cluster

type AWSCredentials struct {
	AccountID       string
	AccessKeyID     string
	SecretAccessKey string
}

type AddOnItem struct {
	ID        string
	Name      string
	State     string
	Available bool
}

type Autoscaling struct {
	Enabled     bool
	MinReplicas int
	MaxReplicas int
}

type CCS struct {
	Enabled bool
	AWS     AWSCredentials
	GCP     GCPCredentials
}

type ClusterWideProxy struct {
	Enabled                   bool
	HTTPProxy                 *string
	HTTPSProxy                *string
	NoProxy                   *string
	AdditionalTrustBundleFile *string
	AdditionalTrustBundle     *string
}

type DNS struct {
	Enabled   bool
	DnsZoneId string
}

type DefaultIngressSpec struct {
	RouteSelectors             map[string]string
	ExcludedNamespaces         []string
	ExcludedNamespaceSelectors map[string][]string
	WildcardPolicy             string
	NamespaceOwnershipPolicy   string
}

type ExistingVPC struct {
	Enabled                                bool
	SubnetIDs                              string
	AvailabilityZones                      []string
	VPCName                                string
	VPCProjectID                           string
	ControlPlaneSubnet                     string
	ComputeSubnet                          string
	AdditionalComputeSecurityGroupIds      []string
	AdditionalInfraSecurityGroupIds        []string
	AdditionalControlPlaneSecurityGroupIds []string
}

type GCPCredentials struct {
	Type                    string `json:"type"`
	ProjectID               string `json:"project_id"`
	PrivateKeyID            string `json:"private_key_id"`
	PrivateKey              string `json:"private_key"`
	ClientEmail             string `json:"client_email"`
	ClientID                string `json:"client_id"`
	AuthURI                 string `json:"auth_uri"`
	TokenURI                string `json:"token_uri"`
	AuthProviderX509CertURL string `json:"auth_provider_x509_cert_url"`
	ClientX509CertURL       string `json:"client_x509_cert_url"`
}

type GcpAuthentication struct {
	Type string
	Id   string
}

type GcpEncryption struct {
	KmsKeySvcAccount string
	KmsKeyLocation   string
	KmsKeyRing       string
	KmsKeyName       string
}

type GcpPrivateSvcConnect struct {
	SvcAttachmentSubnet string
}

type GcpSecurity struct {
	SecureBoot bool `json:"secure_boot,omitempty"`
}

type Spec struct {
	// Basic configs
	Name             string
	DomainPrefix     string
	Region           string
	Provider         string
	CCS              CCS
	ExistingVPC      ExistingVPC
	ClusterWideProxy ClusterWideProxy
	Flavour          string
	MultiAZ          bool
	Version          string
	// Channel is the Y-stream update channel (e.g., "stable-4.19", "candidate-4.19").
	// This field allows specifying the update channel independently from the version.
	Channel          string
	ChannelGroup     string
	Expiration       time.Time
	Fips             bool
	EtcdEncryption   bool
	SubscriptionType string

	// Scaling config
	ComputeMachineType string
	ComputeNodes       int
	Autoscaling        Autoscaling
	RootDiskSize       int

	// Network config
	NetworkType string
	MachineCIDR net.IPNet
	ServiceCIDR net.IPNet
	PodCIDR     net.IPNet
	HostPrefix  int
	Private     *bool

	// Properties
	CustomProperties map[string]string

	// Default Ingress Attributes
	DefaultIngress DefaultIngressSpec

	// Gcp-specific settings
	GcpSecurity GcpSecurity

	// GCP Authentication settings
	GcpAuthentication GcpAuthentication

	// GCP PrivateServiceConnect settings
	GcpPrivateSvcConnect GcpPrivateSvcConnect

	//Includes Custom KMS encryption key settings
	GcpEncryption GcpEncryption

	// DNS settings
	DNS DNS
}