v2alpha1

type Executor struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ExecutorSpec   `json:"spec,omitempty"`
	Status ExecutorStatus `json:"status,omitempty"`
}

type ExecutorList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Executor `json:"items"`
}

type ExecutorSpec struct {

	// Scopes defines the scopes for which this executor is responsible. At
	// least one non-empty scope must be provided. Required.
	// +kubebuilder:validation:MinItems=1
	Scopes []string `json:"scopes"`

	// Verifiers contains the configuration options for the verifiers. At least
	// one verifier must be provided. Required.
	// +kubebuilder:validation:MinItems=1
	Verifiers []*VerifierOptions `json:"verifiers"`

	// Stores contains the configuration options for the stores. At least one
	// store must be provided. Required.
	// +kubebuilder:validation:MinItems=1
	Stores []*StoreOptions `json:"stores"`

	// PolicyEnforcer contains the configuration options for the policy
	// enforcer. Optional.
	PolicyEnforcer *PolicyEnforcerOptions `json:"policyEnforcer,omitempty"`

	// Concurrency limits the maximum number of concurrent execution per
	// validation request. If less than or equal to 0, a default (currently 3)
	// will be used. Optional.
	Concurrency int `json:"concurrency,omitempty"`
}

type ExecutorStatus struct {

	// Succeeded indicates whether the executor has successfully started and is
	// ready to process requests. Required.
	Succeeded bool `json:"succeeded"`

	// Error is the error message if the executor failed to start.
	// +optional
	Error string `json:"error,omitempty"`

	// Truncated error message if the message is too long.
	// +optional
	BriefError string `json:"briefError,omitempty"`
}

type PolicyEnforcerOptions struct {
	// Type represents a specific implementation of a policy enforcer. Required.
	// +kubebuilder:validation:MinLength=1
	Type string `json:"type"`

	// Parameters is additional parameters for the policy enforcer. Optional.
	Parameters runtime.RawExtension `json:"parameters,omitempty"`
}

type StoreOptions struct {
	// Type represents a specific implementation of a store. Required.
	// +kubebuilder:validation:MinLength=1
	Type string `json:"type"`

	// Parameters is additional parameters for the store. Optional.
	Parameters runtime.RawExtension `json:"parameters,omitempty"`
}

type VerifierOptions struct {
	// Name is the unique identifier of a verifier instance. Required.
	// +kubebuilder:validation:MinLength=1
	Name string `json:"name"`

	// Type represents a specific implementation of a verifier. Required.
	// Note: there could be multiple verifiers of the same type with different
	//       names.
	// +kubebuilder:validation:MinLength=1
	Type string `json:"type"`

	// Parameters is additional parameters of the verifier. Optional.
	Parameters runtime.RawExtension `json:"parameters,omitempty"`
}