v1alpha1

type DNSServiceConfig struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec DNSServiceConfigSpec `json:"spec,omitempty"`
}

type DNSServiceConfigList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []DNSServiceConfig `json:"items"`
}

type DNSServiceConfigSpec struct {
	// ExternalDNSSource is the source of the external-dns helm chart.
	ExternalDNSSource ExternalDNSSource `json:"externalDNSSource"`

	// SecretsToCopy specifies secrets that should be copied to either the cluster's namespace on the platform cluster,
	// or the namespace on the target cluster where the helm chart will be installed into.
	// +optional
	SecretsToCopy *SecretsToCopy `json:"secretsToCopy,omitempty"`

	// HelmReleaseReconciliationInterval is the interval at which the HelmRelease for external-dns is reconciled.
	// The value can be overwritten for specific purposes using ExternalDNSForPurposes.
	// If not set, a default of 1h is used.
	// +optional
	HelmReleaseReconciliationInterval *metav1.Duration `json:"helmReleaseReconciliationInterval,omitempty"`

	// ExternalDNSForPurposes is a list of DNS configurations in combination with purpose selectors.
	// The first matching purpose selector will be applied to the Cluster.
	// If no selector matches, no configuration will be applied.
	// +optional
	ExternalDNSForPurposes []ExternalDNSPurposeConfig `json:"externalDNSForPurposes,omitempty"`
}

type ExternalDNSPurposeConfig struct {
	// Name is an optional name.
	// It can be set to more easily identify the configuration in logs and events.
	// +optional
	Name string `json:"name,omitempty"`

	// PurposeSelector is a selector to match against the list of purposes of a Cluster.
	// If not set, all Clusters are matched.
	// +optional
	PurposeSelector *PurposeSelector `json:"purposeSelector,omitempty"`

	// HelmReleaseReconciliationInterval is the interval at which the HelmRelease for external-dns is reconciled.
	// If not set, the global HelmReleaseReconciliationInterval is used.
	// +optional
	HelmReleaseReconciliationInterval *metav1.Duration `json:"helmReleaseReconciliationInterval,omitempty"`

	// HelmValues are the helm values to deploy external-dns with, if the purpose selector matches.
	// There are a few special strings which will be replaced before creating the HelmRelease:
	// - <provider.name> will be replaced with the provider name resource.
	// - <provider.namespace> will be replaced with the namespace that hosts the platform service.
	// - <environment> will be replaced with the environment name of the operator.
	// - <cluster.name> will be replaced with the name of the reconciled Cluster.
	// - <cluster.namespace> will be replaced with the namespace of the reconciled Cluster.
	// +kubebuilder:validation:Type=object
	// +kubebuilder:validation:Schemaless
	// +kubebuilder:pruning:PreserveUnknownFields
	HelmValues *apiextensionsv1.JSON `json:"helmValues"`
}

type ExternalDNSSource struct {
	// ChartName specifies the name of the external-dns chart.
	// Can be omitted for oci sources, required for git and helm sources.
	// For git sources, this is the path within the git repository to the chart.
	// For helm sources, append the version to the chart name using '@', e.g. 'external-dns@1.10.0' or omit for latest version.
	// +optional
	ChartName string                     `json:"chartName"`
	Helm      *fluxv1.HelmRepositorySpec `json:"helm,omitempty"`
	Git       *fluxv1.GitRepositorySpec  `json:"git,omitempty"`
	OCI       *fluxv1.OCIRepositorySpec  `json:"oci,omitempty"`
}

type PurposeSelector struct {
	PurposeSelectorRequirement `json:",inline"`
}

type PurposeSelectorRequirement struct {
	// +kubebuilder:validation:items:Type=object
	// +optional
	And []PurposeSelectorRequirement `json:"and,omitempty"`
	// +kubebuilder:validation:items:Type=object
	// +optional
	Or []PurposeSelectorRequirement `json:"or,omitempty"`
	// +kubebuilder:validation:Type=object
	// +optional
	Not *PurposeSelectorRequirement `json:"not,omitempty"`
	// +optional
	Name string `json:"name,omitempty"`
}

type SecretCopy struct {
	// Source references the source secret to copy.
	// It has to be in the namespace the provider pod is running in.
	Source commonapi.LocalObjectReference `json:"source"`
	// Target is the name of the copied secret.
	// If not set, the secret will be copied with the same name as the source secret.
	// +optional
	Target *commonapi.LocalObjectReference `json:"target"`
}

type SecretsToCopy struct {
	// ToPlatformCluster lists secrets from the provider namespace that should be copied into the cluster's namespace on the platform cluster.
	// This is useful e.g. for pull secrets for the helm chart registry.
	// +optional
	ToPlatformCluster []SecretCopy `json:"toPlatformCluster,omitempty"`
	// ToTargetCluster lists secrets from the provider namespace that should be copied into the cluster's namespace on the target cluster.
	// This allows propagating secrets that are required by the helm chart to the target cluster.
	// +optional
	ToTargetCluster []SecretCopy `json:"toTargetCluster,omitempty"`
}