gcp

type AuthorizationMode string

type ConfidentialComputePolicy string

type DNS struct {
	// PrivateZone contains the information for a private DNS zone. The Private DNS Zone can
	// only be supplied during Shared VPC (XPN) installs. The PrivateZone can exist or be
	// created in a second service project; a project other than the one matching projectID
	// or networkProjectID.
	// +optional
	PrivateZone *DNSZone `json:"privateZone,omitempty"`
}

type DNSZone struct {
	// ProjectID is the project where the zone resides.
	// +optional
	ProjectID string `json:"projectID,omitempty"`

	// Name is the name of the dns-managed zone.
	Name string `json:"name"`
}

type DNSZoneParams struct {
	// Name is the name of the DNS zone. When provided, the name will be
	// used for the search. When empty any zone matching the other
	// parameters will be returned. Note that either `Name` or `BaseDomain`
	// must be provided.
	Name string

	// Project is the project of the DNS zone.
	Project string

	// IsPublic is true if the DNS zone is public.
	IsPublic bool

	// BaseDomain is the base domain of the DNS zone.
	// Note that either `Name` or `BaseDomain` must be provided.
	BaseDomain string

	// InstallerCreated is true when the DNS zone should be created
	// by the OpenShift Installer (and will be owned by the
	// OpenShift Installer).
	InstallerCreated bool
}

type EncryptionKeyReference struct {
	// KMSKey is a reference to a KMS Key to use for the encryption.
	//
	// +optional
	KMSKey *KMSKeyReference `json:"kmsKey,omitempty"`

	// KMSKeyServiceAccount is the service account being used for the
	// encryption request for the given KMS key. If absent, the Compute
	// Engine default service account is used.
	// See https://cloud.google.com/compute/docs/access/service-accounts#compute_engine_service_account
	// for details on the default service account.
	//
	// +optional
	KMSKeyServiceAccount string `json:"kmsKeyServiceAccount,omitempty"`
}

type FeatureSwitch string

type FirewallRulesManagementPolicy string

type KMSKeyReference struct {
	// Name is the name of the customer managed encryption key to be used for the disk encryption.
	Name string `json:"name"`

	// KeyRing is the name of the KMS Key Ring which the KMS Key belongs to.
	KeyRing string `json:"keyRing"`

	// ProjectID is the ID of the Project in which the KMS Key Ring exists.
	// Defaults to the VM ProjectID if not set.
	//
	// +optional
	ProjectID string `json:"projectID,omitempty"`

	// Location is the GCP location in which the Key Ring exists.
	Location string `json:"location"`
}

type MachinePool struct {
	// Zones is list of availability zones that can be used.
	//
	// +optional
	Zones []string `json:"zones,omitempty"`

	// InstanceType defines the GCP instance type.
	// eg. n1-standard-4
	//
	// +optional
	InstanceType string `json:"type"`

	// OSDisk defines the storage for instance.
	//
	// +optional
	OSDisk `json:"osDisk"`

	// OSImage defines a custom image for instance.
	//
	// +optional
	OSImage *OSImage `json:"osImage,omitempty"`

	// Tags defines a set of network tags which will be added to instances in the machineset
	//
	// +optional
	Tags []string `json:"tags,omitempty"`

	// SecureBoot Defines whether the instance should have secure boot enabled.
	// secure boot Verify the digital signature of all boot components, and halt the boot process if signature verification fails.
	// If omitted, the platform chooses a default, which is subject to change over time, currently that default is false.
	// +kubebuilder:validation:Enum=Enabled;Disabled
	// +optional
	SecureBoot string `json:"secureBoot,omitempty"`

	// OnHostMaintenance determines the behavior when a maintenance event occurs that might cause the instance to reboot.
	// Allowed values are "Migrate" and "Terminate".
	// If omitted, the platform chooses a default, which is subject to change over time, currently that default is "Migrate".
	// +kubebuilder:default="Migrate"
	// +default="Migrate"
	// +kubebuilder:validation:Enum=Migrate;Terminate;
	// +optional
	OnHostMaintenance string `json:"onHostMaintenance,omitempty"`

	// confidentialCompute is an optional field defining whether the instance should have
	// Confidential Computing enabled or not, and the Confidential Computing technology of choice.
	//     With Disabled, Confidential Computing is disabled.
	//     With Enabled, Confidential Computing is enabled with no preference on the
	// Confidential Computing technology. The platform chooses a default i.e. AMD SEV,
	// which is subject to change over time.
	//     With AMDEncryptedVirtualization, Confidential Computing is enabled with
	// AMD Secure Encrypted Virtualization (AMD SEV).
	//     With AMDEncryptedVirtualizationNestedPaging, Confidential Computing is
	// enabled with AMD Secure Encrypted Virtualization Secure Nested Paging
	// (AMD SEV-SNP).
	//     With IntelTrustedDomainExtensions, Confidential Computing is enabled with
	// Intel Trusted Domain Extensions (Intel TDX).
	//     If any value other than Disabled is set, a machine type and region that supports
	// Confidential Computing must be specified. Machine series and regions supporting
	// Confidential Computing technologies can be checked at
	// https://cloud.google.com/confidential-computing/confidential-vm/docs/supported-configurations#machine-type-cpu-zone
	//     If any value other than Disabled is set, onHostMaintenance is required to be set
	// to "Terminate".
	// +kubebuilder:default="Disabled"
	// +default="Disabled"
	// +kubebuilder:validation:Enum="";Enabled;Disabled;AMDEncryptedVirtualization;AMDEncryptedVirtualizationNestedPaging;IntelTrustedDomainExtensions
	// +optional
	ConfidentialCompute string `json:"confidentialCompute,omitempty"`

	// ServiceAccount is the email of a gcp service account to be used during installations.
	// The provided service account can be attached to both control-plane nodes
	// and worker nodes in order to provide the permissions required by the cloud provider.
	//
	// +optional
	ServiceAccount string `json:"serviceAccount,omitempty"`
}

type Metadata struct {
	Region                  string                        `json:"region"`
	ProjectID               string                        `json:"projectID"`
	NetworkProjectID        string                        `json:"networkProjectID,omitempty"`
	PrivateZoneDomain       string                        `json:"privateZoneDomain,omitempty"`
	PrivateZoneProjectID    string                        `json:"privateZoneProjectID,omitempty"`
	Endpoint                *PSCEndpoint                  `json:"endpoint,omitempty"`
	FirewallRulesManagement FirewallRulesManagementPolicy `json:"firewallRulesManagement,omitempty"`
}

type Metric struct {
	// Service is the Google Cloud Service to which this quota belongs (e.g. compute.googleapis.com)
	Service string `json:"service,omitempty"`
	// Limit is the name of the item that's limited (e.g. cpus)
	Limit string `json:"limit,omitempty"`
	// Dimensions are unique axes on which this Limit is applied (e.g. region: us-central-1)
	Dimensions map[string]string `json:"dimensions,omitempty"`
}

type OSDisk struct {
	// DiskType defines the type of disk.
	// For control plane nodes, the valid values are pd-balanced, pd-ssd, and hyperdisk-balanced.
	// +optional
	// +kubebuilder:validation:Enum=pd-balanced;pd-ssd;pd-standard;hyperdisk-balanced
	DiskType string `json:"diskType"`

	// DiskSizeGB defines the size of disk in GB.
	//
	// +kubebuilder:validation:Minimum=16
	// +kubebuilder:validation:Maximum=65536
	DiskSizeGB int64 `json:"DiskSizeGB"`

	// EncryptionKey defines the KMS key to be used to encrypt the disk.
	//
	// +optional
	EncryptionKey *EncryptionKeyReference `json:"encryptionKey,omitempty"`
}

type OSImage struct {
	// Name defines the name of the image.
	//
	// +required
	Name string `json:"name"`

	// Project defines the name of the project containing the image.
	//
	// +required
	Project string `json:"project"`
}

type OnHostMaintenanceType string

type PSCEndpoint struct {
	// Name contains the name of the private service connect endpoint.
	Name string `json:"name"`

	// ClusterUseOnly should be set to true when the installer should use
	// the public api endpoints and all cluster operators should use the
	// api endpoint overrides. The value should be false when the installer
	// and cluster operators should use the api endpoint overrides; that is,
	// the installer is being run in the same network as the cluster.
	// +optional
	ClusterUseOnly *bool `json:"clusterUseOnly,omitempty"`
}

type Platform struct {
	// ProjectID is the the project that will be used for the cluster.
	ProjectID string `json:"projectID"`

	// Region specifies the GCP region where the cluster will be created.
	Region string `json:"region"`

	// DefaultMachinePlatform is the default configuration used when
	// installing on GCP for machine pools which do not define their own
	// platform configuration.
	// +optional
	DefaultMachinePlatform *MachinePool `json:"defaultMachinePlatform,omitempty"`

	// Network specifies an existing VPC where the cluster should be created
	// rather than provisioning a new one.
	// +optional
	Network string `json:"network,omitempty"`

	// NetworkProjectID specifies which project the network and subnets exist in when
	// they are not in the main ProjectID.
	// +optional
	NetworkProjectID string `json:"networkProjectID,omitempty"`

	// ControlPlaneSubnet is an existing subnet where the control plane will be deployed.
	// The value should be the name of the subnet.
	// +optional
	ControlPlaneSubnet string `json:"controlPlaneSubnet,omitempty"`

	// ComputeSubnet is an existing subnet where the compute nodes will be deployed.
	// The value should be the name of the subnet.
	// +optional
	ComputeSubnet string `json:"computeSubnet,omitempty"`

	// userLabels has additional keys and values that the installer will add as
	// labels to all resources that it creates on GCP. Resources created by the
	// cluster itself may not include these labels.
	UserLabels []UserLabel `json:"userLabels,omitempty"`

	// userTags has additional keys and values that the installer will add as
	// tags to all resources that it creates on GCP. Resources created by the
	// cluster itself may not include these tags. Tag key and tag value should
	// be the shortnames of the tag key and tag value resource.
	UserTags []UserTag `json:"userTags,omitempty"`

	// UserProvisionedDNS indicates if the customer is providing their own DNS solution in place of the default
	// provisioned by the Installer.
	// +kubebuilder:default:="Disabled"
	// +default="Disabled"
	// +kubebuilder:validation:Enum="Enabled";"Disabled"
	UserProvisionedDNS dns.UserProvisionedDNS `json:"userProvisionedDNS,omitempty"`

	// Endpoint is the private service connect endpoint.
	// +optional
	Endpoint *PSCEndpoint `json:"endpoint,omitempty"`

	// DNS contains the dns zone information for the cluster. The DNS information can
	// only be supplied during Shared VPC (XPN) installs.
	// +optional
	DNS *DNS `json:"dns,omitempty"`

	// FirewallRulesManagement specifies the management policy for the cluster. "Managed" indicates that
	// the firewall rules will be created and destroyed by the cluster. "Unmanaged" indicates that the
	// user should create and destroy the firewall rules. For Shared VPC installation, if the installer
	// credential doesn't have firewall rules management permissions, the "firewallRulesManagement" settings
	// can be absent or set to "Unmanaged" explicitly. For non-Shared VPC installation, if the installer
	// credential doesn't have firewall rules management permissions, the "firewallRulesManagement" settings
	// must be set to "Unmanaged" explicitly. And in this case, the user needs to pre-configure the VPC network
	// and the firewall rules before the installation.
	// +optional
	FirewallRulesManagement FirewallRulesManagementPolicy `json:"firewallRulesManagement,omitempty"`
}

type Quota []QuotaUsage

type QuotaUsage struct {
	*Metric `json:",inline"`
	// Amount is the amount of the quota being used
	Amount int64 `json:"amount,omitempty"`
}

type UserLabel struct {
	// key is the key part of the label. A label key can have a maximum of 63 characters
	// and cannot be empty. Label must begin with a lowercase letter, and must contain
	// only lowercase letters, numeric characters, and the following special characters `_-`.
	Key string `json:"key"`

	// value is the value part of the label. A label value can have a maximum of 63 characters
	// and cannot be empty. Value must contain only lowercase letters, numeric characters, and
	// the following special characters `_-`.
	Value string `json:"value"`
}

type UserTag struct {
	// parentID is the ID of the hierarchical resource where the tags are defined,
	// e.g. at the Organization or the Project level. To find the Organization ID or Project ID refer to the following pages:
	// https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id,
	// https://cloud.google.com/resource-manager/docs/creating-managing-projects#identifying_projects.
	// An OrganizationID must consist of decimal numbers, and cannot have leading zeroes.
	// A ProjectID must be 6 to 30 characters in length, can only contain lowercase letters,
	// numbers, and hyphens, and must start with a letter, and cannot end with a hyphen.
	ParentID string `json:"parentID"`

	// key is the key part of the tag. A tag key can have a maximum of 63 characters and
	// cannot be empty. Tag key must begin and end with an alphanumeric character, and
	// must contain only uppercase, lowercase alphanumeric characters, and the following
	// special characters `._-`.
	Key string `json:"key"`

	// value is the value part of the tag. A tag value can have a maximum of 63 characters
	// and cannot be empty. Tag value must begin and end with an alphanumeric character, and
	// must contain only uppercase, lowercase alphanumeric characters, and the following
	// special characters `_-.@%=+:,*#&(){}[]` and spaces.
	Value string `json:"value"`
}