v1alpha2

type AddressSet struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   AddressSetSpec   `json:"spec,omitempty"`
	Status AddressSetStatus `json:"status,omitempty"`
}

type AddressSetList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []AddressSet `json:"items"`
}

type AddressSetSpec struct {
	IPv4 *[]string `json:"ipv4,omitempty"`
	IPv6 *[]string `json:"ipv6,omitempty"`
}

type AddressSetStatus struct {
}

type BucketAccessRef struct {
	BucketName  string `json:"bucketName"`
	Permissions string `json:"permissions"`
	Region      string `json:"region"`
}

type FirewallRule struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   FirewallRuleSpec   `json:"spec,omitempty"`
	Status FirewallRuleStatus `json:"status,omitempty"`
}

type FirewallRuleList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []FirewallRule `json:"items"`
}

type FirewallRuleSpec struct {
	// INSERT ADDITIONAL SPEC FIELDS - desired state of cluster
	// Important: Run "make" to regenerate code after modifying this file
	Action      string `json:"action"`
	Label       string `json:"label"`
	Description string `json:"description,omitempty"`
	Ports       string `json:"ports,omitempty"`
	// +kubebuilder:validation:Enum=TCP;UDP;ICMP;IPENCAP
	Protocol  linodego.NetworkProtocol `json:"protocol"`
	Addresses *NetworkAddresses        `json:"addresses,omitempty"`
	// AddressSetRefs is a list of references to AddressSets as an alternative to
	// using Addresses but can be used in conjunction with it
	AddressSetRefs []*corev1.ObjectReference `json:"addressSetRefs,omitempty"`
}

type FirewallRuleStatus struct {
}

type FirewallStatusError string

type GeneratedSecret struct {
	// The name of the generated Secret. If not set, the name is formatted as "{name-of-obj-key}-obj-key".
	// +optional
	Name string `json:"name,omitempty"`
	// The namespace for the generated Secret. If not set, defaults to the namespace of the LinodeObjectStorageKey.
	// +optional
	Namespace string `json:"namespace,omitempty"`
	// The type of the generated Secret.
	// +kubebuilder:validation:Enum=Opaque;addons.cluster.x-k8s.io/resource-set
	// +kubebuilder:default=Opaque
	// +optional
	Type corev1.SecretType `json:"type,omitempty"`
	// How to format the data stored in the generated Secret.
	// It supports Go template syntax and interpolating the following values: .AccessKey, .SecretKey .BucketName .BucketEndpoint .S3Endpoint
	// If no format is supplied then a generic one is used containing the values specified.
	// +optional
	Format map[string]string `json:"format,omitempty"`
}

type IPv6CreateOptions struct {
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// EnableSLAAC is an option to enable SLAAC (Stateless Address Autoconfiguration) for the instance.
	// This is useful for IPv6 addresses, allowing the instance to automatically configure its own IPv6 address.
	// Defaults to false.
	// +optional
	EnableSLAAC *bool `json:"enableSLAAC,omitempty"`

	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// EnableRanges is an option to enable IPv6 ranges for the instance.
	// If set to true, the instance will have a range of IPv6 addresses.
	// This is useful for instances that require multiple IPv6 addresses.
	// Defaults to false.
	// +optional
	EnableRanges *bool `json:"enableRanges,omitempty"`

	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// IsPublicIPv6 is an option to enable public IPv6 for the instance.
	// If set to true, the instance will have a publicly routable IPv6 range.
	// Defaults to false.
	// +optional
	IsPublicIPv6 *bool `json:"isPublicIPv6,omitempty"`
}

type InstanceConfigInterfaceCreateOptions struct {
	IPAMAddress string `json:"ipamAddress,omitempty"`
	// +kubebuilder:validation:MinLength=3
	// +kubebuilder:validation:MaxLength=63
	// +optional
	Label   string                          `json:"label,omitempty"`
	Purpose linodego.ConfigInterfacePurpose `json:"purpose,omitempty"`
	Primary bool                            `json:"primary,omitempty"`
	// +optional
	SubnetID *int `json:"subnetId,omitempty"`
	// +optional
	IPv4     *VPCIPv4 `json:"ipv4,omitempty"`
	IPRanges []string `json:"ipRanges,omitempty"`
}

type InstanceConfiguration struct {
	// Kernel is a Kernel ID to boot a Linode with. (e.g linode/latest-64bit)
	Kernel string `json:"kernel,omitempty"`
}

type InstanceDisk struct {
	// DiskID is the linode assigned ID of the disk
	DiskID int `json:"diskID,omitempty"`
	// Size of the disk in resource.Quantity notation
	// +kubebuilder:validation:Required
	Size resource.Quantity `json:"size"`
	// Label for the instance disk, if nothing is provided it will match the device name
	Label string `json:"label,omitempty"`
	// Filesystem of disk to provision, the default disk filesystem is "ext4"
	// +kubebuilder:validation:Enum=raw;swap;ext3;ext4;initrd
	Filesystem string `json:"filesystem,omitempty"`
}

type InstanceMetadataOptions struct {
	// UserData expects a Base64-encoded string
	UserData string `json:"userData,omitempty"`
}

type LinodeCluster struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   LinodeClusterSpec   `json:"spec,omitempty"`
	Status LinodeClusterStatus `json:"status,omitempty"`
}

type LinodeClusterList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []LinodeCluster `json:"items"`
}

type LinodeClusterSpec struct {
	// The Linode Region the LinodeCluster lives in.
	Region string `json:"region"`

	// ControlPlaneEndpoint represents the endpoint used to communicate with the LinodeCluster control plane.
	// If ControlPlaneEndpoint is unset then the Nodebalancer ip will be used.
	// +optional
	ControlPlaneEndpoint clusterv1.APIEndpoint `json:"controlPlaneEndpoint"`

	// NetworkSpec encapsulates all things related to Linode network.
	// +optional
	Network NetworkSpec `json:"network"`

	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	VPCRef *corev1.ObjectReference `json:"vpcRef,omitempty"`

	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// VPCID is the ID of an existing VPC in Linode. This allows using a VPC that is not managed by CAPL.
	// +optional
	VPCID *int `json:"vpcID,omitempty"`

	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	// NodeBalancerFirewallRef is a reference to a NodeBalancer Firewall object. This makes the linode use the specified NodeBalancer Firewall.
	NodeBalancerFirewallRef *corev1.ObjectReference `json:"nodeBalancerFirewallRef,omitempty"`

	// ObjectStore defines a supporting Object Storage bucket for cluster operations. This is currently used for
	// bootstrapping (e.g. Cloud-init).
	// +optional
	ObjectStore *ObjectStore `json:"objectStore,omitempty"`

	// CredentialsRef is a reference to a Secret that contains the credentials to use for provisioning this cluster. If not
	// supplied then the credentials of the controller will be used.
	// +optional
	CredentialsRef *corev1.SecretReference `json:"credentialsRef,omitempty"`
}

type LinodeClusterStatus struct {
	// Ready denotes that the cluster (infrastructure) is ready.
	// +optional
	Ready bool `json:"ready"`

	// FailureReason will be set in the event that there is a terminal problem
	// reconciling the LinodeCluster and will contain a succinct value suitable
	// for machine interpretation.
	// +optional
	FailureReason *string `json:"failureReason,omitempty"`

	// FailureMessage will be set in the event that there is a terminal problem
	// reconciling the LinodeCluster and will contain a more verbose string suitable
	// for logging and human consumption.
	// +optional
	FailureMessage *string `json:"failureMessage,omitempty"`

	// Conditions defines current service state of the LinodeCluster.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type LinodeClusterTemplate struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec LinodeClusterTemplateSpec `json:"spec,omitempty"`
}

type LinodeClusterTemplateList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []LinodeClusterTemplate `json:"items"`
}

type LinodeClusterTemplateResource struct {
	Spec LinodeClusterSpec `json:"spec"`
}

type LinodeClusterTemplateSpec struct {
	Template LinodeClusterTemplateResource `json:"template"`
}

type LinodeFirewall struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   LinodeFirewallSpec   `json:"spec,omitempty"`
	Status LinodeFirewallStatus `json:"status,omitempty"`
}

type LinodeFirewallList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []LinodeFirewall `json:"items"`
}

type LinodeFirewallSpec struct {
	// +optional
	FirewallID *int `json:"firewallID,omitempty"`

	// +optional
	// +kubebuilder:default=false
	Enabled bool `json:"enabled,omitempty"`

	// +optional
	InboundRules []FirewallRuleSpec `json:"inboundRules,omitempty"`

	// InboundRuleRefs is a list of references to FirewallRules as an alternative to
	// using InboundRules but can be used in conjunction with it
	// +optional
	InboundRuleRefs []*corev1.ObjectReference `json:"inboundRuleRefs,omitempty"`

	// InboundPolicy determines if traffic by default should be ACCEPTed or DROPped. Defaults to ACCEPT if not defined.
	// +kubebuilder:validation:Enum=ACCEPT;DROP
	// +kubebuilder:default=ACCEPT
	// +optional
	InboundPolicy string `json:"inboundPolicy,omitempty"`

	// +optional
	OutboundRules []FirewallRuleSpec `json:"outboundRules,omitempty"`

	// OutboundRuleRefs is a list of references to FirewallRules as an alternative to
	// using OutboundRules but can be used in conjunction with it
	// +optional
	OutboundRuleRefs []*corev1.ObjectReference `json:"outboundRuleRefs,omitempty"`

	// OutboundPolicy determines if traffic by default should be ACCEPTed or DROPped. Defaults to ACCEPT if not defined.
	// +kubebuilder:validation:Enum=ACCEPT;DROP
	// +kubebuilder:default=ACCEPT
	// +optional
	OutboundPolicy string `json:"outboundPolicy,omitempty"`

	// CredentialsRef is a reference to a Secret that contains the credentials to use for provisioning this Firewall. If not
	// supplied then the credentials of the controller will be used.
	// +optional
	CredentialsRef *corev1.SecretReference `json:"credentialsRef,omitempty"`
}

type LinodeFirewallStatus struct {
	// Ready is true when the provider resource is ready.
	// +optional
	// +kubebuilder:default=false
	Ready bool `json:"ready"`

	// FailureReason will be set in the event that there is a terminal problem
	// reconciling the Firewall and will contain a succinct value suitable
	// for machine interpretation.
	//
	// This field should not be set for transitive errors that a controller
	// faces that are expected to be fixed automatically over
	// time (like service outages), but instead indicate that something is
	// fundamentally wrong with the Firewall's spec or the configuration of
	// the controller, and that manual intervention is required. Examples
	// of terminal errors would be invalid combinations of settings in the
	// spec, values that are unsupported by the controller, or the
	// responsible controller itself being critically misconfigured.
	//
	// Any transient errors that occur during the reconciliation of Firewalls
	// can be added as events to the Firewall object and/or logged in the
	// controller's output.
	// +optional
	FailureReason *FirewallStatusError `json:"failureReason,omitempty"`

	// FailureMessage will be set in the event that there is a terminal problem
	// reconciling the Firewall and will contain a more verbose string suitable
	// for logging and human consumption.
	//
	// This field should not be set for transitive errors that a controller
	// faces that are expected to be fixed automatically over
	// time (like service outages), but instead indicate that something is
	// fundamentally wrong with the Firewall's spec or the configuration of
	// the controller, and that manual intervention is required. Examples
	// of terminal errors would be invalid combinations of settings in the
	// spec, values that are unsupported by the controller, or the
	// responsible controller itself being critically misconfigured.
	//
	// Any transient errors that occur during the reconciliation of Firewalls
	// can be added as events to the Firewall object and/or logged in the
	// controller's output.
	// +optional
	FailureMessage *string `json:"failureMessage,omitempty"`

	// Conditions defines current service state of the LinodeFirewall.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type LinodeMachine struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   LinodeMachineSpec   `json:"spec,omitempty"`
	Status LinodeMachineStatus `json:"status,omitempty"`
}

type LinodeMachineList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []LinodeMachine `json:"items"`
}

type LinodeMachineSpec struct {
	// ProviderID is the unique identifier as specified by the cloud provider.
	// +optional
	ProviderID *string `json:"providerID,omitempty"`
	// InstanceID is the Linode instance ID for this machine.
	// +optional
	// +kubebuilder:deprecatedversion:warning="ProviderID deprecates InstanceID"
	InstanceID *int `json:"instanceID,omitempty"`

	// +kubebuilder:validation:Required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	Region string `json:"region"`
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	Type string `json:"type"`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	Group string `json:"group,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	RootPass string `json:"rootPass,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	AuthorizedKeys []string `json:"authorizedKeys,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	AuthorizedUsers []string `json:"authorizedUsers,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	BackupID int `json:"backupID,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	Image string `json:"image,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	Interfaces []InstanceConfigInterfaceCreateOptions `json:"interfaces,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	BackupsEnabled bool `json:"backupsEnabled,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	PrivateIP *bool `json:"privateIP,omitempty"`
	// Tags is a list of tags to apply to the Linode instance.
	Tags []string `json:"tags,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	FirewallID int `json:"firewallID,omitempty"`
	// OSDisk is configuration for the root disk that includes the OS,
	// if not specified this defaults to whatever space is not taken up by the DataDisks
	OSDisk *InstanceDisk `json:"osDisk,omitempty"`
	// DataDisks is a map of any additional disks to add to an instance,
	// The sum of these disks + the OSDisk must not be more than allowed on a linodes plan
	DataDisks map[string]*InstanceDisk `json:"dataDisks,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +kubebuilder:validation:Enum=enabled;disabled
	// DiskEncryption determines if the disks of the instance should be encrypted. The default is disabled.
	DiskEncryption string `json:"diskEncryption,omitempty"`

	// CredentialsRef is a reference to a Secret that contains the credentials
	// to use for provisioning this machine. If not supplied then these
	// credentials will be used in-order:
	//   1. LinodeMachine
	//   2. Owner LinodeCluster
	//   3. Controller
	// +optional
	CredentialsRef *corev1.SecretReference `json:"credentialsRef,omitempty"`

	// Configuration is the Akamai instance configuration OS,
	// if not specified this defaults to the default configuration associated to the instance.
	Configuration *InstanceConfiguration `json:"configuration,omitempty"`

	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	// PlacementGroupRef is a reference to a placement group object. This makes the linode to be launched in that specific group.
	PlacementGroupRef *corev1.ObjectReference `json:"placementGroupRef,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	// FirewallRef is a reference to a firewall object. This makes the linode use the specified firewall.
	FirewallRef *corev1.ObjectReference `json:"firewallRef,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	// VPCRef is a reference to a LinodeVPC resource. If specified, this takes precedence over
	// the cluster-level VPC configuration for multi-region support.
	VPCRef *corev1.ObjectReference `json:"vpcRef,omitempty"`

	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// VPCID is the ID of an existing VPC in Linode. This allows using a VPC that is not managed by CAPL.
	// +optional
	VPCID *int `json:"vpcID,omitempty"`

	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// IPv6Options defines the IPv6 options for the instance.
	// If not specified, IPv6 ranges won't be allocated to instance.
	// +optional
	IPv6Options *IPv6CreateOptions `json:"ipv6Options,omitempty"`

	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	// NetworkHelper is an option usually enabled on account level. It helps configure networking automatically for instances.
	// You can use this to enable/disable the network helper for a specific instance.
	// For more information, see https://techdocs.akamai.com/cloud-computing/docs/automatically-configure-networking
	// Defaults to true.
	NetworkHelper *bool `json:"networkHelper,omitempty"`
}

type LinodeMachineStatus struct {
	// Ready is true when the provider resource is ready.
	// +optional
	// +kubebuilder:default=false
	Ready bool `json:"ready"`

	// Addresses contains the Linode instance associated addresses.
	Addresses []clusterv1.MachineAddress `json:"addresses,omitempty"`

	// CloudinitMetadataSupport determines whether to use cloud-init or not.
	// Deprecated: Stackscript no longer in use, so this field is not used.
	// +kubebuilder:deprecatedversion:warning="CloudinitMetadataSupport is deprecated"
	// +optional
	// +kubebuilder:default=true
	CloudinitMetadataSupport bool `json:"cloudinitMetadataSupport,omitempty"`

	// InstanceState is the state of the Linode instance for this machine.
	// +optional
	InstanceState *linodego.InstanceStatus `json:"instanceState,omitempty"`

	// FailureReason will be set in the event that there is a terminal problem
	// reconciling the Machine and will contain a succinct value suitable
	// for machine interpretation.
	//
	// This field should not be set for transitive errors that a controller
	// faces that are expected to be fixed automatically over
	// time (like service outages), but instead indicate that something is
	// fundamentally wrong with the Machine's spec or the configuration of
	// the controller, and that manual intervention is required. Examples
	// of terminal errors would be invalid combinations of settings in the
	// spec, values that are unsupported by the controller, or the
	// responsible controller itself being critically misconfigured.
	//
	// Any transient errors that occur during the reconciliation of Machines
	// can be added as events to the Machine object and/or logged in the
	// controller's output.
	// +optional
	FailureReason *string `json:"failureReason,omitempty"`

	// FailureMessage will be set in the event that there is a terminal problem
	// reconciling the Machine and will contain a more verbose string suitable
	// for logging and human consumption.
	//
	// This field should not be set for transitive errors that a controller
	// faces that are expected to be fixed automatically over
	// time (like service outages), but instead indicate that something is
	// fundamentally wrong with the Machine's spec or the configuration of
	// the controller, and that manual intervention is required. Examples
	// of terminal errors would be invalid combinations of settings in the
	// spec, values that are unsupported by the controller, or the
	// responsible controller itself being critically misconfigured.
	//
	// Any transient errors that occur during the reconciliation of Machines
	// can be added as events to the Machine object and/or logged in the
	// controller's output.
	// +optional
	FailureMessage *string `json:"failureMessage,omitempty"`

	// Conditions defines current service state of the LinodeMachine.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`

	// tags are the tags applied to the Linode Machine.
	// +optional
	Tags []string `json:"tags,omitempty"`
}

type LinodeMachineTemplate struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec LinodeMachineTemplateSpec `json:"spec,omitempty"`

	Status LinodeMachineTemplateStatus `json:"status,omitempty"`
}

type LinodeMachineTemplateList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []LinodeMachineTemplate `json:"items"`
}

type LinodeMachineTemplateResource struct {
	Spec LinodeMachineSpec `json:"spec"`
}

type LinodeMachineTemplateSpec struct {
	Template LinodeMachineTemplateResource `json:"template"`
}

type LinodeMachineTemplateStatus struct {

	// tags that are currently applied to the LinodeMachineTemplate.
	// +optional
	Tags []string `json:"tags,omitempty"`

	// Conditions represent the latest available observations of a LinodeMachineTemplate's current state.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type LinodeNBPortConfig struct {
	// port configured on the NodeBalancer. It must be valid port range (1-65535).
	// +kubebuilder:validation:Minimum=1
	// +kubebuilder:validation:Maximum=65535
	Port int `json:"port"`
	// nodeBalancerConfigID is the config ID of port's NodeBalancer config.
	// +optional
	NodeBalancerConfigID *int `json:"nodeBalancerConfigID,omitempty"`
}

type LinodeObjectStorageBucket struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   LinodeObjectStorageBucketSpec   `json:"spec,omitempty"`
	Status LinodeObjectStorageBucketStatus `json:"status,omitempty"`
}

type LinodeObjectStorageBucketList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []LinodeObjectStorageBucket `json:"items"`
}

type LinodeObjectStorageBucketSpec struct {

	// Region is the ID of the Object Storage region for the bucket.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	Region string `json:"region"`

	// Acl sets the Access Control Level of the bucket using a canned ACL string
	// +optional
	// +kubebuilder:default=private
	// +kubebuilder:validation:Enum=private;public-read;authenticated-read;public-read-write
	ACL ObjectStorageACL `json:"acl,omitempty"`

	// corsEnabled enables for all origins in the bucket .If set to false, CORS is disabled for all origins in the bucket
	// +optional
	// +kubebuilder:default=true
	CorsEnabled bool `json:"corsEnabled,omitempty"`

	// CredentialsRef is a reference to a Secret that contains the credentials to use for provisioning the bucket.
	// If not supplied then the credentials of the controller will be used.
	// +optional
	CredentialsRef *corev1.SecretReference `json:"credentialsRef"`

	// AccessKeyRef is a reference to a LinodeObjectStorageBucketKey for the bucket.
	// +optional
	AccessKeyRef *corev1.ObjectReference `json:"accessKeyRef"`

	// ForceDeleteBucket enables the object storage bucket used to be deleted even if it contains objects.
	// +optional
	ForceDeleteBucket bool `json:"forceDeleteBucket,omitempty"`
}

type LinodeObjectStorageBucketStatus struct {

	// Ready denotes that the bucket has been provisioned along with access keys.
	// +optional
	// +kubebuilder:default=false
	Ready bool `json:"ready"`

	// FailureMessage will be set in the event that there is a terminal problem
	// reconciling the Object Storage Bucket and will contain a verbose string
	// suitable for logging and human consumption.
	// +optional
	FailureMessage *string `json:"failureMessage,omitempty"`

	// Conditions specify the service state of the LinodeObjectStorageBucket.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`

	// Hostname is the address assigned to the bucket.
	// +optional
	Hostname *string `json:"hostname,omitempty"`

	// CreationTime specifies the creation timestamp for the bucket.
	// +optional
	CreationTime *metav1.Time `json:"creationTime,omitempty"`
}

type LinodeObjectStorageKey struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   LinodeObjectStorageKeySpec   `json:"spec,omitempty"`
	Status LinodeObjectStorageKeyStatus `json:"status,omitempty"`
}

type LinodeObjectStorageKeyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []LinodeObjectStorageKey `json:"items"`
}

type LinodeObjectStorageKeySpec struct {
	// BucketAccess is the list of object storage bucket labels which can be accessed using the key
	// +kubebuilder:validation:MinItems=1
	BucketAccess []BucketAccessRef `json:"bucketAccess"`

	// CredentialsRef is a reference to a Secret that contains the credentials to use for generating access keys.
	// If not supplied then the credentials of the controller will be used.
	// +optional
	CredentialsRef *corev1.SecretReference `json:"credentialsRef,omitempty"`

	// KeyGeneration may be modified to trigger a rotation of the access key.
	// +kubebuilder:default=0
	KeyGeneration int `json:"keyGeneration"`

	// GeneratedSecret configures the Secret to generate containing access key details.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	GeneratedSecret `json:"generatedSecret"`

	// SecretType instructs the controller what type of secret to generate containing access key details.
	// Deprecated: Use generatedSecret.type.
	// +kubebuilder:validation:Enum=Opaque;addons.cluster.x-k8s.io/resource-set
	// +kubebuilder:deprecatedversion:warning="secretType deprecated by generatedSecret.type"
	// +optional
	SecretType corev1.SecretType `json:"secretType,omitempty"`

	// SecretDataFormat instructs the controller how to format the data stored in the secret containing access key details.
	// Deprecated: Use generatedSecret.format.
	// +kubebuilder:deprecatedversion:warning="secretDataFormat deprecated by generatedSecret.format"
	// +optional
	SecretDataFormat map[string]string `json:"secretDataFormat,omitempty"`
}

type LinodeObjectStorageKeyStatus struct {
	// Ready denotes that the key has been provisioned.
	// +optional
	// +kubebuilder:default=false
	Ready bool `json:"ready"`

	// FailureMessage will be set in the event that there is a terminal problem
	// reconciling the Object Storage Key and will contain a verbose string
	// suitable for logging and human consumption.
	// +optional
	FailureMessage *string `json:"failureMessage,omitempty"`

	// Conditions specify the service state of the LinodeObjectStorageKey.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`

	// CreationTime specifies the creation timestamp for the secret.
	// +optional
	CreationTime *metav1.Time `json:"creationTime,omitempty"`

	// LastKeyGeneration tracks the last known value of .spec.keyGeneration.
	// +optional
	LastKeyGeneration *int `json:"lastKeyGeneration,omitempty"`

	// AccessKeyRef stores the ID for Object Storage key provisioned.
	// +optional
	AccessKeyRef *int `json:"accessKeyRef,omitempty"`
}

type LinodePlacementGroup struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   LinodePlacementGroupSpec   `json:"spec,omitempty"`
	Status LinodePlacementGroupStatus `json:"status,omitempty"`
}

type LinodePlacementGroupList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []LinodePlacementGroup `json:"items"`
}

type LinodePlacementGroupSpec struct {
	// +optional
	PGID *int `json:"pgID,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	Region string `json:"region"`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +kubebuilder:default="strict"
	// +kubebuilder:validation:Enum=strict;flexible
	// +optional
	PlacementGroupPolicy string `json:"placementGroupPolicy"`

	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +kubebuilder:default="anti_affinity:local"
	// +kubebuilder:validation:Enum="anti_affinity:local"
	// +optional
	PlacementGroupType string `json:"placementGroupType"`

	// CredentialsRef is a reference to a Secret that contains the credentials to use for provisioning this PlacementGroup. If not
	// supplied then the credentials of the controller will be used.
	// +optional
	CredentialsRef *corev1.SecretReference `json:"credentialsRef,omitempty"`
}

type LinodePlacementGroupStatus struct {
	// Ready is true when the provider resource is ready.
	// +optional
	// +kubebuilder:default=false
	Ready bool `json:"ready"`

	// FailureReason will be set in the event that there is a terminal problem
	// reconciling the PlacementGroup and will contain a succinct value suitable
	// for machine interpretation.
	//
	// This field should not be set for transitive errors that a controller
	// faces that are expected to be fixed automatically over
	// time (like service outages), but instead indicate that something is
	// fundamentally wrong with the PlacementGroup's spec or the configuration of
	// the controller, and that manual intervention is required. Examples
	// of terminal errors would be invalid combinations of settings in the
	// spec, values that are unsupported by the controller, or the
	// responsible controller itself being critically misconfigured.
	//
	// Any transient errors that occur during the reconciliation of PlacementGroups
	// can be added as events to the PlacementGroup object and/or logged in the
	// controller's output.
	// +optional
	FailureReason *LinodePlacementGroupStatusError `json:"failureReason,omitempty"`

	// FailureMessage will be set in the event that there is a terminal problem
	// reconciling the PlacementGroup and will contain a more verbose string suitable
	// for logging and human consumption.
	//
	// This field should not be set for transitive errors that a controller
	// faces that are expected to be fixed automatically over
	// time (like service outages), but instead indicate that something is
	// fundamentally wrong with the PlacementGroup's spec or the configuration of
	// the controller, and that manual intervention is required. Examples
	// of terminal errors would be invalid combinations of settings in the
	// spec, values that are unsupported by the controller, or the
	// responsible controller itself being critically misconfigured.
	//
	// Any transient errors that occur during the reconciliation of PlacementGroups
	// can be added as events to the PlacementGroup object and/or logged in the
	// controller's output.
	// +optional
	FailureMessage *string `json:"failureMessage,omitempty"`

	// Conditions defines current service state of the LinodePlacementGroup.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type LinodePlacementGroupStatusError string

type LinodeVPC struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   LinodeVPCSpec   `json:"spec,omitempty"`
	Status LinodeVPCStatus `json:"status,omitempty"`
}

type LinodeVPCList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []LinodeVPC `json:"items"`
}

type LinodeVPCSpec struct {
	// +optional
	VPCID *int `json:"vpcID,omitempty"`
	// +optional
	Description string `json:"description,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	Region string `json:"region"`
	// +optional
	// IPv6 is a list of IPv6 ranges allocated to the VPC.
	// Once ranges are allocated based on the IPv6Range field, they will be
	// added to this field.
	IPv6 []linodego.VPCIPv6Range `json:"ipv6,omitempty"`
	// +optional
	// IPv6Range is a list of IPv6 ranges to allocate to the VPC.
	// If not specified, the VPC will not have an IPv6 range allocated.
	// Once ranges are allocated, they will be added to the IPv6 field.
	IPv6Range []VPCCreateOptionsIPv6 `json:"ipv6Range,omitempty"`
	// +optional
	Subnets []VPCSubnetCreateOptions `json:"subnets,omitempty"`

	// Retain allows you to keep the VPC after the LinodeVPC object is deleted.
	// This is useful if you want to use an existing VPC that was not created by this controller.
	// If set to true, the controller will not delete the VPC resource in Linode.
	// Defaults to false.
	// +optional
	// +kubebuilder:default=false
	Retain bool `json:"retain,omitempty"`

	// CredentialsRef is a reference to a Secret that contains the credentials to use for provisioning this VPC. If not
	// supplied then the credentials of the controller will be used.
	// +optional
	CredentialsRef *corev1.SecretReference `json:"credentialsRef,omitempty"`
}

type LinodeVPCStatus struct {
	// Ready is true when the provider resource is ready.
	// +optional
	// +kubebuilder:default=false
	Ready bool `json:"ready"`

	// FailureReason will be set in the event that there is a terminal problem
	// reconciling the VPC and will contain a succinct value suitable
	// for machine interpretation.
	//
	// This field should not be set for transitive errors that a controller
	// faces that are expected to be fixed automatically over
	// time (like service outages), but instead indicate that something is
	// fundamentally wrong with the VPC's spec or the configuration of
	// the controller, and that manual intervention is required. Examples
	// of terminal errors would be invalid combinations of settings in the
	// spec, values that are unsupported by the controller, or the
	// responsible controller itself being critically misconfigured.
	//
	// Any transient errors that occur during the reconciliation of VPCs
	// can be added as events to the VPC object and/or logged in the
	// controller's output.
	// +optional
	FailureReason *VPCStatusError `json:"failureReason,omitempty"`

	// FailureMessage will be set in the event that there is a terminal problem
	// reconciling the VPC and will contain a more verbose string suitable
	// for logging and human consumption.
	//
	// This field should not be set for transitive errors that a controller
	// faces that are expected to be fixed automatically over
	// time (like service outages), but instead indicate that something is
	// fundamentally wrong with the VPC's spec or the configuration of
	// the controller, and that manual intervention is required. Examples
	// of terminal errors would be invalid combinations of settings in the
	// spec, values that are unsupported by the controller, or the
	// responsible controller itself being critically misconfigured.
	//
	// Any transient errors that occur during the reconciliation of VPCs
	// can be added as events to the VPC object and/or logged in the
	// controller's output.
	// +optional
	FailureMessage *string `json:"failureMessage,omitempty"`

	// Conditions defines current service state of the LinodeVPC.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type NetworkAddresses struct {
	IPv4 *[]string `json:"ipv4,omitempty"`
	IPv6 *[]string `json:"ipv6,omitempty"`
}

type NetworkSpec struct {
	// LoadBalancerType is the type of load balancer to use, defaults to NodeBalancer if not otherwise set
	// +kubebuilder:validation:Enum=NodeBalancer;dns;external
	// +kubebuilder:default=NodeBalancer
	// +optional
	LoadBalancerType string `json:"loadBalancerType,omitempty"`
	// DNSProvider is provider who manages the domain
	// Ignored if the LoadBalancerType is set to anything other than dns
	// If not set, defaults linode dns
	// +kubebuilder:validation:Enum=linode;akamai
	// +optional
	DNSProvider string `json:"dnsProvider,omitempty"`
	// DNSRootDomain is the root domain used to create a DNS entry for the control-plane endpoint
	// Ignored if the LoadBalancerType is set to anything other than dns
	// +optional
	DNSRootDomain string `json:"dnsRootDomain,omitempty"`
	// DNSUniqueIdentifier is the unique identifier for the DNS. This let clusters with the same name have unique
	// DNS record
	// Ignored if the LoadBalancerType is set to anything other than dns
	// If not set, CAPL will create a unique identifier for you
	// +optional
	DNSUniqueIdentifier string `json:"dnsUniqueIdentifier,omitempty"`
	// DNSTTLSec is the TTL for the domain record
	// Ignored if the LoadBalancerType is set to anything other than dns
	// If not set, defaults to 30
	// +optional
	DNSTTLSec int `json:"dnsTTLsec,omitempty"`
	// DNSSubDomainOverride is used to override CAPL's construction of the controlplane endpoint
	// If set, this will override the DNS subdomain from <clustername>-<uniqueid>.<rootdomain> to <overridevalue>.<rootdomain>
	// +optional
	DNSSubDomainOverride string `json:"dnsSubDomainOverride,omitempty"`
	// apiserverLoadBalancerPort used by the api server. It must be valid ports range (1-65535).
	// If omitted, default value is 6443.
	// +kubebuilder:validation:Minimum=1
	// +kubebuilder:validation:Maximum=65535
	// +optional
	ApiserverLoadBalancerPort int `json:"apiserverLoadBalancerPort,omitempty"`
	// NodeBalancerID is the id of NodeBalancer.
	// +optional
	NodeBalancerID *int `json:"nodeBalancerID,omitempty"`
	// NodeBalancerFirewallID is the id of NodeBalancer Firewall.
	// +optional
	NodeBalancerFirewallID *int `json:"nodeBalancerFirewallID,omitempty"`
	// apiserverNodeBalancerConfigID is the config ID of api server NodeBalancer config.
	// +optional
	ApiserverNodeBalancerConfigID *int `json:"apiserverNodeBalancerConfigID,omitempty"`
	// additionalPorts contains list of ports to be configured with NodeBalancer.
	// +optional
	AdditionalPorts []LinodeNBPortConfig `json:"additionalPorts,omitempty"`
	// subnetName is the name/label of the VPC subnet to be used by the cluster
	// +optional
	SubnetName string `json:"subnetName,omitempty"`
	// UseVlan provisions a cluster that uses VLANs instead of VPCs. IPAM is managed internally.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	UseVlan bool `json:"useVlan,omitempty"`
	// NodeBalancerBackendIPv4Range is the subnet range we want to provide for creating nodebalancer in VPC.
	// example: 10.10.10.0/30
	// +optional
	NodeBalancerBackendIPv4Range string `json:"nodeBalancerBackendIPv4Range,omitempty"`
}

type ObjectStorageACL string

type ObjectStore struct {
	// PresignedURLDuration defines the duration for which presigned URLs are valid.
	//
	// This is used to generate presigned URLs for S3 Bucket objects, which are used by
	// control-plane and worker nodes to fetch bootstrap data.
	//
	// +optional
	PresignedURLDuration *metav1.Duration `json:"presignedURLDuration,omitempty"`

	// CredentialsRef is a reference to a Secret that contains the credentials to use for accessing the Cluster Object Store.
	CredentialsRef corev1.SecretReference `json:"credentialsRef,omitempty"`
}

type VPCCreateOptionsIPv6 struct {
	// Range is the IPv6 prefix for the VPC.
	Range *string `json:"range,omitempty"`
	// IPv6 inventory from which the VPC prefix should be allocated.
	AllocationClass *string `json:"allocation_class,omitempty"`
}

type VPCIPv4 struct {
	VPC     string `json:"vpc,omitempty"`
	NAT1To1 string `json:"nat1to1,omitempty"`
}

type VPCStatusError string

type VPCSubnetCreateOptions struct {
	// +kubebuilder:validation:MinLength=3
	// +kubebuilder:validation:MaxLength=63
	// +optional
	Label string `json:"label,omitempty"`
	// +optional
	IPv4 string `json:"ipv4,omitempty"`
	// +optional
	// IPv6 is a list of IPv6 ranges allocated to the subnet.
	// Once ranges are allocated based on the IPv6Range field, they will be
	// added to this field.
	IPv6 []linodego.VPCIPv6Range `json:"ipv6,omitempty"`
	// +optional
	// IPv6Range is a list of IPv6 ranges to allocate to the subnet.
	// If not specified, the subnet will not have an IPv6 range allocated.
	// Once ranges are allocated, they will be added to the IPv6 field.
	IPv6Range []VPCSubnetCreateOptionsIPv6 `json:"ipv6Range,omitempty"`
	// SubnetID is subnet id for the subnet
	// +optional
	SubnetID int `json:"subnetID,omitempty"`
	// Retain allows you to keep the Subnet after the LinodeVPC object is deleted.
	// This is only applicable when the parent VPC has retain set to true.
	// +optional
	// +kubebuilder:default=false
	Retain bool `json:"retain,omitempty"`
}

type VPCSubnetCreateOptionsIPv6 struct {
	Range *string `json:"range,omitempty"`
}