v1alpha1

type Authentication struct {
	// AuthenticatorID specifies the name of the extension to use in order to authenticate the incoming data point.
	AuthenticatorID *string `json:"authenticator,omitempty"`
}

type BackOffConfig struct {
	// InitialInterval the time to wait after the first failure before retrying.
	InitialInterval *time.Duration `json:"initial_interval,omitempty"`

	// RandomizationFactor is a random factor used to calculate next backoffs
	// Randomized interval = RetryInterval * (1 ± RandomizationFactor)
	RandomizationFactor *string `json:"randomization_factor,omitempty"`

	// Multiplier is the value multiplied by the backoff interval bounds
	Multiplier *string `json:"multiplier,omitempty"`

	// MaxInterval is the upper bound on backoff interval. Once this value is reached the delay between
	// consecutive retries will always be `MaxInterval`.
	MaxInterval *time.Duration `json:"max_interval,omitempty"`

	// MaxElapsedTime is the maximum amount of time (including retries) spent trying to send a request/batch.
	// Once this value is reached, the data is discarded. If set to 0, the retries are never stopped.
	// Default value is 0 to ensure that the data is never discarded.
	MaxElapsedTime *time.Duration `json:"max_elapsed_time,omitempty"`
}

type BasicAuthConfig struct {
	SecretRef     *corev1.SecretReference `json:"secretRef,omitempty"`
	UsernameField string                  `json:"usernameField,omitempty"`
	PasswordField string                  `json:"passwordField,omitempty"`
}

type Batch struct {

	// Timeout sets the time after which a batch will be sent regardless of size.
	// When this is set to zero, batched data will be sent immediately.
	Timeout string `json:"timeout,omitempty"`

	// SendBatchSize is the size of a batch which after hit, will trigger it to be sent.
	// When this is set to zero, the batch size is ignored and data will be sent immediately
	// subject to only send_batch_max_size.
	SendBatchSize uint32 `json:"send_batch_size,omitempty"`

	// SendBatchMaxSize is the maximum size of a batch. It must be larger than SendBatchSize.
	// Larger batches are split into smaller units.
	// Default value is 0, that means no maximum size.
	SendBatchMaxSize uint32 `json:"send_batch_max_size,omitempty"`

	// MetadataKeys is a list of client.Metadata keys that will be
	// used to form distinct batchers.  If this setting is empty,
	// a single batcher instance will be used.  When this setting
	// is not empty, one batcher will be used per distinct
	// combination of values for the listed metadata keys.
	//
	// Empty value and unset metadata are treated as distinct cases.
	//
	// Entries are case-insensitive.  Duplicated entries will
	// trigger a validation error.
	MetadataKeys []string `json:"metadata_keys,omitempty"`

	// MetadataCardinalityLimit indicates the maximum number of
	// batcher instances that will be created through a distinct
	// combination of MetadataKeys.
	MetadataCardinalityLimit uint32 `json:"metadata_cardinality_limit,omitempty"`
}

type BearerAuthConfig struct {
	SecretRef  *corev1.SecretReference `json:"secretRef,omitempty"`
	TokenField string                  `json:"tokenField,omitempty"`
}

type Bridge struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   BridgeSpec   `json:"spec,omitempty"`
	Status BridgeStatus `json:"status,omitempty"`
}

type BridgeList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Bridge `json:"items"`
}

type BridgeSpec struct {

	// The source tenant from which telemetry will be forwarded.
	SourceTenant string `json:"sourceTenant"`

	// The target tenant to which telemetry will be forwarded.
	TargetTenant string `json:"targetTenant"`

	// The condition which must be satisfied in order to forward telemetry
	// from the source tenant to the target tenant.
	Condition string `json:"condition"`
}

type BridgeStatus struct {
	State         state.State `json:"state,omitempty"`
	Problems      []string    `json:"problems,omitempty"`
	ProblemsCount int         `json:"problemsCount,omitempty"`
}

type Collector struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   CollectorSpec   `json:"spec,omitempty"`
	Status CollectorStatus `json:"status,omitempty"`
}

type CollectorList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Collector `json:"items"`
}

type CollectorSpec struct {

	// TenantSelector is used to select tenants for which the collector should collect data.
	TenantSelector metav1.LabelSelector `json:"tenantSelector"`

	// Namespace where the Otel collector DaemonSet is deployed.
	ControlNamespace string `json:"controlNamespace"`

	// Enables debug logging for the collector.
	Debug *bool `json:"debug,omitempty"`

	// DryRunMode disables all exporters except for the debug exporter, as well as persistence options configured for the collector.
	// This can be useful for testing and debugging purposes.
	DryRunMode *bool `json:"dryRunMode,omitempty"`

	// Setting memory limits for the Collector using the memory limiter processor.
	MemoryLimiter *MemoryLimiter `json:"memoryLimiter,omitempty"`

	// OtelcommonFields is used to override the default DaemonSet's common fields.
	OtelCommonFields *otelv1beta1.OpenTelemetryCommonFields `json:"otelCommonFields,omitempty"`
}

type CollectorStatus struct {
	Tenants       []string    `json:"tenants,omitempty"`
	State         state.State `json:"state,omitempty"`
	Problems      []string    `json:"problems,omitempty"`
	ProblemsCount int         `json:"problemsCount,omitempty"`
}

type CompressionParams struct {
	Level *int `json:"level,omitempty"`
}

type CookiesConfig struct {
	// Enabled if true, cookies from HTTP responses will be reused in further HTTP requests with the same server.
	Enabled bool `json:"enabled,omitempty"`
}

type Endpoint struct {
	// TCPAddr is the address of the server to connect to.
	TCPAddr *string `json:"tcp_addr"`
	// Controls whether to validate the tcp address.
	// Turning this ON may result in the collector failing to start if it came up faster then the endpoint.
	// default is false.
	ValidateTCPResolution bool `json:"validate_tcp_resolution,omitempty"`
}

type File struct {
	// Path of the file to write to. Path is relative to current directory.
	Path string `json:"path,omitempty"`

	// Mode defines whether the exporter should append to the file.
	// Options:
	// - false[default]:  truncates the file
	// - true:  appends to the file.
	Append bool `json:"append,omitempty"`

	// Rotation defines an option about rotation of telemetry files. Ignored
	// when GroupByAttribute is used.
	Rotation *Rotation `json:"rotation,omitempty"`

	FormatType formatType `json:"format,omitempty"`

	// Encoding defines the encoding of the telemetry data.
	// If specified, it overrides `FormatType` and applies an encoding extension.
	Encoding *component.ID `json:"encoding,omitempty"`

	// Compression Codec used to export telemetry data
	// Supported compression algorithms:`zstd`
	Compression compression `json:"compression,omitempty"`

	// FlushInterval is the duration between flushes.
	// See time.ParseDuration for valid values.
	FlushInterval time.Duration `json:"flush_interval,omitempty"`

	// GroupBy enables writing to separate files based on a resource attribute.
	GroupBy *GroupBy `json:"group_by,omitempty"`
}

type Fluentforward struct {
	TCPClientSettings `json:",inline"`

	// RequireAck enables the acknowledgement feature.
	RequireAck *bool `json:"require_ack,omitempty"`

	// The Fluent tag parameter used for routing
	Tag *string `json:"tag,omitempty"`

	// CompressGzip enables gzip compression for the payload.
	CompressGzip *bool `json:"compress_gzip,omitempty"`

	// DefaultLabelsEnabled is a map of default attributes to be added to each log record.
	DefaultLabelsEnabled *map[string]bool `json:"default_labels_enabled,omitempty"`

	QueueConfig *QueueSettings      `json:"sending_queue,omitempty"`
	RetryConfig *BackOffConfig      `json:"retry_on_failure,omitempty"`
	Kubernetes  *KubernetesMetadata `json:"kubernetes_metadata,omitempty"`
}

type GRPCClientConfig struct {
	// The target to which the exporter is going to send traces or metrics,
	// using the gRPC protocol. The valid syntax is described at
	// https://github.com/grpc/grpc/blob/master/doc/naming.md.
	Endpoint *string `json:"endpoint"`

	// The compression key for supported compression types within collector.
	Compression *configcompression.Type `json:"compression,omitempty"`

	// TLSSetting struct exposes TLS client configuration.
	TLSSetting *TLSClientSetting `json:"tls,omitempty"`

	// The keepalive parameters for gRPC client. See grpc.WithKeepaliveParams.
	// (https://godoc.org/google.golang.org/grpc#WithKeepaliveParams).
	Keepalive *KeepaliveClientConfig `json:"keepalive,omitempty"`

	// ReadBufferSize for gRPC client. See grpc.WithReadBufferSize.
	// (https://godoc.org/google.golang.org/grpc#WithReadBufferSize).
	ReadBufferSize *int `json:"read_buffer_size,omitempty"`

	// WriteBufferSize for gRPC gRPC. See grpc.WithWriteBufferSize.
	// (https://godoc.org/google.golang.org/grpc#WithWriteBufferSize).
	WriteBufferSize *int `json:"write_buffer_size,omitempty"`

	// WaitForReady parameter configures client to wait for ready state before sending data.
	// (https://github.com/grpc/grpc/blob/master/doc/wait-for-ready.md)
	WaitForReady *bool `json:"wait_for_ready,omitempty"`

	// The headers associated with gRPC requests.
	Headers *map[string]string `json:"headers,omitempty"`

	// Sets the balancer in grpclb_policy to discover the servers. Default is pick_first.
	// https://github.com/grpc/grpc-go/blob/master/examples/features/load_balancing/README.md
	BalancerName *string `json:"balancer_name,omitempty"`

	// WithAuthority parameter configures client to rewrite ":authority" header
	// (godoc.org/google.golang.org/grpc#WithAuthority)
	Authority *string `json:"authority,omitempty"`

	// Auth configuration for outgoing RPCs.
	Auth *Authentication `json:"auth,omitempty"`
}

type GroupBy struct {
	// Enables group_by. When group_by is enabled, rotation setting is ignored.  Default is false.
	Enabled bool `json:"enabled,omitempty"`

	// ResourceAttribute specifies the name of the resource attribute that
	// contains the path segment of the file to write to. The final path will be
	// the Path config value, with the * replaced with the value of this resource
	// attribute. Default is "fileexporter.path_segment".
	ResourceAttribute string `json:"resource_attribute,omitempty"`

	// MaxOpenFiles specifies the maximum number of open file descriptors for the output files.
	// The default is 100.
	MaxOpenFiles int `json:"max_open_files,omitempty"`
}

type HTTPClientConfig struct {
	// The target URL to send data to (e.g.: http://some.url:9411/v1/traces).
	Endpoint *string `json:"endpoint,omitempty"`

	// ProxyURL setting for the collector
	ProxyURL *string `json:"proxy_url,omitempty"`

	// TLSSetting struct exposes TLS client configuration.
	TLSSetting *TLSClientSetting `json:"tls,omitempty"`

	// ReadBufferSize for HTTP client. See http.Transport.ReadBufferSize.
	// Default is 0.
	ReadBufferSize *int `json:"read_buffer_size,omitempty"`

	// WriteBufferSize for HTTP client. See http.Transport.WriteBufferSize.
	// Default is 0.
	WriteBufferSize *int `json:"write_buffer_size,omitempty"`

	// Timeout parameter configures `http.Client.Timeout`.
	// Default is 0 (unlimited).
	Timeout *time.Duration `json:"timeout,omitempty"`

	// Additional headers attached to each HTTP request sent by the client.
	// Existing header values are overwritten if collision happens.
	// Header values are opaque since they may be sensitive.
	Headers *map[string]configopaque.String `json:"headers,omitempty"`

	// Auth configuration for outgoing HTTP calls.
	Auth *Authentication `json:"auth,omitempty"`

	// The compression key for supported compression types within collector.
	Compression *configcompression.Type `json:"compression,omitempty"`

	// Advanced configuration options for the Compression
	CompressionParams *CompressionParams `json:"compression_params,omitempty"`

	// MaxIdleConns is used to set a limit to the maximum idle HTTP connections the client can keep open.
	// By default, it is set to 100.
	MaxIdleConns *int `json:"max_idle_conns,omitempty"`

	// MaxIdleConnsPerHost is used to set a limit to the maximum idle HTTP connections the host can keep open.
	// By default, it is set to [http.DefaultTransport.MaxIdleConnsPerHost].
	MaxIdleConnsPerHost *int `json:"max_idle_conns_per_host,omitempty"`

	// MaxConnsPerHost limits the total number of connections per host, including connections in the dialing,
	// active, and idle states.
	// By default, it is set to [http.DefaultTransport.MaxConnsPerHost].
	MaxConnsPerHost *int `json:"max_conns_per_host,omitempty"`

	// IdleConnTimeout is the maximum amount of time a connection will remain open before closing itself.
	// By default, it is set to [http.DefaultTransport.IdleConnTimeout]
	IdleConnTimeout *time.Duration `json:"idle_conn_timeout,omitempty"`

	// DisableKeepAlives, if true, disables HTTP keep-alives and will only use the connection to the server
	// for a single HTTP request.
	//
	// WARNING: enabling this option can result in significant overhead establishing a new HTTP(S)
	// connection for every request. Before enabling this option please consider whether changes
	// to idle connection settings can achieve your goal.
	DisableKeepAlives *bool `json:"disable_keep_alives,omitempty"`

	// This is needed in case you run into
	// https://github.com/golang/go/issues/59690
	// https://github.com/golang/go/issues/36026
	// HTTP2ReadIdleTimeout if the connection has been idle for the configured value send a ping frame for health check
	// 0s means no health check will be performed.
	HTTP2ReadIdleTimeout *time.Duration `json:"http2_read_idle_timeout,omitempty"`

	// HTTP2PingTimeout if there's no response to the ping within the configured value, the connection will be closed.
	// If not set or set to 0, it defaults to 15s.
	HTTP2PingTimeout *time.Duration `json:"http2_ping_timeout,omitempty"`

	// Cookies configures the cookie management of the HTTP client.
	Cookies *CookiesConfig `json:"cookies,omitempty"`
}

type KeepaliveClientConfig struct {
	Time                time.Duration `json:"time,omitempty"`
	Timeout             time.Duration `json:"timeout,omitempty"`
	PermitWithoutStream bool          `json:"permit_without_stream,omitempty"`
}

type KubernetesMetadata struct {
	Key              string `json:"key"`
	IncludePodLabels bool   `json:"include_pod_labels"`
}

type MemoryLimiter struct {

	// CheckInterval is the time between measurements of memory usage for the
	// purposes of avoiding going over the limits. Defaults to zero, so no
	// checks will be performed.
	CheckInterval time.Duration `json:"check_interval"`

	// MemoryLimitMiB is the maximum amount of memory, in MiB, targeted to be
	// allocated by the process.
	MemoryLimitMiB uint32 `json:"limit_mib"`

	// MemorySpikeLimitMiB is the maximum, in MiB, spike expected between the
	// measurements of memory usage.
	MemorySpikeLimitMiB uint32 `json:"spike_limit_mib"`

	// MemoryLimitPercentage is the maximum amount of memory, in %, targeted to be
	// allocated by the process. The fixed memory settings MemoryLimitMiB has a higher precedence.
	MemoryLimitPercentage uint32 `json:"limit_percentage"`

	// MemorySpikePercentage is the maximum, in percents against the total memory,
	// spike expected between the measurements of memory usage.
	MemorySpikePercentage uint32 `json:"spike_limit_percentage"`
}

type NamespacedName struct {
	Namespace string `json:"namespace"`
	Name      string `json:"name"`
}

type OTLPGRPC struct {
	QueueConfig      *QueueSettings `json:"sending_queue,omitempty"`
	RetryConfig      *BackOffConfig `json:"retry_on_failure,omitempty"`
	TimeoutSettings  `json:",inline"`
	GRPCClientConfig `json:",inline"`
}

type OTLPHTTP struct {
	QueueConfig      *QueueSettings `json:"sending_queue,omitempty"`
	RetryConfig      *BackOffConfig `json:"retry_on_failure,omitempty"`
	HTTPClientConfig `json:",inline"`

	// The encoding to export telemetry (default: "proto")
	Encoding *string `json:"encoding,omitempty"`
}

type Output struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   OutputSpec   `json:"spec,omitempty"`
	Status OutputStatus `json:"status,omitempty"`
}

type OutputAuth struct {
	BasicAuth  *BasicAuthConfig  `json:"basicAuth,omitempty"`
	BearerAuth *BearerAuthConfig `json:"bearerAuth,omitempty"`
}

type OutputList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Output `json:"items"`
}

type OutputSpec struct {
	OTLPGRPC       *OTLPGRPC      `json:"otlp,omitempty"`
	Fluentforward  *Fluentforward `json:"fluentforward,omitempty"`
	OTLPHTTP       *OTLPHTTP      `json:"otlphttp,omitempty"`
	File           *File          `json:"file,omitempty"`
	Authentication *OutputAuth    `json:"authentication,omitempty"`
	Batch          *Batch         `json:"batch,omitempty"`
}

type OutputStatus struct {
	Tenant        string      `json:"tenant,omitempty"`
	State         state.State `json:"state,omitempty"`
	Problems      []string    `json:"problems,omitempty"`
	ProblemsCount int         `json:"problemsCount,omitempty"`
}

type PersistenceConfig struct {
	// Determines whether file storage is enabled or not.
	EnableFileStorage bool `json:"enableFileStorage,omitempty"`

	// The directory where logs will be persisted.
	// If unset or an invalid path is given, then an OS specific
	// default value will be used.
	// The cluster administrator must ensure that the directory
	// is unique for each tenant.
	// If unset /var/lib/otelcol/file_storage/<tenant_name> will be used.
	Directory string `json:"directory,omitempty"`
}

type QueueSettings struct {
	// NumConsumers is the number of consumers from the queue. Defaults to 10.
	// If batching is enabled, a combined batch cannot contain more requests than the number of consumers.
	// So it's recommended to set higher number of consumers if batching is enabled.
	NumConsumers *int `json:"num_consumers,omitempty"`

	// QueueSize is the maximum number of batches allowed in queue at a given time.
	// Default value is 100.
	QueueSize *int `json:"queue_size,omitempty"`

	// Blocking controls the queue behavior when full.
	// If true it blocks until enough space to add the new request to the queue.
	Blocking *bool `json:"blocking,omitempty"`
}

type Rotation struct {
	// MaxMegabytes is the maximum size in megabytes of the file before it gets
	// rotated. It defaults to 100 megabytes.
	MaxMegabytes int `json:"max_megabytes,omitempty"`

	// MaxDays is the maximum number of days to retain old log files based on the
	// timestamp encoded in their filename.  Note that a day is defined as 24
	// hours and may not exactly correspond to calendar days due to daylight
	// savings, leap seconds, etc. The default is not to remove old log files
	// based on age.
	MaxDays int `json:"max_days,omitempty"`

	// MaxBackups is the maximum number of old log files to retain. The default
	// is to 100 files.
	MaxBackups int `json:"max_backups,omitempty"`

	// LocalTime determines if the time used for formatting the timestamps in
	// backup files is the computer's local time.  The default is to use UTC
	// time.
	LocalTime *bool `json:"localtime,omitempty"`
}

type RouteConfig struct {
	// DefaultPipelines contains the list of pipelines to use when a more specific record can't be
	// found in the routing table.
	// Optional.
	DefaultPipelines []string `json:"defaultPipelines,omitempty"` // TODO: Provide users with a guide to determine generated pipeline names

	// ErrorMode determines how the processor reacts to errors that occur while processing an OTTL
	// condition.
	// Valid values are `ignore` and `propagate`.
	// `ignore` means the processor ignores errors returned by conditions and continues on to the
	// next condition. This is the recommended mode. If `ignore` is used and a statement's
	// condition has an error then the payload will be routed to the default exporter. `propagate`
	// means the processor returns the error up the pipeline.  This will result in the payload being
	// dropped from the collector.
	// The default value is `propagate`.
	ErrorMode string `json:"errorMode,omitempty"`
}

type Subscription struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   SubscriptionSpec   `json:"spec,omitempty"`
	Status SubscriptionStatus `json:"status,omitempty"`
}

type SubscriptionList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Subscription `json:"items"`
}

type SubscriptionSpec struct {

	// The condition which must be satisfied in order to forward telemetry to the outputs.
	Condition string `json:"condition"`

	// The outputs to which the logs will be routed if the condition evaluates to true.
	// Outputs must be in the same tenant as the subscription to be valid.
	Outputs []NamespacedName `json:"outputs"`
}

type SubscriptionStatus struct {
	Tenant        string           `json:"tenant,omitempty"`
	Outputs       []NamespacedName `json:"outputs,omitempty"`
	State         state.State      `json:"state,omitempty"`
	Problems      []string         `json:"problems,omitempty"`
	ProblemsCount int              `json:"problemsCount,omitempty"`
}

type TCPClientSettings struct {

	// Endpoint to send logs to.
	*Endpoint `json:"endpoint"`

	// Connection Timeout parameter configures `net.Dialer`.
	ConnectionTimeout *string `json:"connection_timeout,omitempty"`

	// TLSSetting struct exposes TLS client configuration.
	TLSSetting *TLSClientSetting `json:"tls,omitempty"`

	// SharedKey is used for authorization with the server that knows it.
	SharedKey *string `json:"shared_key,omitempty"`
}

type TLSClientSetting struct {
	// squash ensures fields are correctly decoded in embedded struct.
	TLSSetting `json:",inline"`

	// In gRPC and HTTP when set to true, this is used to disable the client transport security.
	// See https://godoc.org/google.golang.org/grpc#WithInsecure for gRPC.
	// Please refer to https://godoc.org/crypto/tls#Config for more information.
	// (optional, default false)
	Insecure bool `json:"insecure,omitempty"`

	// InsecureSkipVerify will enable TLS but not verify the certificate.
	InsecureSkipVerify bool `json:"insecure_skip_verify,omitempty"`

	// ServerName requested by client for virtual hosting.
	// This sets the ServerName in the TLSConfig. Please refer to
	// https://godoc.org/crypto/tls#Config for more information. (optional)
	ServerName string `json:"server_name_override,omitempty"`
}

type TLSSetting struct {
	// Path to the CA cert. For a client this verifies the server certificate.
	// For a server this verifies client certificates. If empty uses system root CA.
	// (optional)
	CAFile string `json:"ca_file,omitempty"`

	// In memory PEM encoded cert. (optional)
	CAPem string `json:"ca_pem,omitempty"`

	// If true, load system CA certificates pool in addition to the certificates
	// configured in this struct.
	IncludeSystemCACertsPool bool `json:"include_system_ca_certs_pool,omitempty"`

	// Path to the TLS cert to use for TLS required connections. (optional)
	CertFile string `json:"cert_file,omitempty"`

	// In memory PEM encoded TLS cert to use for TLS required connections. (optional)
	CertPem string `json:"cert_pem,omitempty"`

	// Path to the TLS key to use for TLS required connections. (optional)
	KeyFile string `json:"key_file,omitempty"`

	// In memory PEM encoded TLS key to use for TLS required connections. (optional)
	KeyPem string `json:"key_pem,omitempty"`

	// MinVersion sets the minimum TLS version that is acceptable.
	// If not set, TLS 1.2 will be used. (optional)
	MinVersion string `json:"min_version,omitempty"`

	// MaxVersion sets the maximum TLS version that is acceptable.
	// If not set, refer to crypto/tls for defaults. (optional)
	MaxVersion string `json:"max_version,omitempty"`

	// CipherSuites is a list of TLS cipher suites that the TLS transport can use.
	// If left blank, a safe default list is used.
	// See https://go.dev/src/crypto/tls/cipher_suites.go for a list of supported cipher suites.
	CipherSuites []string `json:"cipher_suites,omitempty"`

	// ReloadInterval specifies the duration after which the certificate will be reloaded
	// If not set, it will never be reloaded (optional)
	ReloadInterval time.Duration `json:"reload_interval,omitempty"`

	// contains the elliptic curves that will be used in
	// an ECDHE handshake, in preference order
	// Defaults to empty list and "crypto/tls" defaults are used, internally.
	CurvePreferences []string `json:"curve_preferences,omitempty"`
}

type Tenant struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   TenantSpec   `json:"spec,omitempty"`
	Status TenantStatus `json:"status,omitempty"`
}

type TenantList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Tenant `json:"items"`
}

type TenantSpec struct {
	// Determines the namespaces from which subscriptions and outputs are collected by this tenant.
	SubscriptionNamespaceSelectors []metav1.LabelSelector `json:"subscriptionNamespaceSelectors,omitempty"`

	// Determines the namespaces from which logs are collected by this tenant.
	// Cannot be used together with SelectFromAllNamespaces.
	LogSourceNamespaceSelectors []metav1.LabelSelector `json:"logSourceNamespaceSelectors,omitempty"`

	// If true, logs are collected from all namespaces.
	// Cannot be used together with LogSourceNamespaceSelectors.
	SelectFromAllNamespaces bool              `json:"selectFromAllNamespaces,omitempty"`
	Transform               Transform         `json:"transform,omitempty"`
	RouteConfig             RouteConfig       `json:"routeConfig,omitempty"`
	PersistenceConfig       PersistenceConfig `json:"persistenceConfig,omitempty"`
}

type TenantStatus struct {
	Subscriptions       []NamespacedName `json:"subscriptions,omitempty"`
	LogSourceNamespaces []string         `json:"logSourceNamespaces,omitempty"`
	ConnectedBridges    []string         `json:"connectedBridges,omitempty"`
	State               state.State      `json:"state,omitempty"`
	Problems            []string         `json:"problems,omitempty"`
	ProblemsCount       int              `json:"problemsCount,omitempty"`
}

type TimeoutSettings struct {
	// Timeout is the timeout for every attempt to send data to the backend.
	// A zero timeout means no timeout.
	Timeout *time.Duration `json:"timeout,omitempty"`
}

type Transform struct {
	// Name of the Transform processor
	Name string `json:"name,omitempty"`

	// When FlattenData is true, the processor provides each log record with
	// a distinct copy of its resource and scope. Then, after applying all transformations,
	// the log records are regrouped by resource and scope.
	FlattenData bool `json:"flattenData,omitempty"`

	// ErrorMode determines how the processor reacts to errors that occur while processing a statement.
	// Valid values are `ignore` and `propagate`.
	// `ignore` means the processor ignores errors returned by statements and continues on to the next statement. This is the recommended mode.
	// `propagate` means the processor returns the error up the pipeline.  This will result in the payload being dropped from the collector.
	// The default value is `propagate`.
	ErrorMode string `json:"errorMode,omitempty"`

	TraceStatements  []TransformStatement `json:"traceStatements,omitempty"`
	MetricStatements []TransformStatement `json:"metricStatements,omitempty"`
	LogStatements    []TransformStatement `json:"logStatements,omitempty"`
}

type TransformStatement struct {
	Context    string   `json:"context,omitempty"`
	Conditions []string `json:"conditions,omitempty"`
	Statements []string `json:"statements,omitempty"`

	// ErrorMode determines how the processor reacts to errors that occur while processing
	// this group of statements. When provided, it overrides the default Config ErrorMode.
	ErrorMode string `json:"errorMode,omitempty"`
}