v1alpha1

type BackupBucketConfig struct {
	metav1.TypeMeta `json:",inline"`

	// Immutability defines the immutability configuration for the backup bucket.
	// +optional
	Immutability *ImmutableConfig `json:"immutability,omitempty"`
}

type CloudControllerManagerConfig struct {
	// FeatureGates contains information about enabled feature gates.
	// +optional
	FeatureGates map[string]bool `json:"featureGates,omitempty"`

	// UseCustomRouteController controls if custom route controller should be used.
	// Defaults to false.
	// +optional
	UseCustomRouteController *bool `json:"useCustomRouteController,omitempty"`
}

type CloudProfileConfig struct {
	metav1.TypeMeta `json:",inline"`
	// MachineImages is the list of machine images that are understood by the controller. It maps
	// logical names and versions to provider-specific identifiers.
	MachineImages []MachineImages `json:"machineImages"`
}

type ControlPlaneConfig struct {
	metav1.TypeMeta `json:",inline"`

	// CloudControllerManager contains configuration settings for the cloud-controller-manager.
	// +optional
	CloudControllerManager *CloudControllerManagerConfig `json:"cloudControllerManager,omitempty"`

	// LoadBalancerController contains configuration settings for the optional aws-load-balancer-controller (ALB).
	// +optional
	LoadBalancerController *LoadBalancerControllerConfig `json:"loadBalancerController,omitempty"`

	// Storage contains configuration for storage in the cluster.
	// +optional
	Storage *Storage `json:"storage,omitempty"`
}

type CpuOptions struct {
	// CoreCount specifies the number of CPU cores per instance.
	CoreCount *int64 `json:"coreCount"`
	// ThreadsPerCore sets the number of threads per core. Must be either '1' (disable multi-threading) or '2'.
	ThreadsPerCore *int64 `json:"threadsPerCore"`
}

type DataVolume struct {
	// Name is the name of the data volume this configuration applies to.
	Name string `json:"name"`
	// Volume contains configuration for the volume.
	Volume `json:",inline"`
	// SnapshotID is the ID of the snapshot.
	// +optional
	SnapshotID *string `json:"snapshotID,omitempty"`
}

type DualStack struct {
	// Enabled specifies if dual-stack is enabled or not.
	Enabled bool `json:"enabled"`
}

type EC2 struct {
	// KeyName is the name of the SSH key.
	KeyName string `json:"keyName"`
}

type HTTPTokensValue string

type IAM struct {
	// InstanceProfiles is a list of AWS IAM instance profiles.
	InstanceProfiles []InstanceProfile `json:"instanceProfiles"`
	// Roles is a list of AWS IAM roles.
	Roles []Role `json:"roles"`
}

type IAMInstanceProfile struct {
	// Name is the name of the instance profile.
	// +optional
	Name *string `json:"name,omitempty"`
	// ARN is the ARN of the instance profile.
	// +optional
	ARN *string `json:"arn,omitempty"`
}

type IgnoreTags struct {
	// Keys is a list of individual tag keys, that should be ignored during infrastructure reconciliation.
	// +optional
	Keys []string `json:"keys,omitempty"`
	// KeyPrefixes is a list of tag key prefixes, that should be ignored during infrastructure reconciliation.
	// +optional
	KeyPrefixes []string `json:"keyPrefixes,omitempty"`
}

type ImmutableConfig struct {
	// RetentionType specifies the type of retention for the backup bucket.
	// Currently allowed value is:
	// - "bucket": retention policy applies on the entire bucket.
	RetentionType RetentionType `json:"retentionType"`

	// RetentionPeriod specifies the immutability retention period for the backup bucket.
	// S3 only supports immutability durations in days or years, therefore this field must be set as multiple of 24h.
	RetentionPeriod metav1.Duration `json:"retentionPeriod"`

	// S3 provides two retention modes that apply different levels of protection to objects:
	// Allowed values are: "governance" or "compliance" mode.
	Mode ModeType `json:"mode"`
}

type InfrastructureConfig struct {
	metav1.TypeMeta `json:",inline"`

	// EnableECRAccess specifies whether the IAM role policy for the worker nodes shall contain
	// permissions to access the ECR.
	// default: true
	// +optional
	EnableECRAccess *bool `json:"enableECRAccess,omitempty"`

	// DualStack specifies whether dual-stack or IPv4-only should be supported.
	DualStack *DualStack `json:"dualStack,omitempty"`

	// Networks is the AWS specific network configuration (VPC, subnets, etc.)
	Networks Networks `json:"networks"`

	// IgnoreTags allows to configure which resource tags on resources managed by Gardener should be ignored during
	// infrastructure reconciliation. By default, all tags that are added outside of Gardener's / terraform's
	// reconciliation will be removed during the next reconciliation. This field allows users and automation to add
	// custom tags on resources created and managed by Gardener without loosing them on the next reconciliation.
	// See https://registry.terraform.io/providers/hashicorp/aws/latest/docs/guides/resource-tagging#ignoring-changes-in-all-resources
	// for details of the underlying terraform implementation.
	// +optional
	IgnoreTags *IgnoreTags `json:"ignoreTags,omitempty"`
}

type InfrastructureState struct {
	metav1.TypeMeta

	Data map[string]string `json:"data"`
}

type InfrastructureStatus struct {
	metav1.TypeMeta `json:",inline"`
	// EC2 contains information about the created AWS EC2 resources.
	EC2 EC2 `json:"ec2"`
	// IAM contains information about the created AWS IAM resources.
	IAM IAM `json:"iam"`
	// VPC contains information about the created AWS VPC and some related resources.
	VPC VPCStatus `json:"vpc"`
}

type InstanceMetadataOptions struct {
	// HTTPTokens enforces the use of metadata v2 API.
	HTTPTokens *HTTPTokensValue `json:"httpTokens,omitempty"`
	// HTTPPutResponseHopLimit is the response hop limit for instance metadata requests.
	// Valid values are between 1 and 64.
	HTTPPutResponseHopLimit *int64 `json:"httpPutResponseHopLimit,omitempty"`
}

type InstanceProfile struct {
	// Purpose is a logical description of the instance profile.
	Purpose string `json:"purpose"`
	// Name is the name for this instance profile.
	Name string `json:"name"`
}

type LoadBalancerControllerConfig struct {
	// Enabled controls if the ALB should be deployed.
	Enabled bool `json:"enabled"`

	// IngressClassName is the name of the ingress class the ALB controller will target. Default value is 'alb'.
	// If empty string is specified, it will match all ingresses without ingress class annotation and ingresses of type alb
	// +optional
	IngressClassName *string `json:"ingressClassName,omitempty"`
}

type MachineImage struct {
	// Name is the logical name of the machine image.
	Name string `json:"name"`
	// Version is the logical version of the machine image.
	Version string `json:"version"`
	// AMI is the AMI for the machine image.
	AMI string `json:"ami"`
	// Architecture is the CPU architecture of the machine image.
	// +optional
	Architecture *string `json:"architecture,omitempty"`
}

type MachineImageVersion struct {
	// Version is the version of the image.
	Version string `json:"version"`
	// Regions is a mapping to the correct AMI for the machine image in the supported regions.
	Regions []RegionAMIMapping `json:"regions"`
}

type MachineImages struct {
	// Name is the logical name of the machine image.
	Name string `json:"name"`
	// Versions contains versions and a provider-specific identifier.
	Versions []MachineImageVersion `json:"versions"`
}

type ModeType string

type Networks struct {
	// VPC indicates whether to use an existing VPC or create a new one.
	VPC VPC `json:"vpc"`
	// Zones belonging to the same region
	Zones []Zone `json:"zones"`
}

type RegionAMIMapping struct {
	// Name is the name of the region.
	Name string `json:"name"`
	// AMI is the AMI for the machine image.
	AMI string `json:"ami"`
	// Architecture is the CPU architecture of the machine image.
	// +optional
	Architecture *string `json:"architecture,omitempty"`
}

type RetentionType string

type Role struct {
	// Purpose is a logical description of the role.
	Purpose string `json:"purpose"`
	// ARN is the AWS Resource Name for this role.
	ARN string `json:"arn"`
}

type SecurityGroup struct {
	// Purpose is a logical description of the security group.
	Purpose string `json:"purpose"`
	// ID is the subnet id.
	ID string `json:"id"`
}

type Storage struct {
	// ManagedDefaultClass controls if the 'default' StorageClass and 'default' VolumeSnapshotClass
	// would be marked as default. Set to false to manually set the default to another class not
	// managed by Gardener.
	// Defaults to true.
	// +optional
	ManagedDefaultClass *bool `json:"managedDefaultClass,omitempty"`
}

type Subnet struct {
	// Purpose is a logical description of the subnet.
	Purpose string `json:"purpose"`
	// ID is the subnet id.
	ID string `json:"id"`
	// Zone is the availability zone into which the subnet has been created.
	Zone string `json:"zone"`
}

type VPC struct {
	// ID is the VPC id.
	// +optional
	ID *string `json:"id,omitempty"`
	// CIDR is the VPC CIDR.
	// +optional
	CIDR *string `json:"cidr,omitempty"`
	// GatewayEndpoints service names to configure as gateway endpoints in the VPC.
	// +optional
	GatewayEndpoints []string `json:"gatewayEndpoints,omitempty"`
}

type VPCStatus struct {
	// ID is the VPC id.
	ID string `json:"id"`
	// Subnets is a list of subnets that have been created.
	Subnets []Subnet `json:"subnets"`
	// SecurityGroups is a list of security groups that have been created.
	SecurityGroups []SecurityGroup `json:"securityGroups"`
}

type Volume struct {
	// IOPS is the number of I/O operations per second (IOPS) that the volume supports.
	// For io1 volume type, this represents the number of IOPS that are provisioned for the
	// volume. For gp2 volume type, this represents the baseline performance of the volume and
	// the rate at which the volume accumulates I/O credits for bursting. For more
	// information about General Purpose SSD baseline performance, I/O credits,
	// and bursting, see Amazon EBS Volume Types (http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html)
	// in the Amazon Elastic Compute Cloud User Guide.
	//
	// Constraint: Range is 100-20000 IOPS for io1 volumes and 100-10000 IOPS for
	// gp2 volumes.
	//
	// Condition: This parameter is required for requests to create io1 volumes;
	// it is not used in requests to create gp2, st1, sc1, or standard volumes.
	// +optional
	IOPS *int64 `json:"iops,omitempty"`

	// The throughput that the volume supports, in MiB/s.
	//
	// This parameter is valid only for gp3 volumes.
	//
	// Valid Range: The range as of 16th Aug 2022 is from 125 MiB/s to 1000 MiB/s. For more info refer (http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html)
	Throughput *int64 `json:"throughput,omitempty"`
}

type VolumeType string

type WorkerConfig struct {
	metav1.TypeMeta `json:",inline"`

	// NodeTemplate contains resource information of the machine which is used by Cluster Autoscaler to generate nodeTemplate during scaling a nodeGroup from zero.
	// +optional
	NodeTemplate *extensionsv1alpha1.NodeTemplate `json:"nodeTemplate,omitempty"`
	// Volume contains configuration for the root disks attached to VMs.
	// +optional
	Volume *Volume `json:"volume,omitempty"`
	// DataVolumes contains configuration for the additional disks attached to VMs.
	// +optional
	DataVolumes []DataVolume `json:"dataVolumes,omitempty"`
	// IAMInstanceProfile contains configuration for the IAM instance profile that should be used for the VMs of this
	// worker pool.
	// +optional
	IAMInstanceProfile *IAMInstanceProfile `json:"iamInstanceProfile,omitempty"`
	// InstanceMetadataOptions contains configuration for controlling access to the metadata API.
	InstanceMetadataOptions *InstanceMetadataOptions `json:"instanceMetadataOptions,omitempty"`
	// CpuOptions contains detailed configuration for the number of cores and threads for the instance.
	CpuOptions *CpuOptions `json:"cpuOptions,omitempty"`
}

type WorkerStatus struct {
	metav1.TypeMeta `json:",inline"`

	// MachineImages is a list of machine images that have been used in this worker. Usually, the extension controller
	// gets the mapping from name/version to the provider-specific machine image data in its componentconfig. However, if
	// a version that is still in use gets removed from this componentconfig it cannot reconcile anymore existing `Worker`
	// resources that are still using this version. Hence, it stores the used versions in the provider status to ensure
	// reconciliation is possible.
	// +optional
	MachineImages []MachineImage `json:"machineImages,omitempty"`
}

type WorkloadIdentityConfig struct {
	metav1.TypeMeta

	// RoleARN is the identifier of the role that the workload identity will assume.
	RoleARN string `json:"roleARN,omitempty"`
}

type Zone struct {
	// Name is the name for this zone.
	Name string `json:"name"`
	// Internal is the private subnet range to create (used for internal load balancers).
	Internal string `json:"internal"`
	// Public is the public subnet range to create (used for bastion and load balancers).
	Public string `json:"public"`
	// Workers is the workers subnet range to create (used for the VMs).
	Workers string `json:"workers"`
	// ElasticIPAllocationID contains the allocation ID of an Elastic IP that will be attached to the NAT gateway in
	// this zone (e.g., `eipalloc-123456`). If it's not provided then a new Elastic IP will be automatically created
	// and attached.
	// Important: If this field is changed then the already attached Elastic IP will be disassociated from the NAT gateway
	// (and potentially removed if it was created by this extension). Also, the NAT gateway will be deleted. This will
	// disrupt egress traffic for a while.
	// +optional
	ElasticIPAllocationID *string `json:"elasticIPAllocationID,omitempty"`
}