagementPolicy ManagementPolicy `json:"managementPolicy,omitempty"`

	// managedOptions specifies options which may be applied to managed objects.
	// +optional
	ManagedOptions *ManagedOptions `json:"managedOptions,omitempty"`

	// cloudCredentialsRef points to a secret containing OpenStack credentials
	// +required
	CloudCredentialsRef CloudCredentialsReference `json:"cloudCredentialsRef,omitzero"`
}

type DomainStatus struct {
	// conditions represents the observed status of the object.
	// Known .status.conditions.type are: "Available", "Progressing"
	//
	// Available represents the availability of the OpenStack resource. If it is
	// true then the resource is ready for use.
	//
	// Progressing indicates whether the controller is still attempting to
	// reconcile the current state of the OpenStack resource to the desired
	// state. Progressing will be False either because the desired state has
	// been achieved, or because some terminal error prevents it from ever being
	// achieved and the controller is no longer attempting to reconcile. If
	// Progressing is True, an observer waiting on the resource should continue
	// to wait.
	//
	// +kubebuilder:validation:MaxItems:=32
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`

	// id is the unique identifier of the OpenStack resource.
	// +kubebuilder:validation:MaxLength:=1024
	// +optional
	ID *string `json:"id,omitempty"`

	// resource contains the observed state of the OpenStack resource.
	// +optional
	Resource *DomainResourceStatus `json:"resource,omitempty"`
}

type Endpoint struct {
	metav1.TypeMeta `json:",inline"`

	// metadata contains the object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// spec specifies the desired state of the resource.
	// +required
	Spec EndpointSpec `json:"spec,omitzero"`

	// status defines the observed state of the resource.
	// +optional
	Status EndpointStatus `json:"status,omitempty"`
}

type EndpointFilter struct {
	// interface of the existing endpoint.
	// +kubebuilder:validation:Enum:=admin;internal;public
	// +optional
	Interface string `json:"interface,omitempty"`

	// serviceRef is a reference to the ORC Service which this resource is associated with.
	// +optional
	ServiceRef *KubernetesNameRef `json:"serviceRef,omitempty"`

	// url is the URL of the existing endpoint.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	URL string `json:"url,omitempty"`
}

type EndpointImport struct {
	// id contains the unique identifier of an existing OpenStack resource. Note
	// that when specifying an import by ID, the resource MUST already exist.
	// The ORC object will enter an error state if the resource does not exist.
	// +kubebuilder:validation:Format:=uuid
	// +kubebuilder:validation:MaxLength:=36
	// +optional
	ID *string `json:"id,omitempty"` //nolint:kubeapilinter

	// filter contains a resource query which is expected to return a single
	// result. The controller will continue to retry if filter returns no
	// results. If filter returns multiple results the controller will set an
	// error state and will not continue to retry.
	// +optional
	Filter *EndpointFilter `json:"filter,omitempty"`
}

type EndpointList struct {
	metav1.TypeMeta `json:",inline"`

	// metadata contains the list metadata
	// +optional
	metav1.ListMeta `json:"metadata,omitempty"`

	// items contains a list of Endpoint.
	// +required
	Items []Endpoint `json:"items"`
}

type EndpointResourceSpec struct {
	// description is a human-readable description for the resource.
	// +kubebuilder:validation:MinLength:=1
	// +kubebuilder:validation:MaxLength:=255
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="description is immutable"
	Description *string `json:"description,omitempty"`

	// enabled indicates whether the endpoint is enabled or not.
	// +optional
	Enabled *bool `json:"enabled,omitempty"`

	// interface indicates the visibility of the endpoint.
	// +kubebuilder:validation:Enum:=admin;internal;public
	// +required
	Interface string `json:"interface,omitempty"`

	// url is the endpoint URL.
	// +kubebuilder:validation:MaxLength=1024
	// +required
	URL string `json:"url"`

	// serviceRef is a reference to the ORC Service which this resource is associated with.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="serviceRef is immutable"
	ServiceRef KubernetesNameRef `json:"serviceRef,omitempty"`
}

type EndpointResourceStatus struct {
	// description is a human-readable description for the resource.
	// +kubebuilder:validation:MinLength:=1
	// +kubebuilder:validation:MaxLength:=255
	// +optional
	Description string `json:"description,omitempty"`

	// enabled indicates whether the endpoint is enabled or not.
	// +optional
	Enabled *bool `json:"enabled,omitempty"`

	// interface indicates the visibility of the endpoint.
	// +kubebuilder:validation:MaxLength=128
	// +optional
	Interface string `json:"interface,omitempty"`

	// url is the endpoint URL.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	URL string `json:"url,omitempty"`

	// serviceID is the ID of the Service to which the resource is associated.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	ServiceID string `json:"serviceID,omitempty"`
}

type EndpointSpec struct {
	// import refers to an existing OpenStack resource which will be imported instead of
	// creating a new one.
	// +optional
	Import *EndpointImport `json:"import,omitempty"`

	// resource specifies the desired state of the resource.
	//
	// resource may not be specified if the management policy is `unmanaged`.
	//
	// resource must be specified if the management policy is `managed`.
	// +optional
	Resource *EndpointResourceSpec `json:"resource,omitempty"`

	// managementPolicy defines how ORC will treat the object. Valid values are
	// `managed`: ORC will create, update, and delete the resource; `unmanaged`:
	// ORC will import an existing resource, and will not apply updates to it or
	// delete it.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="managementPolicy is immutable"
	// +kubebuilder:default:=managed
	// +optional
	ManagementPolicy ManagementPolicy `json:"managementPolicy,omitempty"`

	// managedOptions specifies options which may be applied to managed objects.
	// +optional
	ManagedOptions *ManagedOptions `json:"managedOptions,omitempty"`

	// cloudCredentialsRef points to a secret containing OpenStack credentials
	// +required
	CloudCredentialsRef CloudCredentialsReference `json:"cloudCredentialsRef,omitzero"`
}

type EndpointStatus struct {
	// conditions represents the observed status of the object.
	// Known .status.conditions.type are: "Available", "Progressing"
	//
	// Available represents the availability of the OpenStack resource. If it is
	// true then the resource is ready for use.
	//
	// Progressing indicates whether the controller is still attempting to
	// reconcile the current state of the OpenStack resource to the desired
	// state. Progressing will be False either because the desired state has
	// been achieved, or because some terminal error prevents it from ever being
	// achieved and the controller is no longer attempting to reconcile. If
	// Progressing is True, an observer waiting on the resource should continue
	// to wait.
	//
	// +kubebuilder:validation:MaxItems:=32
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`

	// id is the unique identifier of the OpenStack resource.
	// +kubebuilder:validation:MaxLength:=1024
	// +optional
	ID *string `json:"id,omitempty"`

	// resource contains the observed state of the OpenStack resource.
	// +optional
	Resource *EndpointResourceStatus `json:"resource,omitempty"`
}

type Ethertype string

type ExternalGateway struct {
	// networkRef is a reference to the ORC Network which the external
	// gateway is on.
	// +required
	NetworkRef KubernetesNameRef `json:"networkRef,omitempty"`
}

type ExternalGatewayStatus struct {
	// networkID is the ID of the network the gateway is on.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	NetworkID string `json:"networkID,omitempty"`
}

type FilterByKeystoneTags struct {
	// tags is a list of tags to filter by. If specified, the resource must
	// have all of the tags specified to be included in the result.
	// +listType=set
	// +optional
	// +kubebuilder:validation:MaxItems:=80
	Tags []KeystoneTag `json:"tags,omitempty"`

	// tagsAny is a list of tags to filter by. If specified, the resource
	// must have at least one of the tags specified to be included in the
	// result.
	// +listType=set
	// +optional
	// +kubebuilder:validation:MaxItems:=80
	TagsAny []KeystoneTag `json:"tagsAny,omitempty"`

	// notTags is a list of tags to filter by. If specified, resources which
	// contain all of the given tags will be excluded from the result.
	// +listType=set
	// +optional
	// +kubebuilder:validation:MaxItems:=80
	NotTags []KeystoneTag `json:"notTags,omitempty"`

	// notTagsAny is a list of tags to filter by. If specified, resources
	// which contain any of the given tags will be excluded from the result.
	// +listType=set
	// +optional
	// +kubebuilder:validation:MaxItems:=80
	NotTagsAny []KeystoneTag `json:"notTagsAny,omitempty"`
}

type FilterByNeutronTags struct {
	// tags is a list of tags to filter by. If specified, the resource must
	// have all of the tags specified to be included in the result.
	// +listType=set
	// +optional
	// +kubebuilder:validation:MaxItems:=64
	Tags []NeutronTag `json:"tags,omitempty"`

	// tagsAny is a list of tags to filter by. If specified, the resource
	// must have at least one of the tags specified to be included in the
	// result.
	// +listType=set
	// +optional
	// +kubebuilder:validation:MaxItems:=64
	TagsAny []NeutronTag `json:"tagsAny,omitempty"`

	// notTags is a list of tags to filter by. If specified, resources which
	// contain all of the given tags will be excluded from the result.
	// +listType=set
	// +optional
	// +kubebuilder:validation:MaxItems:=64
	NotTags []NeutronTag `json:"notTags,omitempty"`

	// notTagsAny is a list of tags to filter by. If specified, resources
	// which contain any of the given tags will be excluded from the result.
	// +listType=set
	// +optional
	// +kubebuilder:validation:MaxItems:=64
	NotTagsAny []NeutronTag `json:"notTagsAny,omitempty"`
}

type FilterByServerTags struct {
	// tags is a list of tags to filter by. If specified, the resource must
	// have all of the tags specified to be included in the result.
	// +listType=set
	// +optional
	// +kubebuilder:validation:MaxItems:=50
	Tags []ServerTag `json:"tags,omitempty"`

	// tagsAny is a list of tags to filter by. If specified, the resource
	// must have at least one of the tags specified to be included in the
	// result.
	// +listType=set
	// +optional
	// +kubebuilder:validation:MaxItems:=50
	TagsAny []ServerTag `json:"tagsAny,omitempty"`

	// notTags is a list of tags to filter by. If specified, resources which
	// contain all of the given tags will be excluded from the result.
	// +listType=set
	// +optional
	// +kubebuilder:validation:MaxItems:=50
	NotTags []ServerTag `json:"notTags,omitempty"`

	// notTagsAny is a list of tags to filter by. If specified, resources
	// which contain any of the given tags will be excluded from the result.
	// +listType=set
	// +optional
	// +kubebuilder:validation:MaxItems:=50
	NotTagsAny []ServerTag `json:"notTagsAny,omitempty"`
}

type FixedIPStatus struct {
	// ip contains a fixed IP address assigned to the port.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	IP string `json:"ip,omitempty"`

	// subnetID is the ID of the subnet this IP is allocated from.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	SubnetID string `json:"subnetID,omitempty"`
}

type Flavor struct {
	metav1.TypeMeta `json:",inline"`

	// metadata contains the object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// spec specifies the desired state of the resource.
	// +required
	Spec FlavorSpec `json:"spec,omitzero"`

	// status defines the observed state of the resource.
	// +optional
	Status FlavorStatus `json:"status,omitempty"`
}

type FlavorFilter struct {
	// name of the existing resource
	// +optional
	Name *OpenStackName `json:"name,omitempty"`

	// ram is the memory of the flavor, measured in MB.
	// +kubebuilder:validation:Minimum=1
	// +optional
	RAM *int32 `json:"ram,omitempty"`

	// vcpus is the number of vcpus for the flavor.
	// +kubebuilder:validation:Minimum=1
	// +optional
	Vcpus *int32 `json:"vcpus,omitempty"`

	// disk is the size of the root disk in GiB.
	// +kubebuilder:validation:Minimum=0
	// +optional
	Disk *int32 `json:"disk,omitempty"`
}

type FlavorImport struct {
	// id contains the unique identifier of an existing OpenStack resource. Note
	// that when specifying an import by ID, the resource MUST already exist.
	// The ORC object will enter an error state if the resource does not exist.
	// +kubebuilder:validation:Format:=uuid
	// +kubebuilder:validation:MaxLength:=36
	// +optional
	ID *string `json:"id,omitempty"` //nolint:kubeapilinter

	// filter contains a resource query which is expected to return a single
	// result. The controller will continue to retry if filter returns no
	// results. If filter returns multiple results the controller will set an
	// error state and will not continue to retry.
	// +optional
	Filter *FlavorFilter `json:"filter,omitempty"`
}

type FlavorList struct {
	metav1.TypeMeta `json:",inline"`

	// metadata contains the list metadata
	// +optional
	metav1.ListMeta `json:"metadata,omitempty"`

	// items contains a list of Flavor.
	// +required
	Items []Flavor `json:"items"`
}

type FlavorResourceSpec struct {
	// name will be the name of the created resource. If not specified, the
	// name of the ORC object will be used.
	// +optional
	Name *OpenStackName `json:"name,omitempty"`

	// description contains a free form description of the flavor.
	// +kubebuilder:validation:MinLength:=1
	// +kubebuilder:validation:MaxLength:=65535
	// +optional
	Description *string `json:"description,omitempty"`

	// ram is the memory of the flavor, measured in MB.
	// +kubebuilder:validation:Minimum=1
	// +required
	RAM int32 `json:"ram,omitempty"`

	// vcpus is the number of vcpus for the flavor.
	// +kubebuilder:validation:Minimum=1
	// +required
	Vcpus int32 `json:"vcpus,omitempty"`

	// disk is the size of the root disk that will be created in GiB. If 0
	// the root disk will be set to exactly the size of the image used to
	// deploy the instance. However, in this case the scheduler cannot
	// select the compute host based on the virtual image size. Therefore,
	// 0 should only be used for volume booted instances or for testing
	// purposes. Volume-backed instances can be enforced for flavors with
	// zero root disk via the
	// os_compute_api:servers:create:zero_disk_flavor policy rule.
	// +kubebuilder:validation:Minimum=0
	// +required
	Disk int32 `json:"disk"`

	// swap is the size of a dedicated swap disk that will be allocated, in
	// MiB. If 0 (the default), no dedicated swap disk will be created.
	// +kubebuilder:validation:Minimum=0
	// +optional
	Swap int32 `json:"swap,omitempty"`

	// isPublic flags a flavor as being available to all projects or not.
	// +optional
	IsPublic *bool `json:"isPublic,omitempty"`

	// ephemeral is the size of the ephemeral disk that will be created, in GiB.
	// Ephemeral disks may be written over on server state changes. So should only
	// be used as a scratch space for applications that are aware of its
	// limitations. Defaults to 0.
	// +kubebuilder:validation:Minimum=0
	// +optional
	Ephemeral int32 `json:"ephemeral,omitempty"`
}

type FlavorResourceStatus struct {
	// name is a Human-readable name for the flavor. Might not be unique.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	Name string `json:"name,omitempty"`

	// description is a human-readable description for the resource.
	// +kubebuilder:validation:MaxLength:=65535
	// +optional
	Description string `json:"description,omitempty"`

	// ram is the memory of the flavor, measured in MB.
	// +optional
	RAM *int32 `json:"ram,omitempty"`

	// vcpus is the number of vcpus for the flavor.
	// +optional
	Vcpus *int32 `json:"vcpus,omitempty"`

	// disk is the size of the root disk that will be created in GiB.
	// +optional
	Disk *int32 `json:"disk,omitempty"`

	// swap is the size of a dedicated swap disk that will be allocated, in
	// MiB.
	// +optional
	Swap *int32 `json:"swap,omitempty"`

	// isPublic flags a flavor as being available to all projects or not.
	// +optional
	IsPublic *bool `json:"isPublic,omitempty"`

	// ephemeral is the size of the ephemeral disk, in GiB.
	// +optional
	Ephemeral *int32 `json:"ephemeral,omitempty"`
}

type FlavorSpec struct {
	// import refers to an existing OpenStack resource which will be imported instead of
	// creating a new one.
	// +optional
	Import *FlavorImport `json:"import,omitempty"`

	// resource specifies the desired state of the resource.
	//
	// resource may not be specified if the management policy is `unmanaged`.
	//
	// resource must be specified if the management policy is `managed`.
	// +optional
	Resource *FlavorResourceSpec `json:"resource,omitempty"`

	// managementPolicy defines how ORC will treat the object. Valid values are
	// `managed`: ORC will create, update, and delete the resource; `unmanaged`:
	// ORC will import an existing resource, and will not apply updates to it or
	// delete it.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="managementPolicy is immutable"
	// +kubebuilder:default:=managed
	// +optional
	ManagementPolicy ManagementPolicy `json:"managementPolicy,omitempty"`

	// managedOptions specifies options which may be applied to managed objects.
	// +optional
	ManagedOptions *ManagedOptions `json:"managedOptions,omitempty"`

	// cloudCredentialsRef points to a secret containing OpenStack credentials
	// +required
	CloudCredentialsRef CloudCredentialsReference `json:"cloudCredentialsRef,omitzero"`
}

type FlavorStatus struct {
	// conditions represents the observed status of the object.
	// Known .status.conditions.type are: "Available", "Progressing"
	//
	// Available represents the availability of the OpenStack resource. If it is
	// true then the resource is ready for use.
	//
	// Progressing indicates whether the controller is still attempting to
	// reconcile the current state of the OpenStack resource to the desired
	// state. Progressing will be False either because the desired state has
	// been achieved, or because some terminal error prevents it from ever being
	// achieved and the controller is no longer attempting to reconcile. If
	// Progressing is True, an observer waiting on the resource should continue
	// to wait.
	//
	// +kubebuilder:validation:MaxItems:=32
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`

	// id is the unique identifier of the OpenStack resource.
	// +kubebuilder:validation:MaxLength:=1024
	// +optional
	ID *string `json:"id,omitempty"`

	// resource contains the observed state of the OpenStack resource.
	// +optional
	Resource *FlavorResourceStatus `json:"resource,omitempty"`
}

type FloatingIP struct {
	metav1.TypeMeta `json:",inline"`

	// metadata contains the object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// spec specifies the desired state of the resource.
	// +required
	Spec FloatingIPSpec `json:"spec,omitzero"`

	// status defines the observed state of the resource.
	// +optional
	Status FloatingIPStatus `json:"status,omitempty"`
}

type FloatingIPFilter struct {
	// floatingIP is the floatingip address.
	// +optional
	FloatingIP *IPvAny `json:"floatingIP,omitempty"`

	// description of the existing resource
	// +optional
	Description *NeutronDescription `json:"description,omitempty"`

	// floatingNetworkRef is a reference to the ORC Network which this resource is associated with.
	// +optional
	FloatingNetworkRef *KubernetesNameRef `json:"floatingNetworkRef,omitempty"`

	// portRef is a reference to the ORC Port which this resource is associated with.
	// +optional
	PortRef *KubernetesNameRef `json:"portRef,omitempty"`

	// projectRef is a reference to the ORC Project this resource is associated with.
	// Typically, only used by admin.
	// +optional
	ProjectRef *KubernetesNameRef `json:"projectRef,omitempty"`

	// status is the status of the floatingip.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	Status string `json:"status,omitempty"`

	FilterByNeutronTags `json:",inline"`
}

type FloatingIPImport struct {
	// id contains the unique identifier of an existing OpenStack resource. Note
	// that when specifying an import by ID, the resource MUST already exist.
	// The ORC object will enter an error state if the resource does not exist.
	// +kubebuilder:validation:Format:=uuid
	// +kubebuilder:validation:MaxLength:=36
	// +optional
	ID *string `json:"id,omitempty"` //nolint:kubeapilinter

	// filter contains a resource query which is expected to return a single
	// result. The controller will continue to retry if filter returns no
	// results. If filter returns multiple results the controller will set an
	// error state and will not continue to retry.
	// +optional
	Filter *FloatingIPFilter `json:"filter,omitempty"`
}

type FloatingIPList struct {
	metav1.TypeMeta `json:",inline"`

	// metadata contains the list metadata
	// +optional
	metav1.ListMeta `json:"metadata,omitempty"`

	// items contains a list of FloatingIP.
	// +required
	Items []FloatingIP `json:"items"`
}

type FloatingIPResourceSpec struct {
	// description is a human-readable description for the resource.
	// +optional
	Description *NeutronDescription `json:"description,omitempty"`

	// tags is a list of tags which will be applied to the floatingip.
	// +kubebuilder:validation:MaxItems:=64
	// +listType=set
	// +optional
	Tags []NeutronTag `json:"tags,omitempty"`

	// floatingNetworkRef references the network to which the floatingip is associated.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="floatingNetworkRef is immutable"
	FloatingNetworkRef *KubernetesNameRef `json:"floatingNetworkRef,omitempty"`

	// floatingSubnetRef references the subnet to which the floatingip is associated.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="floatingSubnetRef is immutable"
	FloatingSubnetRef *KubernetesNameRef `json:"floatingSubnetRef,omitempty"`

	// floatingIP is the IP that will be assigned to the floatingip. If not set, it will
	// be assigned automatically.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="floatingIP is immutable"
	FloatingIP *IPvAny `json:"floatingIP,omitempty"`

	// portRef is a reference to the ORC Port which this resource is associated with.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="portRef is immutable"
	PortRef *KubernetesNameRef `json:"portRef,omitempty"`

	// fixedIP is the IP address of the port to which the floatingip is associated.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="fixedIP is immutable"
	FixedIP *IPvAny `json:"fixedIP,omitempty"`

	// projectRef is a reference to the ORC Project this resource is associated with.
	// Typically, only used by admin.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="projectRef is immutable"
	ProjectRef *KubernetesNameRef `json:"projectRef,omitempty"`
}

type FloatingIPResourceStatus struct {
	// description is a human-readable description for the resource.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	Description string `json:"description,omitempty"`

	// floatingNetworkID is the ID of the network to which the floatingip is associated.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	FloatingNetworkID string `json:"floatingNetworkID,omitempty"`

	// floatingIP is the IP address of the floatingip.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	FloatingIP string `json:"floatingIP,omitempty"`

	// portID is the ID of the port to which the floatingip is associated.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	PortID string `json:"portID,omitempty"`

	// fixedIP is the IP address of the port to which the floatingip is associated.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	FixedIP string `json:"fixedIP,omitempty"`

	// tenantID is the project owner of the resource.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	TenantID string `json:"tenantID,omitempty"`

	// projectID is the project owner of the resource.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	ProjectID string `json:"projectID,omitempty"`

	// status indicates the current status of the resource.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	Status string `json:"status,omitempty"`

	// routerID is the ID of the router to which the floatingip is associated.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	RouterID string `json:"routerID,omitempty"`

	// tags is the list of tags on the resource.
	// +kubebuilder:validation:MaxItems:=64
	// +kubebuilder:validation:items:MaxLength=1024
	// +listType=atomic
	// +optional
	Tags []string `json:"tags,omitempty"`

	NeutronStatusMetadata `json:",inline"`
}

type FloatingIPSpec struct {
	// import refers to an existing OpenStack resource which will be imported instead of
	// creating a new one.
	// +optional
	Import *FloatingIPImport `json:"import,omitempty"`

	// resource specifies the desired state of the resource.
	//
	// resource may not be specified if the management policy is `unmanaged`.
	//
	// resource must be specified if the management policy is `managed`.
	// +optional
	Resource *FloatingIPResourceSpec `json:"resource,omitempty"`

	// managementPolicy defines how ORC will treat the object. Valid values are
	// `managed`: ORC will create, update, and delete the resource; `unmanaged`:
	// ORC will import an existing resource, and will not apply updates to it or
	// delete it.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="managementPolicy is immutable"
	// +kubebuilder:default:=managed
	// +optional
	ManagementPolicy ManagementPolicy `json:"managementPolicy,omitempty"`

	// managedOptions specifies options which may be applied to managed objects.
	// +optional
	ManagedOptions *ManagedOptions `json:"managedOptions,omitempty"`

	// cloudCredentialsRef points to a secret containing OpenStack credentials
	// +required
	CloudCredentialsRef CloudCredentialsReference `json:"cloudCredentialsRef,omitzero"`
}

type FloatingIPStatus struct {
	// conditions represents the observed status of the object.
	// Known .status.conditions.type are: "Available", "Progressing"
	//
	// Available represents the availability of the OpenStack resource. If it is
	// true then the resource is ready for use.
	//
	// Progressing indicates whether the controller is still attempting to
	// reconcile the current state of the OpenStack resource to the desired
	// state. Progressing will be False either because the desired state has
	// been achieved, or because some terminal error prevents it from ever being
	// achieved and the controller is no longer attempting to reconcile. If
	// Progressing is True, an observer waiting on the resource should continue
	// to wait.
	//
	// +kubebuilder:validation:MaxItems:=32
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`

	// id is the unique identifier of the OpenStack resource.
	// +kubebuilder:validation:MaxLength:=1024
	// +optional
	ID *string `json:"id,omitempty"`

	// resource contains the observed state of the OpenStack resource.
	// +optional
	Resource *FloatingIPResourceStatus `json:"resource,omitempty"`
}

type Group struct {
	metav1.TypeMeta `json:",inline"`

	// metadata contains the object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// spec specifies the desired state of the resource.
	// +required
	Spec GroupSpec `json:"spec,omitzero"`

	// status defines the observed state of the resource.
	// +optional
	Status GroupStatus `json:"status,omitempty"`
}

type GroupFilter struct {
	// name of the existing resource
	// +optional
	Name *KeystoneName `json:"name,omitempty"`

	// domainRef is a reference to the ORC Domain which this resource is associated with.
	// +optional
	DomainRef *KubernetesNameRef `json:"domainRef,omitempty"`
}

type GroupImport struct {
	// id contains the unique identifier of an existing OpenStack resource. Note
	// that when specifying an import by ID, the resource MUST already exist.
	// The ORC object will enter an error state if the resource does not exist.
	// +kubebuilder:validation:Format:=uuid
	// +kubebuilder:validation:MaxLength:=36
	// +optional
	ID *string `json:"id,omitempty"` //nolint:kubeapilinter

	// filter contains a resource query which is expected to return a single
	// result. The controller will continue to retry if filter returns no
	// results. If filter returns multiple results the controller will set an
	// error state and will not continue to retry.
	// +optional
	Filter *GroupFilter `json:"filter,omitempty"`
}

type GroupList struct {
	metav1.TypeMeta `json:",inline"`

	// metadata contains the list metadata
	// +optional
	metav1.ListMeta `json:"metadata,omitempty"`

	// items contains a list of Group.
	// +required
	Items []Group `json:"items"`
}

type GroupResourceSpec struct {
	// name will be the name of the created resource. If not specified, the
	// name of the ORC object will be used.
	// +optional
	Name *KeystoneName `json:"name,omitempty"`

	// description is a human-readable description for the resource.
	// +kubebuilder:validation:MinLength:=1
	// +kubebuilder:validation:MaxLength:=255
	// +optional
	Description *string `json:"description,omitempty"`

	// domainRef is a reference to the ORC Domain which this resource is associated with.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="domainRef is immutable"
	DomainRef *KubernetesNameRef `json:"domainRef,omitempty"`
}

type GroupResourceStatus struct {
	// name is a Human-readable name for the resource. Might not be unique.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	Name string `json:"name,omitempty"`

	// description is a human-readable description for the resource.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	Description string `json:"description,omitempty"`

	// domainID is the ID of the Domain to which the resource is associated.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	DomainID string `json:"domainID,omitempty"`
}

type GroupSpec struct {
	// import refers to an existing OpenStack resource which will be imported instead of
	// creating a new one.
	// +optional
	Import *GroupImport `json:"import,omitempty"`

	// resource specifies the desired state of the resource.
	//
	// resource may not be specified if the management policy is `unmanaged`.
	//
	// resource must be specified if the management policy is `managed`.
	// +optional
	Resource *GroupResourceSpec `json:"resource,omitempty"`

	// managementPolicy defines how ORC will treat the object. Valid values are
	// `managed`: ORC will create, update, and delete the resource; `unmanaged`:
	// ORC will import an existing resource, and will not apply updates to it or
	// delete it.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="managementPolicy is immutable"
	// +kubebuilder:default:=managed
	// +optional
	ManagementPolicy ManagementPolicy `json:"managementPolicy,omitempty"`

	// managedOptions specifies options which may be applied to managed objects.
	// +optional
	ManagedOptions *ManagedOptions `json:"managedOptions,omitempty"`

	// cloudCredentialsRef points to a secret containing OpenStack credentials
	// +required
	CloudCredentialsRef CloudCredentialsReference `json:"cloudCredentialsRef,omitzero"`
}

type GroupStatus struct {
	// conditions represents the observed status of the object.
	// Known .status.conditions.type are: "Available", "Progressing"
	//
	// Available represents the availability of the OpenStack resource. If it is
	// true then the resource is ready for use.
	//
	// Progressing indicates whether the controller is still attempting to
	// reconcile the current state of the OpenStack resource to the desired
	// state. Progressing will be False either because the desired state has
	// been achieved, or because some terminal error prevents it from ever being
	// achieved and the controller is no longer attempting to reconcile. If
	// Progressing is True, an observer waiting on the resource should continue
	// to wait.
	//
	// +kubebuilder:validation:MaxItems:=32
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`

	// id is the unique identifier of the OpenStack resource.
	// +kubebuilder:validation:MaxLength:=1024
	// +optional
	ID *string `json:"id,omitempty"`

	// resource contains the observed state of the OpenStack resource.
	// +optional
	Resource *GroupResourceStatus `json:"resource,omitempty"`
}

type HTTPMethod string

type HostID struct {
	// id is the literal host ID string to use for binding:host_id.
	// This is mutually exclusive with serverRef.
	// +kubebuilder:validation:MaxLength=36
	// +optional
	ID string `json:"id,omitempty"` //nolint:kubeapilinter // intentionally allow raw ID

	// serverRef is a reference to an ORC Server resource from which to
	// retrieve the hostID for port binding. The hostID will be read from
	// the Server's status.resource.hostID field.
	// This is mutually exclusive with id.
	// +optional
	ServerRef KubernetesNameRef `json:"serverRef,omitempty"`
}

type HostRoute struct {
	// destination for the additional route.
	// +required
	Destination CIDR `json:"destination,omitempty"`

	// nextHop for the additional route.
	// +required
	NextHop IPvAny `json:"nextHop,omitempty"`
}

type HostRouteStatus struct {
	// destination for the additional route.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	Destination string `json:"destination,omitempty"`

	// nextHop for the additional route.
	// +kubebuilder:validation:MaxLength=1024
	// +optional
	NextHop string `json:"nextHop,omitempty"`
}

type IPVersion int32

type IPv6AddressMode string

type IPv6Options struct {
	// addressMode specifies mechanisms for assigning IPv6 IP addresses.
	// +optional
	AddressMode *IPv6AddressMode `json:"addressMode,omitempty"`

	// raMode specifies the IPv6 router advertisement mode. It specifies whether
	// the networking service should transmit ICMPv6 packets.
	// +optional
	RAMode *IPv6RAMode `json:"raMode,omitempty"`
}

type IPv6RAMode string

type IPvAny string

type Image struct {
	metav1.TypeMeta `json:",inline"`

	// metadata contains the object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// spec specifies the desired state of the resource.
	// +required
	Spec ImageSpec `json:"spec,omitzero"`

	// status defines the observed state of the resource.
	// +optional
	Status ImageStatus `json:"status,omitempty"`
}

type ImageCompression string

type ImageContainerFormat string

type ImageContent struct {
	// containerFormat is the format of the image container.
	// qcow2 and raw images do not usually have a container. This is specified as "bare", which is also the default.
	// Permitted values are ami, ari, aki, bare, compressed, ovf, ova, and docker.
	// +kubebuilder:default:=bare
	// +optional
	ContainerFormat ImageContainerFormat `json:"containerFormat,omitempty"`

	// diskFormat is the format of the disk image.
	// Normal values are "qcow2", or "raw". Glance may be configured to support others.
	// +required
	DiskFormat ImageDiskFormat `json:"diskFormat,omitempty"`

	// download describes how to obtain image data by downloading it from a URL.
	// Must be set when creating a managed image.
	// +required
	Download *ImageContentSourceDownload `json:"download,omitempty"`
}

type ImageContentSourceDownload struct {
	// url containing image data
	// +kubebuilder:validation:Format=uri
	// +kubebuilder:validation:MaxLength=2048
	// +required
	URL string `json:"url"`

	// decompress specifies that the source data must be decompressed with the
	// given compression algorithm before being stored. Specifying Decompress
	// will disable the use of Glance's web-download, as web-download cannot
	// currently deterministically decompress downloaded content.
	// +optional
	Decompress *ImageCompression `json:"decompress,omitempty"`

	// hash is a hash which will be used to verify downloaded data, i.e.
	// before any decompression. If not specified, no hash verification will be
	// performed. Specifying a Hash will disable the use of Glance's
	// web-download, as web-download cannot currently deterministically verify
	// the hash of downloaded content.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="hash is immutable"
	// +optional
	Hash *ImageHash `json:"hash,omitempty"`
}

type ImageDiskFormat string

type ImageFilter struct {
	// name specifies the name of a Glance image
	// +optional
	Name *OpenStackName `json:"name,omitempty"`

	// visibility specifies the visibility of a Glance image.
	// +optional
	Visibility *ImageVisibility `json:"visibility,omitempty"`

	// tags is the list of tags on the resource.
	// +kubebuilder:validation:MaxItems:=64
	// +listType=set
	// +optional
	Tags []ImageTag `json:"tags,omitempty"`
}

type ImageHWBus string

type ImageHash struct {
	// algorithm is the hash algorithm used to generate value.
	// +required
	Algorithm ImageHashAlgorithm `json:"algorithm,omitempty"`

	// value is the hash of the image data using Algorithm. It must be hex encoded using lowercase letters.
	// +kubebuilder:validation:MinLength:=1
	// +kubebuilder:validation:MaxLength:=1024
	// +kubebuilder:validation:Pattern:=`^[0-9a-f]+$`
	// +required
	Value string `json:"value,omitempty"`
}

type ImageHashAlgorithm string

type ImageImport struct {
	// id contains the unique identifier of an existing OpenStack resource. Note
	// that when specifying an import by ID, the resource MUST already exist.
	// The ORC object will enter an error state if the resource does not exist.
	// +kubebuilder:validation:Format:=uuid
	// +kubebuilder:validation:MaxLength:=36
	// +optional
	ID *string `json:"id,omitempty"` //nolint:kubeapilinter

	// filter contains a resource query which is expected to return a single
	// result. The controller will continue to retry if filter returns no
	// results. If filter returns multiple results the controller will set an
	// error state and will not continue to retry.
	// +optional
	Filter *ImageFilter `json:"filter,omitempty"`
}

type ImageList struct {
	metav1.TypeMeta `json:",inline"`

	// metadata contains the list metadata
	// +optional
	metav1.ListMeta `json:"metadata,omitempty"`

	// items contains a list of Image.
	// +required
	Items []Image `json:"items"`
}

type ImageProperties struct {
	// architecture is the CPU architecture that must be supported by the hypervisor.
	// +kubebuilder:validation:Enum:=aarch64;alpha;armv7l;cris;i686;ia64;lm32;m68k;microblaze;microblazeel;mips;mipsel;mips64;mips64el;openrisc;parisc;parisc64;ppc;ppc64;ppcemb;s390;s390x;sh4;sh4eb;sparc;sparc64;unicore32;x86_64;xtensa;xtensaeb
	// +optional
	Architecture *string `json:"architecture,omitempty" glance:"architecture"`

	// hypervisorType is the hypervisor type
	// +kubebuilder:validation:Enum:=hyperv;ironic;lxc;qemu;uml;vmware;xen
	// +optional
	HypervisorType *string `json:"hypervisorType,omitempty" glance:"hypervisor_type"`

	// minDiskGB is the minimum amount of disk space in GB that is required to boot the image
	// +kubebuilder:validation:Minimum:=1
	// +optional
	MinDiskGB *int32 `json:"minDiskGB,omitempty"`

	// minMemoryMB is the minimum amount of RAM in MB that is required to boot the image.
	// +kubebuilder:validation:Minimum:=1
	// +optional
	MinMemoryMB *int32 `json:"minMemoryMB,omitempty"`

	// hardware is a set of properties which control the virtual hardware
	// created by Nova.
	// +optional
	Hardware *ImagePropertiesHardware `json:"hardware,omitempty"`

	// operatingSystem is a set of properties that specify and influence the behavior
	// of the operating system within the virtual machine.
	// +optional
	OperatingSystem *ImagePropertiesOperatingSystem `json:"operatingSystem,omitempty"`
}

type ImagePropertiesHardware struct {
	// cpuSockets is the preferred number of sockets to expose to the guest
	// +kubebuilder:validation:Minimum:=1
	// +optional
	CPUSockets *int32 `json:"cpuSockets,omitempty" glance:"hw_cpu_sockets"`

	// cpuCores is the preferred number of cores to expose to the guest
	// +kubebuilder:validation:Minimum:=1
	// +optional
	CPUCores *int32 `json:"cpuCores,omitempty" glance:"hw_cpu_cores"`

	// cpuThreads is the preferred number of threads to expose to the guest
	// +kubebuilder:validation:Minimum:=1
	// +optional
	CPUThreads *int32 `json:"cpuThreads,omitempty" glance:"hw_cpu_threads"`

	// cpuPolicy is used to pin the virtual CPUs (vCPUs) of instances to the
	// host's physical CPU cores (pCPUs). Host aggregates should be used to
	// separate these pinned instances from unpinned instances as the latter
	// will not respect the resourcing requirements of the former.
	//
	// Permitted values are shared (the default), and dedicated.
	//
	// shared: The guest vCPUs will be allowed to freely float across host
	// pCPUs, albeit potentially constrained by NUMA policy.
	//
	// dedicated: The guest vCPUs will be strictly pinned to a set of host
	// pCPUs. In the absence of an explicit vCPU topology request, the
	// drivers typically expose all vCPUs as sockets with one core and one
	// thread. When strict CPU pinning is in effect the guest CPU topology
	// will be setup to match the topology of the CPUs to which it is
	// pinned. This option implies an overcommit ratio of 1.0. For example,
	// if a two vCPU guest is pinned to a single host core with two threads,
	// then the guest will get a topology of one socket, one core, two
	// threads.
	// +kubebuilder:validation:Enum:=shared;dedicated
	// +optional
	CPUPolicy *string `json:"cpuPolicy,omitempty" glance:"hw_cpu_policy"`

	// cpuThreadPolicy further refines a CPUPolicy of 'dedicated' by stating
	// how hardware CPU threads in a simultaneous multithreading-based (SMT)
	// architecture be used. SMT-based architectures include Intel
	// processors with Hyper-Threading technology. In these architectures,
	// processor cores share a number of components with one or more other
	// cores. Cores in such architectures are commonly referred to as
	// hardware threads, while the cores that a given core share components
	// with are known as thread siblings.
	//
	// Permitted values are prefer (the default), isolate, and require.
	//
	// prefer: The host may or may not have an SMT architecture. Where an
	// SMT architecture is present, thread siblings are preferred.
	//
	// isolate: The host must not have an SMT architecture or must emulate a
	// non-SMT architecture. If the host does not have an SMT architecture,
	// each vCPU is placed on a different core as expected. If the host does
	// have an SMT architecture - that is, one or more cores have thread
	// siblings - then each vCPU is placed on a different physical core. No
	// vCPUs from other guests are placed on the same core. All but one
	// thread sibling on each utilized core is therefore guaranteed to be
	// unusable.
	//
	// require: The host must have an SMT architecture. Each vCPU is
	// allocated on thread siblings. If the host does not have an SMT
	// architecture, then it is not used. If the host has an SMT
	// architecture, but not enough cores with free thread siblings are
	// available, then scheduling fails.
	// +kubebuilder:validation:Enum:=prefer;isolate;require
	// +optional
	CPUThreadPolicy *string `json:"cpuThreadPolicy,omitempty" glance:"hw_cpu_thread_policy"`

	// cdromBus specifies the type of disk controller to attach CD-ROM devices to.
	// +optional
	CDROMBus *ImageHWBus `json:"cdromBus,omitempty" glance:"hw_cdrom_bus"`

	// diskBus specifies the type of disk controller to attach disk devices to.
	// +optional
	DiskBus *ImageHWBus `json:"diskBus,omitempty" glance:"hw_disk_bus"`

	// scsiModel enables the use of VirtIO SCSI (virtio-scsi) to provide
	// block device access for compute instances; by default, instances use
	// VirtIO Block (virtio-blk). VirtIO SCSI is a para-virtualized SCSI
	// controller device that provides improved scalability and performance,
	// and supports advanced SCSI hardware.
	//
	// The only permitted value is virtio-scsi.
	// +kubebuilder:validation:Enum:=virtio-scsi
	// +optional
	SCSIModel *string `json:"scsiModel,omitempty" glance:"hw_scsi_model"`

	// vifModel specifies the model of virtual network interface device to use.
	//
	// Permitted values are e1000, e1000e, ne2k_pci, pcnet, rtl8139, virtio,
	// and vmxnet3.
	// +kubebuilder:validation:Enum:=e1000;e1000e;ne2k_pci;pcnet;rtl8139;virtio;vmxnet3
	// +optional
	VIFModel *string `json:"vifModel,omitempty" glance:"hw_vif_model"`

	// rngModel adds a random-number generator device to the image’s instances.
	// This image property by itself does not guarantee that a hardware RNG will be used;
	// it expresses a preference that may or may not be satisfied depending upon Nova configuration.
	// +kubebuilder:validation:MaxLength:=255
	// +optional
	RngModel *string `json:"rngModel,omitempty" glance:"hw_rng_model"`

	// qemuGuestAgent enables QEMU guest agent.
	// +optional
	QemuGuestAgent *bool `json:"qemuGuestAgent,omitempty" glance:"hw_qemu_guest_agent"`
}

type ImagePropertiesOperatingSystem struct {
	// distro is the common name of the operating system distribution in lowercase.
	// +kubebuilder:validation:Enum:=arch;centos;debian;fedora;freebsd;gentoo;mandrake;mandriva;mes;msdos;netbsd;netware;openbsd;opensolaris;opensuse;rocky;rhel;sled;ubuntu;windows
	// +optional
	Distro *string `json:"distro,omitempty" glance:"os_distro"`
	// version is the operating system version as specified by the distributor.
	// +kubebuilder:validation:MaxLength:=255
	// +optional
	Version *string `json:"version,omitempty" glance:"os_version"`
}

type ImageResourceSpec struct {
	// name will be the name of the created Glance image. If not specified, the
	// name of the Image object will be used.
	// +optional
	Name *OpenStackName `json:"name,omitempty"`

	// protected specifies that the image is protected from deletion.
	// If not specified, the default is false.
	// +optional
	Protected *bool `json:"protected,omitempty"`

	// tags is a list of tags which will be applied to the image. A tag has a maximum length of 255 characters.
	// +kubebuilder:validation:MaxItems:=64
	// +listType=set
	// +optional
	Tags []ImageTag `json:"tags,omitempty"`

	// visibility of the image
	// +optional
	Visibility *ImageVisibility `json:"visibility,omitempty"`

	// properties is metadata available to consumers of the image
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="properties is immutable"
	// +optional
	Properties *ImageProperties `json:"properties,omitempty"`

	// content specifies how to obtain the image content.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="content is immutable"
	// +optional
	Content *ImageContent `json:"content,omitempty"`
}