model

type AutoTimeModel struct {
	CreatedAt time.Time `gorm:"not null"`
	UpdatedAt time.Time `gorm:"not null"`
}

type BaseLabel struct {
	ID         uuid.UUID `gorm:"type:uuid;primaryKey"`
	Key        string    `gorm:"type:varchar(255);not null"`
	Value      string    `gorm:"type:varchar(255)"`
	ResourceID uuid.UUID `gorm:"type:uuid;not null"`
}

type Certificate struct {
	ID             uuid.UUID          `gorm:"type:uuid;primaryKey"`
	Fingerprint    string             `gorm:"type:text;not null"`
	CommonName     string             `gorm:"type:varchar(64);not null"`
	State          CertificateState   `gorm:"type:varchar(255)"`
	Purpose        CertificatePurpose `gorm:"type:varchar(255)"`
	CreationDate   time.Time          `gorm:"not null"`
	ExpirationDate time.Time          `gorm:"not null"`
	CertPEM        string             `gorm:"type:text"` // Base64 encoded PEM certificate
	PrivateKeyPEM  string             `gorm:"type:text"` // Base64 encoded PEM private key
	AutoRotate     bool               `gorm:"not null;default:true"`
	SupersedesID   *uuid.UUID         `gorm:"foreignKey:CertificateID"`
}

type CertificatePurpose string

type CertificateState string

type CertificateSubject struct {
	Locality           []string `yaml:"locality"`
	OrganizationalUnit []string `yaml:"organizationUnit"` //nolint:tagliatelle
	Organization       []string `yaml:"organization"`
	Country            []string `yaml:"country"`
	CommonName         string
}

type ClientCertificate struct {
	Name    string             `yaml:"name"`
	RootCA  string             `yaml:"rootCA"` //nolint:tagliatelle
	Subject CertificateSubject `yaml:"subject"`
}

type ClientCertificates map[CertificatePurpose][]*ClientCertificate

type CryptoConfig struct {
	Subject    string             `yaml:"subject" json:"subject"`
	AccessData KeystoreAccessData `yaml:"accessData" json:"accessData"`
}

type Event struct {
	AutoTimeModel

	Identifier string            `gorm:"type:varchar(255);primaryKey"`
	Type       string            `gorm:"type:varchar(255);not null"`
	Data       json.RawMessage   `gorm:"type:jsonb;not null"`
	Status     orbital.JobStatus `gorm:"type:varchar(255);not null"`

	// Stores error content for failed events
	// It's split from orbital error_message by ERROR_CODE:ErrorMessage
	ErrorCode    string `gorm:"type:varchar(255)"`
	ErrorMessage string `gorm:"type:text"`

	// PreviousItemStatus represents the state an item was before the event was sent
	// This is used for cancel actions to recover an item to it's previous state
	PreviousItemStatus string `gorm:"type:varchar(255)"`
}

type Group struct {
	ID            uuid.UUID              `gorm:"type:uuid;primaryKey"`
	Name          string                 `gorm:"type:varchar(64);not null;unique"`
	Description   string                 `gorm:"type:text"`
	Role          constants.BusinessRole `gorm:"type:varchar(255);not null"`
	IAMIdentifier string                 `gorm:"type:varchar(128);not null;unique"`
}

type ImportParams struct {
	AutoTimeModel

	KeyID              uuid.UUID `gorm:"type:uuid;primaryKey"`
	WrappingAlg        string    `gorm:"type:varchar(50);not null"`
	HashFunction       string    `gorm:"type:varchar(50);not null"`
	PublicKeyPEM       string    `gorm:"type:text;not null"`
	Expires            *time.Time
	ProviderParameters json.RawMessage `gorm:"type:jsonb"`
}

type JoinSystem struct {
	System

	KeyConfigurationName       *string `gorm:"column:key_configuration_name"`
	TargetKeyConfigurationName *string `gorm:"column:target_key_configuration_name"`
	ErrorCode                  string  `gorm:"column:error_code"`
	ErrorMessage               string  `gorm:"column:error_message"`

	Key   string `gorm:"type:varchar(255);primaryKey"`
	Value string `gorm:"type:varchar(255)"`
}

type Key struct {
	AutoTimeModel

	ID                   uuid.UUID       `gorm:"type:uuid;primaryKey"`
	KeyConfigurationID   uuid.UUID       `gorm:"type:uuid;not null;uniqueindex:keyname,priority:1"`
	Name                 string          `gorm:"type:varchar(255);not null;uniqueindex:keyname,priority:2"`
	KeyType              string          `gorm:"type:varchar(50);not null"`
	Description          string          `gorm:"type:text"`
	Algorithm            string          `gorm:"type:varchar(50);not null"`
	Provider             string          `gorm:"type:varchar(50);not null"`
	Region               string          `gorm:"type:varchar(50);not null"`
	State                cmkapi.KeyState `gorm:"type:varchar(50);not null;default:'ENABLED'"`
	KeyVersions          []KeyVersion    `gorm:"foreignKey:KeyID"`
	ImportParams         *ImportParams   `gorm:"foreignKey:KeyID;references:ID;constraint:OnDelete:CASCADE"`
	NativeID             *string         `gorm:"type:varchar(255)"`
	KeyLabels            []KeyLabel      `gorm:"foreignKey:ResourceID"`
	LastUsed             *time.Time
	ManagementAccessData json.RawMessage `gorm:"type:jsonb"`
	CryptoAccessData     json.RawMessage `gorm:"type:jsonb"`
	UnderWorkflow        bool            `gorm:"type:bool"`

	IsPrimary       bool            `gorm:"-:all"` // Loaded on the managear/get methods
	EditableRegions map[string]bool `gorm:"-:all"`
}

type KeyAccessData map[string]cmkapi.KeyAccessDetailsRegion // Map of regions and their properties

type KeyConfiguration struct {
	AutoTimeModel

	ID           uuid.UUID `gorm:"type:uuid;primaryKey"`
	Name         string    `gorm:"type:varchar(255);not null;unique"`
	Description  string    `gorm:"type:text"`
	AdminGroupID uuid.UUID `gorm:"type:uuid;not null"`
	AdminGroup   Group     `gorm:"foreignKey:AdminGroupID"`
	CreatorID    string    `gorm:"type:varchar(255);not null"`
	PrimaryKeyID *uuid.UUID
	TotalKeys    int `gorm:"->;-:migration"`
	TotalSystems int `gorm:"->;-:migration"`
	// contains filtered or unexported fields
}

type KeyLabel struct {
	BaseLabel
	AutoTimeModel

	CryptoKey Key `gorm:"foreignKey:ResourceID"`
}

type KeyVersion struct {
	AutoTimeModel

	ID        uuid.UUID `gorm:"type:uuid;primaryKey"`
	NativeID  string    `gorm:"type:varchar(255);not null"`
	KeyID     uuid.UUID `gorm:"type:uuid;not null;index"`
	RotatedAt time.Time `gorm:"type:timestamptz;not null"` // Rotation timestamp (latest = current version)
}

type Keystore struct {
	AutoTimeModel

	ID       uuid.UUID       `gorm:"type:uuid;primaryKey"`
	Provider string          `gorm:"type:varchar(50);not null"`
	Config   json.RawMessage `gorm:"type:jsonb;not null;unique"`
}

type KeystoreAccessData map[string]any

type KeystoreConfig struct {
	RoleManagementConfig ManagementConfig        `yaml:"roleManagementConfig" json:"roleManagementConfig"`
	KeyManagementConfig  ManagementConfig        `yaml:"keyManagementConfig" json:"keyManagementConfig"`
	CryptoAccessData     map[string]CryptoConfig `yaml:"cryptoAccessData" json:"cryptoAccessData"`
	SupportedRegions     []config.Region         `yaml:"supportedRegions" json:"supportedRegions"`
	// contains filtered or unexported fields
}

type ManagementConfig struct {
	LocalityID string             `yaml:"localityId" json:"localityId"`
	CommonName string             `yaml:"commonName" json:"commonName"`
	AccessData KeystoreAccessData `yaml:"accessData" json:"accessData"`
}

type RequestCertArgs struct {
	CertPurpose CertificatePurpose
	Supersedes  *uuid.UUID
	CommonName  string
	Locality    []string
}

type System struct {
	ID uuid.UUID `gorm:"type:uuid;primaryKey"`

	Identifier string `gorm:"type:varchar(255);not null;uniqueindex:region_sys,priority:2"`

	Region                     string            `gorm:"type:varchar(50);not null;uniqueindex:region_sys,priority:1"`
	Type                       string            `gorm:"type:varchar(50);not null"`
	KeyConfigurationID         *uuid.UUID        `gorm:"type:uuid"`
	TargetKeyConfigurationID   *uuid.UUID        `gorm:"type:uuid"`
	KeyConfigurationName       *string           `gorm:"-"`
	TargetKeyConfigurationName *string           `gorm:"-"`
	Properties                 map[string]string `gorm:"-:all"`

	// Status can be 'CONNECTED', 'DISCONNECTED', 'FAILED', or 'PROCESSING'
	Status        cmkapi.SystemStatus `gorm:"type:varchar(50);default:'DISCONNECTED'"`
	UnderWorkflow bool                `gorm:"type:bool"`

	// Only set for failed systems by the event table
	ErrorCode    string `gorm:"-"`
	ErrorMessage string `gorm:"-"`
}

type SystemProperty struct {
	ID    uuid.UUID `gorm:"type:uuid;primaryKey"`
	Key   string    `gorm:"type:varchar(255);primaryKey"`
	Value string    `gorm:"type:varchar(255)"`
}

type Tag struct {
	ID     uuid.UUID       `gorm:"type:uuid;primaryKey"` // ID of the Item
	Values json.RawMessage `gorm:"type:jsonb"`
}

type Tenant struct {
	multitenancy.TenantModel

	ID        string       `gorm:"type:varchar(255);not null;unique"`
	Name      string       `gorm:"type:varchar(255)"`
	Status    TenantStatus `gorm:"type:varchar(50);not null"`
	OwnerType string       `gorm:"type:varchar(50);not null;default:''"`
	OwnerID   string       `gorm:"type:varchar(255);not null;default:''"`
	IssuerURL string       `gorm:"type:varchar(255);not null;default:''"`
	Role      TenantRole   `gorm:"type:varchar(50);not null;default:''"`
}

type TenantConfig struct {
	Key   string          `gorm:"type:varchar(255);primaryKey"`
	Value json.RawMessage `gorm:"type:jsonb;not null"`
}

type TenantRole string

type TenantStatus string

type Validator interface {
	Validate() error
}

type Workflow struct {
	AutoTimeModel

	ID          uuid.UUID     `gorm:"type:uuid;primaryKey"`
	State       WorkflowState `gorm:"type:varchar(50);not null"`
	InitiatorID string        `gorm:"type:varchar(255);not null"`

	Approvers              []WorkflowApprover   `gorm:"foreignKey:WorkflowID"`
	ApproverGroupIDs       json.RawMessage      `gorm:"type:jsonb"`
	ArtifactType           WorkflowArtifactType `gorm:"type:varchar(50);not null"`
	ArtifactID             uuid.UUID            `gorm:"type:uuid;not null"`
	ArtifactName           *string              `gorm:"type:varchar(255)"` // Currently a snapshot at time of creation
	ActionType             WorkflowActionType   `gorm:"type:varchar(50);not null"`
	Parameters             string               `gorm:"type:text"`
	ParametersResourceName *string              `gorm:"type:varchar(255)"`
	ParametersResourceType *string              `gorm:"type:varchar(50)"`
	FailureReason          string               `gorm:"type:text"`
	ExpiryDate             *time.Time
	MinimumApprovalCount   int `gorm:"type:integer;default:2"` // Snapshot of minimum approvals at creation time
	// contains filtered or unexported fields
}

type WorkflowActionType string

type WorkflowApprover struct {
	WorkflowID uuid.UUID `gorm:"type:uuid;primaryKey"`
	UserID     string    `gorm:"type:varchar(255);primaryKey"`

	Workflow Workflow     `gorm:"foreignKey:WorkflowID"`
	Approved sql.NullBool `gorm:"default:null"`
	// contains filtered or unexported fields
}

type WorkflowApproverGroup struct {
	ID         uuid.UUID `gorm:"type:uuid;primaryKey"`
	WorkflowID uuid.UUID `gorm:"type:uuid;not null"`
	GroupID    uuid.UUID `gorm:"type:uuid;not null"`
}

type WorkflowArtifactType string

type WorkflowConfig struct {
	// Enabled determines if workflows are enabled in controllers
	Enabled bool

	// MinimumApprovals is the minimum number of approvals required for a workflow
	MinimumApprovals int

	// RetentionPeriodDays is the number of days to retain workflow data
	RetentionPeriodDays int

	// DefaultExpiryPeriodDays is the default number of days after which pending workflows will expire
	DefaultExpiryPeriodDays int

	// MaxExpiryPeriodDays is the maximum settable value for the expiry period
	MaxExpiryPeriodDays int
}

type WorkflowState string