v1beta1

type AuthParams struct {
	CA        []byte  `json:"ca,omitempty"`
	SignedCRT []byte  `json:"signedCRT,omitempty"`
	APIServer string  `json:"apiServer,omitempty"`
	ProxyURL  *string `json:"proxyURL,omitempty"`

	AwsConfig *AwsConfig `json:"awsConfig,omitempty"`
}

type AuthzPolicy string

type AwsConfig struct {
	AwsUserArn         string `json:"awsUserArn"`
	AwsAccessKeyID     string `json:"awsAccessKeyID"`
	AwsSecretAccessKey string `json:"awsSecretAccessKey"`
	AwsRegion          string `json:"awsRegion"`
	AwsClusterName     string `json:"awsClusterName"`
}

type Identity struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   IdentitySpec   `json:"spec,omitempty"`
	Status IdentityStatus `json:"status,omitempty"`
}

type IdentityList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Identity `json:"items"`
}

type IdentitySpec struct {
	// ClusterID is the identity of the provider cluster.
	ClusterID liqov1beta1.ClusterID `json:"clusterID,omitempty"`
	// Type is the type of the identity.
	// +kubebuilder:validation:Enum=ControlPlane;ResourceSlice
	Type IdentityType `json:"type,omitempty"`
	// AuthParams contains the parameters to create an Identity to use in the provider cluster.
	AuthParams AuthParams `json:"authParams,omitempty"`
	// Namespace is the namespace where to use the identity.
	// +kubebuilder:validation:Optional
	Namespace *string `json:"namespace,omitempty"`
}

type IdentityStatus struct {
	// KubeconfigSecretRef contains the reference to the secret containing the kubeconfig to access the provider cluster.
	KubeconfigSecretRef *corev1.LocalObjectReference `json:"kubeconfigSecretRef,omitempty"`
}

type IdentityType string

type Renew struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   RenewSpec   `json:"spec,omitempty"`
	Status RenewStatus `json:"status,omitempty"`
}

type RenewList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Renew `json:"items"`
}

type RenewSpec struct {
	// ConsumerClusterID is the id of the consumer cluster.
	ConsumerClusterID liqov1beta1.ClusterID `json:"consumerClusterID,omitempty"`
	// PublicKey is the public key of the tenant cluster.
	PublicKey []byte `json:"publicKey,omitempty"`
	// CSR is the Certificate Signing Request of the tenant cluster.
	CSR []byte `json:"csr,omitempty"`
	// IdentityType is the type of the identity.
	IdentityType IdentityType `json:"identityType,omitempty"`
	// ResoruceSliceRef is the reference to the resource slice.
	ResourceSliceRef *corev1.LocalObjectReference `json:"resourceSliceRef,omitempty"`
}

type RenewStatus struct {
	// AuthParams contains the authentication parameters for the consumer cluster.
	AuthParams *AuthParams `json:"authParams,omitempty"`
}

type ResourceSlice struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ResourceSliceSpec   `json:"spec,omitempty"`
	Status ResourceSliceStatus `json:"status,omitempty"`
}

type ResourceSliceClass string

type ResourceSliceCondition struct {
	// Type of the condition.
	// +kubebuilder:validation:Enum="Authentication";"Resources"
	Type ResourceSliceConditionType `json:"type"`
	// Status of the condition.
	// +kubebuilder:validation:Enum="Accepted";"Denied"
	Status ResourceSliceConditionStatus `json:"status"`
	// LastTransitionTime -> timestamp for when the condition last transitioned from one status to another.
	LastTransitionTime metav1.Time `json:"lastTransitionTime,omitempty"`
	// Reason -> Machine-readable, UpperCamelCase text indicating the reason for the condition's last transition.
	Reason string `json:"reason,omitempty"`
	// Message -> Human-readable message indicating details about the last status transition.
	Message string `json:"message,omitempty"`
}

type ResourceSliceConditionStatus string

type ResourceSliceConditionType string

type ResourceSliceList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ResourceSlice `json:"items"`
}

type ResourceSliceSpec struct {
	// ConsumerClusterID is the id of the consumer cluster.
	ConsumerClusterID *liqov1beta1.ClusterID `json:"consumerClusterID,omitempty"`
	// ProviderClusterID is the id of the provider cluster.
	ProviderClusterID *liqov1beta1.ClusterID `json:"providerClusterID,omitempty"`
	// Resources contains the slice of resources requested.
	Resources corev1.ResourceList `json:"resources,omitempty"`
	// Class contains the class of the ResourceSlice.
	Class ResourceSliceClass `json:"class,omitempty"`
	// CSR is the Certificate Signing Request of the consumer cluster.
	CSR []byte `json:"csr,omitempty"`
}

type ResourceSliceStatus struct {
	// Conditions contains the conditions of the ResourceSlice.
	Conditions []ResourceSliceCondition `json:"conditions,omitempty"`
	// Resources contains the slice of resources accepted.
	Resources corev1.ResourceList `json:"resources,omitempty"`
	// AuthParams contains the authentication parameters for the resources given by the provider cluster.
	AuthParams *AuthParams `json:"authParams,omitempty"`
	// StorageClasses contains the list of the storage classes offered by the cluster.
	StorageClasses []liqov1beta1.StorageType `json:"storageClasses,omitempty"`
	// IngressClasses contains the list of the ingress classes offered by the cluster.
	IngressClasses []liqov1beta1.IngressType `json:"ingressClasses,omitempty"`
	// LoadBalancerClasses contains the list of the load balancer classes offered by the cluster.
	LoadBalancerClasses []liqov1beta1.LoadBalancerType `json:"loadBalancerClasses,omitempty"`
	// NodeLabels contains the provider cluster labels.
	NodeLabels map[string]string `json:"nodeLabels,omitempty"`
	// NodeSelector contains the selector to be applied to offloaded pods.
	NodeSelector map[string]string `json:"nodeSelector,omitempty"`
}

type Tenant struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   TenantSpec   `json:"spec,omitempty"`
	Status TenantStatus `json:"status,omitempty"`
}

type TenantCondition string

type TenantList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Tenant `json:"items"`
}

type TenantSpec struct {
	// ClusterID is the id of the consumer cluster.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="ClusterID is immutable"
	ClusterID liqov1beta1.ClusterID `json:"clusterID,omitempty"`
	// AuthzPolicy is the policy used by the cluster to authorize or reject an incoming ResourceSlice.
	// Default is KeysExchange.
	// +kubebuilder:validation:Enum=KeysExchange;TolerateNoHandshake
	// +kubebuilder:default=KeysExchange
	*AuthzPolicy `json:"authzPolicy,omitempty"`
	// PublicKey is the public key of the tenant cluster.
	PublicKey []byte `json:"publicKey,omitempty"`
	// CSR is the Certificate Signing Request of the tenant cluster.
	CSR []byte `json:"csr,omitempty"`
	// Signature contains the nonce signed by the tenant cluster.
	Signature []byte `json:"signature,omitempty"`
	// ProxyURL is the URL of the proxy used by the tenant cluster to connect to the local cluster (optional).
	ProxyURL *string `json:"proxyURL,omitempty"`
	// TenantCondition contains the conditions of the tenant.
	// +kubebuilder:validation:Enum=Active;Cordoned;Drained
	// +kubebuilder:default=Active
	TenantCondition TenantCondition `json:"tenantCondition,omitempty"`
}

type TenantStatus struct {
	// TenantNamespace is the namespace of the tenant cluster.
	TenantNamespace string `json:"tenantNamespace,omitempty"`
	// AuthParams contains the authentication parameters for the consumer cluster.
	AuthParams *AuthParams `json:"authParams,omitempty"`
}