v1

type DestinationRef struct {
	// Namespace to project into. Defaults to the Projection's own namespace.
	// Mutually exclusive with NamespaceSelector.
	// +optional
	// +kubebuilder:validation:MaxLength=63
	// +kubebuilder:validation:Pattern=`^[a-z0-9]([-a-z0-9]*[a-z0-9])?$`
	Namespace string `json:"namespace,omitempty"`
	// NamespaceSelector selects namespaces to project into by label.
	// Mutually exclusive with Namespace.
	// +optional
	NamespaceSelector *metav1.LabelSelector `json:"namespaceSelector,omitempty"`
	// Name in the destination namespace. Defaults to Source.Name. DNS-1123
	// subdomain: lowercase alphanumerics, '-', and '.', up to 253 chars.
	// +optional
	// +kubebuilder:validation:MaxLength=253
	// +kubebuilder:validation:Pattern=`^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$`
	Name string `json:"name,omitempty"`
}

type Overlay struct {
	// Labels are merged with the source object's metadata.labels before
	// writing to the destination. Keys set here win on conflict with
	// source labels.
	// +optional
	Labels map[string]string `json:"labels,omitempty"`
	// Annotations are merged with the source object's metadata.annotations
	// before writing to the destination. Keys set here win on conflict
	// with source annotations. Note: the controller always overwrites
	// projection.sh/owned-by to its own bookkeeping value;
	// attempts to set it here are ignored.
	// +optional
	Annotations map[string]string `json:"annotations,omitempty"`
}

type Projection struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ProjectionSpec   `json:"spec,omitempty"`
	Status ProjectionStatus `json:"status,omitempty"`
}

type ProjectionList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Projection `json:"items"`
}

type ProjectionSpec struct {
	// Source is the object to project from.
	Source SourceRef `json:"source"`
	// Destination controls where the projected object is written.
	// +optional
	Destination DestinationRef `json:"destination,omitempty"`
	// Overlay applies metadata patches on top of the projected object.
	// +optional
	Overlay Overlay `json:"overlay,omitempty"`
}

type ProjectionStatus struct {
	// Conditions reflect the current state of the projection. The controller
	// sets type "Ready" to True once the destination has been written, or
	// False with a reason describing why not.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type SourceRef struct {
	// APIVersion of the source object. Three forms accepted:
	//   - "v1"      — core group, pinned to v1.
	//   - "apps/v1" — named group, pinned to v1.
	//   - "apps/*"  — named group, RESTMapper-preferred served version.
	// The unpinned form follows the cluster: when a CRD author promotes
	// v1beta1→v1, projection picks up the new preferred version on the
	// next reconcile rather than reporting SourceResolutionFailed.
	// The "*" sentinel is invalid without a group prefix (no "*" form
	// for the core group, which has stable versions); enforced in the
	// reconciler since the regex is permissive for simplicity.
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:Pattern=`^([a-z0-9.-]+/)?(v[0-9]+((alpha|beta)[0-9]+)?|\*)$`
	APIVersion string `json:"apiVersion"`
	// Kind of the source object, e.g. "ConfigMap".
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:Pattern=`^[A-Z][A-Za-z0-9]*$`
	Kind string `json:"kind"`
	// Name of the source object. DNS-1123 subdomain: lowercase alphanumerics,
	// '-', and '.', up to 253 chars. Matches the permissive form Kubernetes
	// uses for most named objects (ConfigMap, Secret, Deployment, Pod, …).
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=253
	// +kubebuilder:validation:Pattern=`^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$`
	Name string `json:"name"`
	// Namespace of the source object.
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	// +kubebuilder:validation:Pattern=`^[a-z0-9]([-a-z0-9]*[a-z0-9])?$`
	Namespace string `json:"namespace"`
}