v1alpha1

type ChartSource struct {
	// ChartName specifies the name of the chart.
	// Can be omitted for oci sources, required for git and helm sources.
	// For git sources, this is the path within the git repository to the chart.
	// For helm sources, append the version to the chart name using '@', e.g. 'external-dns@1.10.0' or omit for latest version.
	// +optional
	ChartName string                     `json:"chartName"`
	Helm      *fluxv1.HelmRepositorySpec `json:"helm,omitempty"`
	Git       *fluxv1.GitRepositorySpec  `json:"git,omitempty"`
	OCI       *fluxv1.OCIRepositorySpec  `json:"oci,omitempty"`
}

type HelmDeployerConfig struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec HelmDeployerConfigSpec `json:"spec,omitempty"`
}

type HelmDeployerConfigList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []HelmDeployerConfig `json:"items"`
}

type HelmDeployerConfigSpec struct {
	// HelmReleaseReconciliationIntervals specifies the reconciliation intervals for the HelmReleases deployed by the operator.
	// +optional
	HelmReleaseReconciliationIntervals HelmReleaseReconciliationIntervalConfig `json:"helmReleaseReconciliationIntervals"`

	// SelectorDefinitions is a list of selector definitions that can be referenced from HelmDeployments.
	// +optional
	SelectorDefinitions map[string]SelectorDefinition `json:"selectorDefinitions,omitempty"`
}

type HelmDeployment struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   HelmDeploymentSpec   `json:"spec,omitempty"`
	Status HelmDeploymentStatus `json:"status,omitempty"`
}

type HelmDeploymentList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []HelmDeployment `json:"items"`
}

type HelmDeploymentSpec struct {
	// ChartSource is the source of the helm chart.
	ChartSource ChartSource `json:"chartSource"`

	// Selector can select based on identity, purposes and/or labels of a Cluster.
	// It can also reference a selector definition from the provider config.
	// An empty selector matches all Clusters.
	// +optional
	Selector *SelectorOrReference `json:"selector,omitempty"`

	// SecretsToCopy defines which secrets should be copied for this HelmDeployment.
	// This is in addition to any secrets to copy specified in a referenced selector definition in the provider config.
	// If there are overlapping definitions, the secrets specified here take precedence.
	// Opposed to secret references in the provider config, references here refer to secrets in the same namespace as the HelmDeployment.
	// TO BE REFACTORED: We want to move secret copying logic into its own controller at some point.
	// +optional
	SecretsToCopy *SecretsToCopy `json:"secretsToCopy,omitempty"`

	// Namespace is the namespace on the target cluster to use for the helm deployment.
	// If secrets are copied onto the target cluster, they will be copied into this namespace.
	// +kubebuilder:validation:Pattern=`^[a-z0-9]([-a-z0-9]*[a-z0-9])?$`
	Namespace string `json:"namespace"`

	// HelmValues are the helm values to deploy the chart with.
	// There are a few special strings which will be replaced before creating the HelmRelease:
	// - <provider.name> will be replaced with the provider name resource.
	// - <provider.namespace> will be replaced with the namespace that hosts the platform service.
	// - <environment> will be replaced with the environment name of the operator.
	// - <helm.name> will be replaced with the name of the HelmDeployment.
	// - <helm.namespace> will be replaced with the namespace of the HelmDeployment.
	// - <cluster.name> will be replaced with the name of the reconciled Cluster.
	// - <cluster.namespace> will be replaced with the namespace of the reconciled Cluster.
	// +kubebuilder:validation:Type=object
	// +kubebuilder:validation:Schemaless
	// +kubebuilder:pruning:PreserveUnknownFields
	// +optional
	HelmValues *apiextensionsv1.JSON `json:"helmValues,omitempty"`

	// Interval at which to reconcile the Helm release.
	// It can be used to overwrite the default reconciliation interval specified in the provider config.
	// Inherited from HelmRelease spec.
	// +kubebuilder:validation:Type=string
	// +kubebuilder:validation:Pattern="^([0-9]+(\\.[0-9]+)?(ms|s|m|h))+$"
	// +optional
	Interval *metav1.Duration `json:"interval,omitempty"`

	// ReleaseName used for the Helm release.
	// Defaults to <namespace>--<name>--<hash> (shortened to 63 characters) if not set.
	// Inherited from HelmRelease spec.
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=53
	// +optional
	ReleaseName string `json:"releaseName,omitempty"`

	// Timeout to set for the HelmRelease.
	// Flux defaults this to 5 minutes, if not overwritten here.
	// Inherited from HelmRelease spec.
	// +kubebuilder:validation:Type=string
	// +kubebuilder:validation:Pattern="^([0-9]+(\\.[0-9]+)?(ms|s|m|h))+$"
	// +optional
	Timeout *metav1.Duration `json:"timeout,omitempty"`

	// Install allows to overwrite the default install options for the HelmRelease.
	// Inherited from HelmRelease spec.
	// +optional
	Install *fluxhelmv2.Install `json:"install,omitempty"`

	// Upgrade allows to overwrite the default upgrade options for the HelmRelease.
	// Inherited from HelmRelease spec.
	// +optional
	Upgrade *fluxhelmv2.Upgrade `json:"upgrade,omitempty"`

	// Test allows to overwrite the default test options for the HelmRelease.
	// Inherited from HelmRelease spec.
	// +optional
	Test *fluxhelmv2.Test `json:"test,omitempty"`

	// Rollback allows to overwrite the default rollback options for the HelmRelease.
	// Inherited from HelmRelease spec.
	// +optional
	Rollback *fluxhelmv2.Rollback `json:"rollback,omitempty"`

	// Uninstall allows to overwrite the default uninstall options for the HelmRelease.
	// Inherited from HelmRelease spec.
	// +optional
	Uninstall *fluxhelmv2.Uninstall `json:"uninstall,omitempty"`

	// CommonMetadata allows to specify common metadata for the HelmRelease, e.g. labels and annotations.
	// Inherited from HelmRelease spec.
	// +optional
	CommonMetadata *fluxhelmv2.CommonMetadata `json:"commonMetadata,omitempty"`

	// WaitStrategy allows to specify the HelmRelease's wait strategy.
	// Inherited from HelmRelease spec.
	// +optional
	WaitStrategy *fluxhelmv2.WaitStrategy `json:"waitStrategy,omitempty"`

	// HealthCheckExprs allows to specify custom health checks for the HelmRelease.
	// Inherited from HelmRelease spec.
	// +optional
	HealthCheckExprs []kustomize.CustomHealthCheck `json:"healthCheckExprs,omitempty"`
}

type HelmDeploymentStatus struct {
	commonapi.Status `json:",inline"`
}

type HelmReleaseReconciliationIntervalConfig struct {
	// Default is the default interval in which flux reconciles the HelmRelease resource.
	// It applies whenever no specific interval is defined.
	// The default is 1h.
	// +optional
	Default *metav1.Duration `json:"default,omitempty"`

	// Helm is the reconciliation interval for HelmReleases which use a helm repository as source.
	// If not set, the default interval will be used.
	// +optional
	Helm *metav1.Duration `json:"helm,omitempty"`

	// Git is the reconciliation interval for HelmReleases which use a git repository as source.
	// If not set, the default interval will be used.
	// +optional
	Git *metav1.Duration `json:"git,omitempty"`

	// OCI is the reconciliation interval for HelmReleases which use an OCI repository as source.
	// If not set, the default interval will be used.
	// +optional
	OCI *metav1.Duration `json:"oci,omitempty"`
}

type SecretCopy struct {
	// Source references the source secret to copy.
	// It has to be in the namespace the provider pod is running in.
	Source commonapi.LocalObjectReference `json:"source"`
	// Target is the name of the copied secret.
	// If not set, the secret will be copied with the same name as the source secret.
	// +optional
	Target *commonapi.LocalObjectReference `json:"target"`
}

type SecretsToCopy struct {
	// ToPlatformCluster lists secrets from the provider namespace that should be copied into the cluster's namespace on the platform cluster.
	// This is useful e.g. for pull secrets for the helm chart registry.
	// +optional
	ToPlatformCluster []SecretCopy `json:"toPlatformCluster,omitempty"`
	// ToTargetCluster lists secrets from the provider namespace that should be copied onto the target cluster.
	// The secrets will end up in the namespace that is defined in the HelmDeployment's spec.
	// This allows propagating secrets that are required by the helm chart to the target cluster.
	// +optional
	ToTargetCluster []SecretCopy `json:"toTargetCluster,omitempty"`
}

type SelectorDefinition struct {
	*clustersv1alpha1.IdentityLabelPurposeSelector `json:",inline"`

	// SecretsToCopy defines which secrets should be copied when this selector is used for a HelmDeployment.
	// References here refer to secrets in the provider namespace.
	// TO BE REFACTORED: We want to move secret copying logic into its own controller at some point.
	// +optional
	SecretsToCopy *SecretsToCopy `json:"secretsToCopy,omitempty"`
}

type SelectorOrReference struct {
	*clustersv1alpha1.IdentityLabelPurposeSelector `json:",inline"`

	// Reference can be used to reference a selector defined in the provider config.
	// If set together with the inline selector, the inline selector takes precedence and the reference is ignored.
	// +optional
	Reference *string `json:"ref,omitempty"`
}