v1beta1

type MCPConfig struct {
	// Enabled controls whether the MCP server sidecar is added to the pod.
	// +kubebuilder:default=false
	Enabled bool `json:"enabled,omitempty"`
}

type OpenStackClient struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   OpenStackClientSpec   `json:"spec,omitempty"`
	Status OpenStackClientStatus `json:"status,omitempty"`
}

type OpenStackClientDefaults struct {
	ContainerImageURL string
}

type OpenStackClientList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []OpenStackClient `json:"items"`
}

type OpenStackClientSpec struct {
	OpenStackClientSpecCore `json:",inline"`

	// +kubebuilder:validation:Required
	// ContainerImage for the OpenstackClient container (will be set to environmental default if empty)
	ContainerImage string `json:"containerImage"`

	// +kubebuilder:validation:Optional
	// MCPContainerImage for the MCP server sidecar container (set via OpenStackVersion)
	MCPContainerImage string `json:"mcpContainerImage,omitempty"`

	// +kubebuilder:validation:Optional
	// MCPCertSecretName is the name of the TLS certificate Secret for the MCP
	// server sidecar. It is populated by the OpenStackControlPlane, which owns
	// the cert lifecycle; the OpenStackClient controller only consumes it.
	MCPCertSecretName string `json:"mcpCertSecretName,omitempty"`
}

type OpenStackClientSpecCore struct {
	// +kubebuilder:validation:Required
	// +kubebuilder:default=openstack-config
	// OpenStackConfigMap is the name of the ConfigMap containing the clouds.yaml
	OpenStackConfigMap *string `json:"openStackConfigMap"`

	// +kubebuilder:validation:Required
	// +kubebuilder:default=openstack-config-secret
	// OpenStackConfigSecret is the name of the Secret containing the secure.yaml
	OpenStackConfigSecret *string `json:"openStackConfigSecret"`

	// +kubebuilder:validation:Optional
	// NodeSelector to target subset of worker nodes
	NodeSelector *map[string]string `json:"nodeSelector,omitempty"`

	// +kubebuilder:validation:Optional
	// +operator-sdk:csv:customresourcedefinitions:type=spec
	// Secret containing any CA certificates which should be added to deployment pods
	tls.Ca `json:",inline"`

	// +kubebuilder:validation:Optional
	// +operator-sdk:csv:customresourcedefinitions:type=spec
	// +patchMergeKey=name
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=name
	// +optional
	// List of environment variables to set in the container.
	Env []corev1.EnvVar `json:"env,omitempty" patchMergeKey:"name" patchStrategy:"merge"`

	// MCP is the optional MCP server sidecar configuration.
	// When enabled, the rhos-mcps server runs alongside the openstackclient
	// container and is exposed via a k8s Service. Typically used by OpenStackAssistant.
	// +kubebuilder:validation:Optional
	MCP *MCPConfig `json:"mcp,omitempty"`
}

type OpenStackClientStatus struct {
	// PodName
	PodName string `json:"podName,omitempty"`

	// Conditions
	Conditions condition.Conditions `json:"conditions,omitempty" optional:"true"`

	//ObservedGeneration - the most recent generation observed for this object.
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

	// Map of hashes to track e.g. pod spec
	Hash map[string]string `json:"hash,omitempty"`

	// MCPEndpoint is the URL of the MCP server when the sidecar is enabled.
	MCPEndpoint string `json:"mcpEndpoint,omitempty"`
}