v1alpha1

type ClusterGitHubApp struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ClusterGitHubAppSpec   `json:"spec,omitempty"`
	Status ClusterGitHubAppStatus `json:"status,omitempty"`
}

type ClusterGitHubAppList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ClusterGitHubApp `json:"items"`
}

type ClusterGitHubAppSpec struct {

	// URL is the base url for GitHub
	// +kubebuilder:validation:Optional
	URL string `json:"url"`

	// AppID is the id of GitHub App
	AppID int64 `json:"appID"`

	// PrivateKeySecretRef is the reference for the secret of GitHub App's private key
	PrivateKeySecretRef PrivateKeySecretRef `json:"privateKeySecretRef"`
}

type ClusterGitHubAppStatus struct {
}

type GitHubApp struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   GitHubAppSpec   `json:"spec,omitempty"`
	Status GitHubAppStatus `json:"status,omitempty"`
}

type GitHubAppList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []GitHubApp `json:"items"`
}

type GitHubAppSpec struct {

	// URL is the base url for GitHub
	// +kubebuilder:validation:Optional
	URL string `json:"url"`

	// AppID is the id of GitHub App
	AppID int64 `json:"appID"`

	// PrivateKeySecretRef is the reference for the secret of GitHub App's private key
	PrivateKeySecretRef PrivateKeySecretRef `json:"privateKeySecretRef"`
}

type GitHubAppStatus struct {
}

type Installation struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   InstallationSpec   `json:"spec,omitempty"`
	Status InstallationStatus `json:"status,omitempty"`
}

type InstallationList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Installation `json:"items"`
}

type InstallationPermissions struct {
	Administration              *string `json:"administration,omitempty"`
	Blocking                    *string `json:"blocking,omitempty"`
	Checks                      *string `json:"checks,omitempty"`
	Contents                    *string `json:"contents,omitempty"`
	ContentReferences           *string `json:"content_references,omitempty"`
	Deployments                 *string `json:"deployments,omitempty"`
	Emails                      *string `json:"emails,omitempty"`
	Followers                   *string `json:"followers,omitempty"`
	Issues                      *string `json:"issues,omitempty"`
	Metadata                    *string `json:"metadata,omitempty"`
	Members                     *string `json:"members,omitempty"`
	OrganizationAdministration  *string `json:"organization_administration,omitempty"`
	OrganizationHooks           *string `json:"organization_hooks,omitempty"`
	OrganizationPlan            *string `json:"organization_plan,omitempty"`
	OrganizationPreReceiveHooks *string `json:"organization_pre_receive_hooks,omitempty"`
	OrganizationProjects        *string `json:"organization_projects,omitempty"`
	OrganizationUserBlocking    *string `json:"organization_user_blocking,omitempty"`
	Packages                    *string `json:"packages,omitempty"`
	Pages                       *string `json:"pages,omitempty"`
	PullRequests                *string `json:"pull_requests,omitempty"`
	RepositoryHooks             *string `json:"repository_hooks,omitempty"`
	RepositoryProjects          *string `json:"repository_projects,omitempty"`
	RepositoryPreReceiveHooks   *string `json:"repository_pre_receive_hooks,omitempty"`
	SingleFile                  *string `json:"single_file,omitempty"`
	Statuses                    *string `json:"statuses,omitempty"`
	TeamDiscussions             *string `json:"team_discussions,omitempty"`
	VulnerabilityAlerts         *string `json:"vulnerability_alerts,omitempty"`
}

type InstallationSpec struct {

	// AppRef is a reference to ClusterGitHubApp or GitHubApp
	AppRef corev1.ObjectReference `json:"appRef"`

	// InstallationID is an installation id for GitHub App
	InstallationID int64 `json:"installationID"`

	// RepositoryIDS are used to restrict permissions for tokens
	// +kubebuilder:validation:Optional
	RepositoryIDs []int64 `json:"repositoryIDs,omitempty"`

	// Permissions are used to restrict permissions for tokens
	// +kubebuilder:validation:Optional
	Permissions *InstallationPermissions `json:"permissions"`

	// Key is the key in the secret to save the token
	Key string `json:"key"`

	// Template is the template to generate secret with the installation token
	Template SecretTemplateSpec `json:"template"`
}

type InstallationStatus struct {

	// Ready is the status of the installation token
	Ready bool `json:"ready"`

	// Secret is the secret name to save the installation token
	Secret string `json:"secret"`

	// Message is the error message if something failed
	// +kubebuilder:validation:Optional
	Message string `json:"message,omitempty"`
}

type MetadataSpec struct {
	// Map of string keys and values that can be used to organize and categorize
	// (scope and select) objects. May match selectors of replication controllers
	// and services.
	// More info: http://kubernetes.io/docs/user-guide/labels
	// +kubebuilder:validation:Optional
	Labels map[string]string `json:"labels,omitempty"`

	// Annotations is an unstructured key value map stored with a resource that may be
	// set by external tools to store and retrieve arbitrary metadata. They are not
	// queryable and should be preserved when modifying objects.
	// More info: http://kubernetes.io/docs/user-guide/annotations
	// +kubebuilder:validation:Optional
	Annotations map[string]string `json:"annotations,omitempty"`
}

type PrivateKeySecretRef struct {
	Name string `json:"name"`
	Key  string `json:"key"`
}

type SecretTemplateSpec struct {
	// Standard object's metadata.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	// +kubebuilder:validation:Optional
	MetadataSpec `json:"metadata,omitempty"`

	// Immutable, if set to true, ensures that data stored in the Secret cannot
	// be updated (only object metadata can be modified).
	// If not set to true, the field can be modified at any time.
	// Defaulted to nil.
	// This is an alpha field enabled by ImmutableEphemeralVolumes feature gate.
	// +kubebuilder:validation:Optional
	Immutable *bool `json:"immutable,omitempty"`

	// Data contains the secret data. Each key must consist of alphanumeric
	// characters, '-', '_' or '.'. The serialized form of the secret data is a
	// base64 encoded string, representing the arbitrary (possibly non-string)
	// data value here. Described in https://tools.ietf.org/html/rfc4648#section-4
	// +kubebuilder:validation:Optional
	Data map[string][]byte `json:"data,omitempty"`

	// stringData allows specifying non-binary secret data in string form.
	// It is provided as a write-only convenience method.
	// All keys and values are merged into the data field on write, overwriting any existing values.
	// It is never output when reading from the API.
	// +k8s:conversion-gen=false
	// +kubebuilder:validation:Optional
	StringData map[string]string `json:"stringData,omitempty"`

	// Used to facilitate programmatic handling of secret data.
	// +kubebuilder:validation:Optional
	Type corev1.SecretType `json:"type,omitempty"`
}