runtime

type ExpressionMatch struct {
	ExpressionRegex `json:",inline"`

	// Exact matches one of the provided values exactly.
	//
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=64
	// +kubebuilder:validation:Items:MinLength=1
	// +optional
	Exact []string `json:"exact,omitempty"`
}

type ExpressionRegex struct {
	// Exp matches regular expression.
	//
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=4096
	// +optional
	Expression string `json:"exp,omitempty"`
	// Negate regular Expression
	//+kubebuilder:default:=false
	Negate bool `json:"negate,omitempty"`
}

type ExpressionRegexMatcher interface {
	MatchRegex(expression ExpressionRegex, value string) (bool, error)
}

type JSONSchemaFormExtension struct {
	// Widget selects the form control used for the property.
	// +kubebuilder:validation:Enum=kubernetes-resource
	Widget JSONSchemaFormWidget `json:"widget"`

	// Source describes the Kubernetes resources used as selectable options.
	Source *KubernetesResourceFormSource `json:"source"`

	// Option controls how each Kubernetes object is presented and converted to
	// the JSON Schema property's string value.
	// +optional
	Option *KubernetesResourceFormOption `json:"option,omitempty"`
}

type JSONSchemaFormWidget string

type KubernetesResourceFormOption struct {
	// LabelTemplate renders the human-readable option label. It defaults to
	// "{{ .metadata.name }}".
	// +optional
	LabelTemplate string `json:"labelTemplate,omitempty"`

	// ValueTemplate renders the value stored in the RenderedResource parameters. It
	// defaults to "{{ .metadata.name }}".
	// +optional
	ValueTemplate string `json:"valueTemplate,omitempty"`
}

type KubernetesResourceFormSource struct {
	// APIVersion of the resource, for example "v1" or "gateway.networking.k8s.io/v1".
	APIVersion string `json:"apiVersion"`

	// Kind of the resource, for example "Secret" or "GatewayClass".
	Kind string `json:"kind"`

	// Namespace controls the list scope for namespaced resources. "request"
	// selects the RenderedResource namespace, "*" selects all namespaces, and any
	// other value selects that literal namespace. When omitted, form consumers
	// use the RenderedResource namespace for namespaced GVKs and cluster scope for
	// cluster-scoped GVKs.
	// +optional
	Namespace string `json:"namespace,omitempty"`

	// LabelSelector is an optional Kubernetes label-selector expression applied
	// to the list request.
	// +optional
	LabelSelector string `json:"labelSelector,omitempty"`

	// FieldSelector is an optional Kubernetes field-selector expression applied
	// to the list request.
	// +optional
	FieldSelector string `json:"fieldSelector,omitempty"`
}

type RenderedResource struct {
	// Policy controls how every rendered target is created and managed.
	Policy ResourceTemplatePolicy `json:"policy,omitempty"`

	// Targets are the fully rendered Kubernetes manifests.
	// +kubebuilder:validation:MinItems=1
	Targets []k8sruntime.RawExtension `json:"targets"`
}

type ResourceCreationPolicy string

type ResourceDeletionPolicy string

type ResourceReplicationPolicy struct {
	ResourceTemplatePolicy `json:",inline"`

	// Condition is an optional CEL boolean expression checked before each target
	// is applied. object is the existing destination object, or null when absent;
	// now is the evaluation timestamp. False skips rendered content without
	// pruning or releasing an already managed object. Policy and protection are
	// still reconciled for managed objects. Evaluation errors prevent writes.
	// Rendering still occurs before evaluation. Omitting Condition preserves the
	// existing apply behavior. Conditions do not affect deletion or orphaning.
	// +optional
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=4096
	Condition string `json:"condition,omitempty"`
}

type ResourceTemplate struct {
	// Policy controls how every target in this resource group is created and managed.
	// +kubebuilder:default={}
	Policy ResourceTemplatePolicy `json:"policy,omitempty"`

	// Targets are Kubernetes resource objects to render and manage with Policy.
	// Parameters and loaded context use the flat template root; trusted request
	// metadata is available under .request.
	// +optional
	// +kubebuilder:validation:MinItems=1
	Targets []k8sruntime.RawExtension `json:"targets,omitempty"`

	// Template is an optional Go template which may render one or more YAML or
	// JSON Kubernetes resources separated by YAML document markers. Request
	// parameters are available under .params and loaded resources under
	// .context.resources. Trusted request metadata is available under .request
	// with name, username, groups, and timestamp fields.
	// +optional
	// +kubebuilder:validation:MinLength=1
	Template string `json:"template,omitempty"`
}

type ResourceTemplatePolicy struct {
	// Creation controls how an existing target is handled. Owner requires the
	// resource to have been created by the applying controller and otherwise
	// returns an error. Merge adopts an existing resource when possible and
	// creates the resource when it does not exist.
	// +kubebuilder:default=Owner
	// +kubebuilder:validation:Enum=Owner;Merge
	Creation ResourceCreationPolicy `json:"creation,omitempty"`

	// Protect prevents users from changing or deleting the target through
	// admission while it is managed. Protection is enabled by default.
	// +kubebuilder:default=true
	Protect *bool `json:"protect,omitempty"`

	// Force allows server-side apply to acquire conflicting field ownership.
	// +kubebuilder:default=false
	Force bool `json:"force,omitempty"`

	// Deletion controls what happens when the parent stops managing the target.
	// Remove deletes resources created for the parent and relinquishes adopted
	// resources. Orphan keeps the resource and removes Capsule's lifecycle
	// metadata. Removal is the default.
	// +kubebuilder:default=Remove
	// +kubebuilder:validation:Enum=Remove;Orphan
	Deletion ResourceDeletionPolicy `json:"deletion,omitempty"`
}

type VersionKind struct {
	// Kind of the referent.
	//
	// Use "*" to match all kinds.
	//
	// +kubebuilder:validation:MinLength=1
	Kind string `json:"kind" protobuf:"bytes,1,opt,name=kind"`

	// API version, API group, or API group/version selector of the referent.
	//
	// Empty APIVersion means the core Kubernetes API version "v1".
	// Use "*" to explicitly match all API groups and versions.
	//
	// Examples:
	// - "" means core "v1".
	// - "v1" means core "v1".
	// - "apps" means any version in the "apps" API group.
	// - "apps/v1" means the "apps/v1" API group/version.
	// - "apps/*" means any version in the "apps" API group.
	//
	// +optional
	APIVersion string `json:"apiVersion,omitempty" protobuf:"bytes,5,opt,name=apiVersion"`
}

type VersionKinds struct {
	// API groups or API group/version selectors of the referents.
	//
	// Empty or omitted APIGroups means the core Kubernetes API version "v1".
	// Use "*" to match all API groups and versions.
	//
	// Examples:
	// - [] or [""] means core "v1".
	// - ["v1"] means core "v1".
	// - ["apps"] means any version in the "apps" API group.
	// - ["apps/v1"] means only "apps/v1".
	// - ["apps", "batch/v1"] means any "apps" version and "batch/v1".
	// - ["*"] means all API groups and versions.
	//
	// +optional
	APIGroups []string `json:"apiGroups,omitempty"`

	// Kinds of the referents.
	//
	// Use "*" to match all kinds.
	//
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:items:MinLength=1
	Kinds []string `json:"kinds"`
}