clusterconfig

type ACME struct {
	Server string `json:"server,omitempty"`
	Email  string `json:"email"`
}

type Cluster struct {
	ID         string          `json:"id"`
	Name       string          `json:"name"`
	OIDC       OIDC            `json:"oidc"`
	ACME       *ACME           `json:"acme,omitempty"`
	Domains    []Domain        `json:"domains,omitempty"`
	Registry   Registry        `json:"registry,omitempty"`
	Pools      map[string]Pool `json:"pools,omitempty"`
	Providers  []Provider      `json:"providers,omitempty"`
	Secrets    Secrets         `json:"secrets,omitempty"`
	Kubernetes Kubernetes      `json:"kubernetes"`
	Seed       Seed            `json:"seed,omitempty"`
	Components Components      `json:"components,omitempty"`
}

type ClusterConfig struct {
	Schema  string  `json:"$schema,omitempty"`
	Cluster Cluster `json:"cluster"`
}

type Components struct {
	Source   *ComponentsSource   `json:"source,omitempty"`
	Registry *ComponentsRegistry `json:"registry,omitempty"`
}

type ComponentsRegistry struct {
	Mirror ComponentsRegistryMirror `json:"mirror,omitempty"`
}

type ComponentsRegistryMirror struct {
	Enabled  bool   `json:"enabled,omitempty"`
	Hostname string `json:"hostname,omitempty"`
	Prefix   string `json:"prefix,omitempty"`
}

type ComponentsSource struct {
	URL       string                     `json:"url"`
	Ref       ComponentsSourceRef        `json:"ref,omitempty"`
	SecretRef *ComponentsSourceSecretRef `json:"secretRef,omitempty"`
}

type ComponentsSourceRef struct {
	Branch string `json:"branch,omitempty"`
	Tag    string `json:"tag,omitempty"`
	Semver string `json:"semver,omitempty"`
	Commit string `json:"commit,omitempty"`
}

type ComponentsSourceSecretRef struct {
	Name string `json:"name"`
}

type Domain struct {
	Zone         string          `json:"zone"`
	Provider     *DomainProvider `json:"provider,omitempty"`
	LoadBalancer string          `json:"load_balancer,omitempty"`
}

type DomainProvider struct {
	Kind                    string `json:"kind"`
	Account                 string `json:"account,omitempty"`
	Profile                 string `json:"profile,omitempty"`
	Region                  string `json:"region,omitempty"`
	HostedZoneID            string `json:"hosted_zone_id,omitempty"`
	RoleARN                 string `json:"role_arn,omitempty"`
	SecretProviderClassName string `json:"secret_provider_class_name,omitempty"`
	SecretName              string `json:"secret_name,omitempty"`
	SecretKey               string `json:"secret_key,omitempty"`
	Project                 string `json:"project,omitempty"`
	HostedZoneName          string `json:"hosted_zone_name,omitempty"`
}

type Kubernetes struct {
	APIHostname     string   `json:"api_hostname"`
	APIPort         int      `json:"api_port,omitempty"`
	APILoadBalancer string   `json:"api_load_balancer,omitempty"`
	ClusterCIDR     []string `json:"cluster_cidr,omitempty"`
	ServiceCIDR     []string `json:"service_cidr,omitempty"`
}

type Listener struct {
	Port       int    `json:"port"`
	TargetPort int    `json:"target_port,omitempty"`
	Pool       string `json:"pool"`
}

type LoadBalancer struct {
	Public    bool       `json:"public"`
	Subnets   string     `json:"subnets"`
	Listeners []Listener `json:"listeners"`
}

type OIDC struct {
	IssuerURL     string   `json:"issuer_url"`
	ClientID      string   `json:"client_id,omitempty"`
	UsernameClaim string   `json:"username_claim,omitempty"`
	GroupsClaim   string   `json:"groups_claim,omitempty"`
	SigningAlgs   []string `json:"signing_algs,omitempty"`
	// CACert may be: an inline PEM (string starts with "-----BEGIN"), an
	// http(s):// URL, or a path on disk.
	CACert string `json:"ca_cert,omitempty"`
}

type Pool struct {
	Arch         string `json:"arch"`
	InstanceType string `json:"instance_type"`
	Size         int    `json:"size"`
	DiskSize     int    `json:"disk_size,omitempty"`
}

type Provider struct {
	Kind          string                  `json:"kind"`
	Region        string                  `json:"region,omitempty"`
	Account       string                  `json:"account,omitempty"`
	Profile       string                  `json:"profile,omitempty"`
	Project       string                  `json:"project,omitempty"`
	Tags          map[string]string       `json:"tags,omitempty"`
	VPC           VPC                     `json:"vpc"`
	Zones         map[string][]Subnet     `json:"zones,omitempty"`
	LoadBalancers map[string]LoadBalancer `json:"load_balancers,omitempty"`
	Buckets       []string                `json:"buckets,omitempty"`
	Roles         map[string]Role         `json:"roles,omitempty"`
}

type Registry struct {
	Hostname string          `json:"hostname,omitempty"`
	Ingress  RegistryIngress `json:"ingress,omitempty"`
}

type RegistryIngress struct {
	Enabled bool `json:"enabled,omitempty"`
}

type Role struct {
	Buckets     []string `json:"buckets"`
	Permissions string   `json:"permissions,omitempty"`
}

type Secrets struct {
	DefaultProvider string                     `json:"default_provider,omitempty"`
	Providers       map[string]SecretsProvider `json:"providers,omitempty"`
}

type SecretsProvider struct {
	Kind string `json:"kind"`

	// KeyPrefix partitions backend keys for this provider. Defaults to the
	// cluster ID when omitted.
	KeyPrefix string `json:"key_prefix,omitempty"`

	// AWS ObjectType is the Secrets Store CSI AWS objectType value, such as
	// "secretsmanager" or "ssmparameter".
	ObjectType string `json:"object_type,omitempty"`
	Region     string `json:"region,omitempty"`

	// GCP fields.
	ProjectID string `json:"project_id,omitempty"`
	Location  string `json:"location,omitempty"`

	// Vault/OpenBao fields for operator/runtime configuration. These
	// fields are not persisted in cached cluster summaries.
	Address      string `json:"address,omitempty"`
	MountPath    string `json:"mount_path,omitempty"`
	CACert       string `json:"ca_cert,omitempty"`
	AuthPath     string `json:"auth_path,omitempty"`
	OperatorRole string `json:"operator_role,omitempty"`
}

type Seed struct {
	Name    string `json:"name,omitempty"`
	Version string `json:"version,omitempty"`
	Digest  string `json:"digest,omitempty"`
}

type ServiceNetwork struct {
	CIDRs   []string
	API     []netip.Addr
	CoreDNS []netip.Addr
}

type Subnet struct {
	Pool     string   `json:"pool,omitempty"`
	Services []string `json:"services,omitempty"`
	Public   bool     `json:"public,omitempty"`
	ID       string   `json:"id,omitempty"`
	V4CIDR   string   `json:"v4cidr,omitempty"`
	V6CIDR   string   `json:"v6cidr,omitempty"`
}

type VPC struct {
	ID     string `json:"id,omitempty"`
	V4CIDR string `json:"v4cidr,omitempty"`
	V6CIDR string `json:"v6cidr,omitempty"`
}