v1alpha1

type ClusterJobStatus struct {
	// ProviderName is the name of the provider that owns this cluster
	ProviderName string `json:"providerName"`
	// ClusterName is the name of the target cluster
	ClusterName string `json:"clusterName"`
	// ClusterAPIURL is the API URL of the cluster for permission checks
	// +optional
	ClusterAPIURL string `json:"clusterApiUrl,omitempty"`
	// JobID is the unique identifier for this job
	JobID string `json:"jobId"`
	// PodName is the name of the pod running the scenario
	PodName string `json:"podName,omitempty"`
	// Phase is the current phase of the job (Pending, Running, Succeeded, Failed, Retrying, Cancelled, MaxRetriesExceeded)
	// +kubebuilder:validation:Enum=Pending;Running;Succeeded;Failed;Retrying;Cancelled;MaxRetriesExceeded
	Phase string `json:"phase"`
	// StartTime is when the job started
	StartTime *metav1.Time `json:"startTime,omitempty"`
	// CompletionTime is when the job completed
	CompletionTime *metav1.Time `json:"completionTime,omitempty"`
	// Message contains additional information about the job status
	Message string `json:"message,omitempty"`

	// RetryCount is the number of times this job has been retried
	// +optional
	RetryCount int `json:"retryCount,omitempty"`
	// MaxRetries is the maximum number of retries allowed for this job
	// +optional
	MaxRetries int `json:"maxRetries,omitempty"`
	// CancelRequested indicates if the user has requested cancellation
	// +optional
	CancelRequested bool `json:"cancelRequested,omitempty"`
	// LastRetryTime is when the last retry was initiated
	// +optional
	LastRetryTime *metav1.Time `json:"lastRetryTime,omitempty"`
	// FailureReason contains a categorized failure reason (OOMKilled, ContainerError, etc.)
	// +optional
	FailureReason string `json:"failureReason,omitempty"`
}

type ClusterPermissionSet struct {
	// Actions is the list of allowed actions on this cluster
	// Allowed values: "view" (can view cluster and scenario runs),
	//                 "run" (can launch scenarios),
	//                 "cancel" (can cancel running scenarios)
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:items:Enum=view;run;cancel
	Actions []string `json:"actions"`
}

type ClusterTarget struct {
	// ClusterName is the name of the managed cluster
	ClusterName string `json:"cluster-name"`
	// ClusterAPIURL is the API server URL of the managed cluster
	ClusterAPIURL string `json:"cluster-api-url"`
}

type FileMount struct {
	// Name is the name of the file
	Name string `json:"name"`
	// Content is the base64-encoded content of the file
	Content string `json:"content"`
	// MountPath is the absolute path where the file should be mounted
	MountPath string `json:"mountPath"`
}

type KrknOperatorTarget struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   KrknOperatorTargetSpec   `json:"spec,omitempty"`
	Status KrknOperatorTargetStatus `json:"status,omitempty"`
}

type KrknOperatorTargetList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []KrknOperatorTarget `json:"items"`
}

type KrknOperatorTargetProvider struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   KrknOperatorTargetProviderSpec   `json:"spec,omitempty"`
	Status KrknOperatorTargetProviderStatus `json:"status,omitempty"`
}

type KrknOperatorTargetProviderConfig struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   KrknOperatorTargetProviderConfigSpec   `json:"spec,omitempty"`
	Status KrknOperatorTargetProviderConfigStatus `json:"status,omitempty"`
}

type KrknOperatorTargetProviderConfigList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []KrknOperatorTargetProviderConfig `json:"items"`
}

type KrknOperatorTargetProviderConfigSpec struct {
	// UUID is a unique identifier for this config request.
	// The operator will automatically add a label 'krkn.krkn-chaos.dev/uuid' with this value
	// for easy selection: kubectl get krknoperatortargetproviderconfigs -l krkn.krkn-chaos.dev/uuid=<uuid>
	UUID string `json:"uuid"`
}

type KrknOperatorTargetProviderConfigStatus struct {
	// Status represents the current state of the request (pending, completed)
	Status string `json:"status,omitempty"`
	// ConfigData contains a map of operator-name to provider configuration data
	// This allows multiple operators to contribute their configuration schemas to the same request
	ConfigData map[string]ProviderConfigData `json:"configData,omitempty"`
	// Created is the timestamp when the CR was created and set to pending
	Created *metav1.Time `json:"created,omitempty"`
	// Completed is the timestamp when the CR was marked as completed
	Completed *metav1.Time `json:"completed,omitempty"`
}

type KrknOperatorTargetProviderList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []KrknOperatorTargetProvider `json:"items"`
}

type KrknOperatorTargetProviderSpec struct {
	// OperatorName is the unique identifier for this operator instance
	OperatorName string `json:"operator-name"`
	// Active indicates whether this provider is actively contributing to target requests
	// +kubebuilder:default=true
	Active bool `json:"active"`
}

type KrknOperatorTargetProviderStatus struct {
	// Timestamp represents the last heartbeat/update time from the operator
	Timestamp metav1.Time `json:"timestamp,omitempty"`
}

type KrknOperatorTargetSpec struct {
	// UUID is the unique identifier for this target
	UUID string `json:"uuid"`

	// ClusterName is the name of the target cluster
	ClusterName string `json:"clusterName"`

	// ClusterAPIURL is the Kubernetes API server URL
	// +optional
	ClusterAPIURL string `json:"clusterAPIURL,omitempty"`

	// SecretType specifies the authentication method
	// +kubebuilder:validation:Enum=kubeconfig;token;credentials
	SecretType string `json:"secretType"`

	// SecretUUID is the UUID of the Secret containing the kubeconfig
	SecretUUID string `json:"secretUUID"`

	// CABundle is the base64-encoded CA certificate bundle for TLS verification
	// Optional - if not provided and SecretType is not kubeconfig, TLS verification will be skipped
	// +optional
	CABundle string `json:"caBundle,omitempty"`

	// InsecureSkipTLSVerify skips TLS certificate verification
	// Only used when CABundle is not provided
	// +kubebuilder:default=false
	// +optional
	InsecureSkipTLSVerify bool `json:"insecureSkipTLSVerify,omitempty"`
}

type KrknOperatorTargetStatus struct {
	// Ready indicates whether the target is ready to be used
	// +kubebuilder:default=true
	Ready bool `json:"ready,omitempty"`

	// LastUpdated is the timestamp of the last update
	// +optional
	LastUpdated metav1.Time `json:"lastUpdated,omitempty"`
}

type KrknScenarioRun struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   KrknScenarioRunSpec   `json:"spec,omitempty"`
	Status KrknScenarioRunStatus `json:"status,omitempty"`
}

type KrknScenarioRunList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []KrknScenarioRun `json:"items"`
}

type KrknScenarioRunSpec struct {
	// TargetRequestID is the reference to the KrknTargetRequest CR
	TargetRequestID string `json:"targetRequestId"`

	// OwnerUserID is the email address of the user who created this scenario run
	// +optional
	OwnerUserID string `json:"ownerUserId,omitempty"`

	// TargetClusters is a map of provider-name to list of cluster names
	// Example: {"krkn-operator": ["cluster1", "cluster2"], "krkn-operator-acm": ["cluster3"]}
	// +kubebuilder:validation:MinProperties=1
	TargetClusters map[string][]string `json:"targetClusters"`

	// ScenarioName is the name of the scenario to run
	ScenarioName string `json:"scenarioName"`

	// ScenarioImage is the container image for the scenario
	ScenarioImage string `json:"scenarioImage"`

	// KubeconfigPath is the path where kubeconfig will be mounted in the pod
	// +optional
	// +kubebuilder:default="/home/krkn/.kube/config"
	KubeconfigPath string `json:"kubeconfigPath,omitempty"`

	// Files is a list of files to mount in the scenario pod
	// +optional
	Files []FileMount `json:"files,omitempty"`

	// Environment is a map of environment variables to set in the scenario pod
	// +optional
	Environment map[string]string `json:"environment,omitempty"`

	// RegistryURL is the URL of the container registry
	// +optional
	RegistryURL string `json:"registryURL,omitempty"`

	// ScenarioRepository is the repository path in the registry
	// +optional
	ScenarioRepository string `json:"scenarioRepository,omitempty"`

	// Token is the authentication token for the registry
	// +optional
	Token string `json:"token,omitempty"`

	// Username is the username for registry authentication
	// +optional
	Username string `json:"username,omitempty"`

	// Password is the password for registry authentication
	// +optional
	Password string `json:"password,omitempty"`

	// MaxRetries is the maximum number of times to retry failed jobs
	// +optional
	// +kubebuilder:default=3
	MaxRetries int `json:"maxRetries,omitempty"`

	// RetryBackoff determines the backoff strategy for retries (exponential or fixed)
	// +optional
	// +kubebuilder:validation:Enum=exponential;fixed
	// +kubebuilder:default="exponential"
	RetryBackoff string `json:"retryBackoff,omitempty"`

	// RetryDelay is the initial delay before retrying (e.g., "10s")
	// +optional
	// +kubebuilder:default="10s"
	RetryDelay string `json:"retryDelay,omitempty"`
}

type KrknScenarioRunStatus struct {
	// Phase is the overall phase of the scenario run
	// +kubebuilder:validation:Enum=Pending;Running;Succeeded;PartiallyFailed;Failed
	Phase string `json:"phase,omitempty"`

	// TotalTargets is the total number of target clusters
	TotalTargets int `json:"totalTargets,omitempty"`

	// SuccessfulJobs is the number of successfully completed jobs
	SuccessfulJobs int `json:"successfulJobs,omitempty"`

	// FailedJobs is the number of failed jobs
	FailedJobs int `json:"failedJobs,omitempty"`

	// RunningJobs is the number of currently running jobs
	RunningJobs int `json:"runningJobs,omitempty"`

	// ClusterJobs contains the status of each cluster job
	// +optional
	ClusterJobs []ClusterJobStatus `json:"clusterJobs,omitempty"`

	// Conditions represent the latest available observations of the scenario run's state
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type KrknTargetRequest struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   KrknTargetRequestSpec   `json:"spec,omitempty"`
	Status KrknTargetRequestStatus `json:"status,omitempty"`
}

type KrknTargetRequestList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []KrknTargetRequest `json:"items"`
}

type KrknTargetRequestSpec struct {
	// UUID is a unique identifier for this request.
	// The operator will automatically add a label 'krkn.krkn-chaos.dev/uuid' with this value
	// for easy selection: kubectl get krkntargetrequests -l krkn.krkn-chaos.dev/uuid=<uuid>
	UUID string `json:"uuid"`
}

type KrknTargetRequestStatus struct {
	// Status represents the current state of the request (pending, completed)
	Status string `json:"status,omitempty"`
	// TargetData contains a map of operator-name to list of cluster targets
	// This allows multiple operators to contribute their targets to the same request
	TargetData map[string][]ClusterTarget `json:"targetData,omitempty"`

	// Completed is the timestamp when the CR was marked as completed
	Completed *metav1.Time `json:"completed,omitempty"`
}

type KrknUser struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   KrknUserSpec   `json:"spec,omitempty"`
	Status KrknUserStatus `json:"status,omitempty"`
}

type KrknUserGroup struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec KrknUserGroupSpec `json:"spec,omitempty"`
}

type KrknUserGroupList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []KrknUserGroup `json:"items"`
}

type KrknUserGroupSpec struct {
	// Name is the group name (duplicates metadata.name for API convenience)
	Name string `json:"name"`

	// Description is a human-readable description of the group's purpose
	// +optional
	Description string `json:"description,omitempty"`

	// ClusterPermissions defines access permissions per cluster
	// Key: cluster API URL (must match ClusterTarget.ClusterAPIURL from KrknTargetRequest)
	// Value: set of allowed actions (view, run, cancel)
	// +kubebuilder:validation:MinProperties=1
	ClusterPermissions map[string]ClusterPermissionSet `json:"clusterPermissions"`
}

type KrknUserList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []KrknUser `json:"items"`
}

type KrknUserSpec struct {
	// UserID is the email address of the user, used as the unique identifier
	// +kubebuilder:validation:Pattern=`^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$`
	UserID string `json:"userId"`

	// Name is the first name of the user
	Name string `json:"name"`

	// Surname is the last name of the user
	Surname string `json:"surname"`

	// Organization is the user's organization name
	// +optional
	Organization string `json:"organization,omitempty"`

	// Role defines the user's permission level
	// +kubebuilder:validation:Enum=user;admin
	// +kubebuilder:default=user
	Role string `json:"role"`

	// PasswordSecretRef references the Secret containing the hashed password
	// The Secret must contain a 'passwordHash' key with the bcrypt hash
	PasswordSecretRef string `json:"passwordSecretRef"`
}

type KrknUserStatus struct {
	// Active indicates whether the user account is active
	// +kubebuilder:default=true
	Active bool `json:"active,omitempty"`

	// Created is the timestamp when the user was created
	// +optional
	Created metav1.Time `json:"created,omitempty"`

	// LastLogin is the timestamp of the user's last successful login
	// +optional
	LastLogin metav1.Time `json:"lastLogin,omitempty"`
}

type ProviderConfigData struct {
	// ConfigMap is the name of the ConfigMap containing the provider's configuration
	ConfigMap string `json:"config-map"`
	// Namespace is the namespace where the ConfigMap is located
	Namespace string `json:"namespace"`
	// ConfigSchema is the JSON schema for the provider's configuration (as a JSON string)
	ConfigSchema string `json:"config-schema,omitempty"`
}