certgraphapi

type AnnotationValue struct {
	// Key is the annotation key from the resource
	Key string `json:"key"`
	// Value is the annotation value from the resource
	Value string `json:"value"`
}

type CertIdentifier struct {
	CommonName    string
	SerialNumber  string
	PubkeyModulus string

	Issuer *CertIdentifier
}

type CertKeyMetadata struct {
	CertIdentifier     CertIdentifier
	SignatureAlgorithm string
	PublicKeyAlgorithm string
	PublicKeyBitSize   string
	NotBefore          string `json:"-"`
	NotAfter           string `json:"-"`
	ValidityDuration   string
	Usages             []string
	ExtendedUsages     []string
}

type CertKeyPair struct {
	// LogicalName is an inexact representation of what this is for.  It may be empty.  It will usually be some hardcoded
	// heuristic trying to determine it.
	LogicalName string

	Description string

	// Name is CommonName::SerialNumber
	Name string

	Spec   CertKeyPairSpec
	Status CertKeyPairStatus
}

type CertKeyPairDetails struct {
	CertType string

	SignerDetails      *SignerCertDetails
	ServingCertDetails *ServingCertDetails
	ClientCertDetails  *ClientCertDetails
}

type CertKeyPairList struct {
	Items []CertKeyPair
}

type CertKeyPairSpec struct {
	SecretLocations []InClusterSecretLocation
	OnDiskLocations []OnDiskCertKeyPairLocation

	CertMetadata CertKeyMetadata
	Details      CertKeyPairDetails
}

type CertKeyPairStatus struct {
	Errors []string
}

type CertificateAuthorityBundle struct {
	// LogicalName is an inexact representation of what this is for.  It may be empty.  It will usually be some hardcoded
	// heuristic trying to determine it.
	LogicalName string

	Description string

	// Name is CommonName::SerialNumber
	Name string

	Spec   CertificateAuthorityBundleSpec
	Status CertificateAuthorityBundleStatus
}

type CertificateAuthorityBundleList struct {
	Items []CertificateAuthorityBundle
}

type CertificateAuthorityBundleSpec struct {
	ConfigMapLocations []InClusterConfigMapLocation
	OnDiskLocations    []OnDiskLocation

	CertificateMetadata []CertKeyMetadata
}

type CertificateAuthorityBundleStatus struct {
	Errors []string
}

type ClientCertDetails struct {
	Organizations []string
}

type ConfigMapInfoByNamespaceName map[InClusterConfigMapLocation]PKIRegistryCertificateAuthorityInfo

type ConfigMapRefByNamespaceName []InClusterConfigMapLocation

type InClusterConfigMapLocation struct {
	Namespace string
	Name      string
}

type InClusterSecretLocation struct {
	Namespace string
	Name      string
}

type OnDiskCertKeyPairLocation struct {
	Cert OnDiskLocation
	Key  OnDiskLocation
}

type OnDiskLocation struct {
	Path string
}

type OnDiskLocationWithMetadata struct {
	OnDiskLocation

	User           string
	Group          string
	Permissions    string
	SELinuxOptions string
}

type PKIList struct {
	// LogicalName is an inexact representation of what this is for.  It may be empty.  It will usually be some hardcoded
	// heuristic trying to find it.
	LogicalName string

	Description string

	InClusterResourceData PerInClusterResourceData
	OnDiskResourceData    PerOnDiskResourceData

	CertificateAuthorityBundles CertificateAuthorityBundleList
	CertKeyPairs                CertKeyPairList
}

type PKIRegistryCABundle struct {
	InClusterLocation *PKIRegistryInClusterCABundle
	OnDiskLocation    *PKIRegistryOnDiskCABundle
}

type PKIRegistryCertKeyPair struct {
	InClusterLocation *PKIRegistryInClusterCertKeyPair
	OnDiskLocation    *PKIRegistryOnDiskCertKeyPair
}

type PKIRegistryCertKeyPairInfo struct {
	// SelectedCertMetadataAnnotations is a specified subset of annotations. NOT all annotations.
	// The caller will specify which annotations he wants.
	SelectedCertMetadataAnnotations []AnnotationValue `json:"selectedCertMetadataAnnotations,omitempty"`

	// OwningJiraComponent is a component name when a new OCP issue is filed in Jira
	// Deprecated
	OwningJiraComponent string `json:"owningJiraComponent"`
	// Description is a one sentence description of the certificate pair purpose
	// Deprecated
	Description string `json:"description"`
}

type PKIRegistryCertificateAuthorityInfo struct {
	// SelectedCertMetadataAnnotations is a specified subset of annotations. NOT all annotations.
	// The caller will specify which annotations he wants.
	SelectedCertMetadataAnnotations []AnnotationValue `json:"selectedCertMetadataAnnotations,omitempty"`

	// OwningJiraComponent is a component name when a new OCP issue is filed in Jira
	// Deprecated
	OwningJiraComponent string `json:"owningJiraComponent"`
	// Description is a one sentence description of the certificate pair purpose
	// Deprecated
	Description string `json:"description"`
}

type PKIRegistryInClusterCABundle struct {
	// ConfigMapLocation points to the configmap location
	ConfigMapLocation InClusterConfigMapLocation `json:"configMapLocation"`
	// CABundleInfo stores metadata for the certificate authority bundle
	CABundleInfo PKIRegistryCertificateAuthorityInfo `json:"certificateAuthorityBundleInfo"`
}

type PKIRegistryInClusterCertKeyPair struct {
	// SecretLocation points to the secret location
	SecretLocation InClusterSecretLocation `json:"secretLocation"`
	// CertKeyInfo stores metadata for certificate key pair
	CertKeyInfo PKIRegistryCertKeyPairInfo `json:"certKeyInfo"`
}

type PKIRegistryOnDiskCABundle struct {
	// OnDiskLocation points to the ca bundle location on disk
	OnDiskLocation OnDiskLocation `json:"onDiskLocation"`
	// CABundleInfo stores metadata for the certificate authority bundle
	CABundleInfo PKIRegistryCertificateAuthorityInfo `json:"certificateAuthorityBundleInfo"`
}

type PKIRegistryOnDiskCertKeyPair struct {
	// OnDiskLocation points to the certkeypair location on disk
	OnDiskLocation OnDiskLocation `json:"onDiskLocation"`
	// CertKeyInfo stores metadata for certificate key pair
	CertKeyInfo PKIRegistryCertKeyPairInfo `json:"certKeyInfo"`
}

type PerInClusterResourceData struct {
	// +mapType:=atomic
	CertificateAuthorityBundles []PKIRegistryInClusterCABundle `json:"certificateAuthorityBundles"`
	// +mapType:=atomic
	CertKeyPairs []PKIRegistryInClusterCertKeyPair `json:"certKeyPairs"`
}

type PerOnDiskResourceData struct {
	// +mapType:=atomic
	TLSArtifact []OnDiskLocationWithMetadata `json:"tlsArtifact"`
}

type SecretInfoByNamespaceName map[InClusterSecretLocation]PKIRegistryCertKeyPairInfo

type SecretRefByNamespaceName []InClusterSecretLocation

type ServingCertDetails struct {
	DNSNames    []string
	IPAddresses []string
}

type SignerCertDetails struct {
}