v1alpha1

type ClusterFeature struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ClusterFeatureSpec   `json:"spec,omitempty"`
	Status ClusterFeatureStatus `json:"status,omitempty"`
}

type ClusterFeatureList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ClusterFeature `json:"items"`
}

type ClusterFeatureSpec struct {
	// ClusterSelector identifies ClusterAPI clusters to associate to.
	ClusterSelector Selector `json:"clusterSelector"`

	// SyncMode specifies how features are synced in a matching workload cluster.
	// - OneTime means, first time a workload cluster matches the ClusterFeature,
	// features will be deployed in such cluster. Any subsequent feature configuration
	// change won't be applied into the matching workload clusters;
	// - Continuous means first time a workload cluster matches the ClusterFeature,
	// features will be deployed in such a cluster. Any subsequent feature configuration
	// change will be applied into the matching workload clusters.
	// +kubebuilder:default:=OneTime
	// +optional
	SyncMode SyncMode `json:"syncMode,omitempty"`

	// WorkloadRoles references all the WorkloadRoles that will be used
	// to create ClusterRole/Role in the workload cluster.
	// +optional
	WorkloadRoles []corev1.ObjectReference `json:"workloadRoles,omitempty"`

	// KyvernoConfiguration contains the Kyverno configuration.
	// If not nil, Kyverno will be deployed in the workload cluster along with, if any,
	// specified Kyverno policies.
	// +optional
	KyvernoConfiguration *KyvernoConfiguration `json:"kyvernoConfiguration,omitempty"`
}

type ClusterFeatureStatus struct {
	// MatchingCluster reference all the cluster-api Cluster currently matching
	// ClusterFeature ClusterSelector
	MatchingClusters []corev1.ObjectReference `json:"matchinClusters,omitempty"`
}

type ClusterSummary struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ClusterSummarySpec   `json:"spec,omitempty"`
	Status ClusterSummaryStatus `json:"status,omitempty"`
}

type ClusterSummaryList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ClusterSummary `json:"items"`
}

type ClusterSummarySpec struct {
	// ClusterNamespace is the namespace of the workload Cluster this
	// ClusterSummary is for.
	ClusterNamespace string `json:"clusterNamespace"`

	// ClusterName is the name of the workload Cluster this ClusterSummary is for.
	ClusterName string `json:"clusterName"`

	// ClusterFeatureSpec represent the configuration that will be applied to
	// the workload cluster.
	ClusterFeatureSpec ClusterFeatureSpec `json:"clusterFeatureSpec,omitempty"`
}

type ClusterSummaryStatus struct {
	// FeatureSummaries reports the status of each workload cluster feature
	// directly managed by ClusterFeature.
	// +listType=atomic
	// +optional
	FeatureSummaries []FeatureSummary `json:"clusterSummaries,omitempty"`
}

type FeatureID string

type FeatureStatus string

type FeatureSummary struct {
	// FeatureID is an indentifier of the feature whose status is reported
	FeatureID FeatureID `json:"featureID"`

	// Hash represents of a unique value for a feature at a fixed point in
	// time
	Hash []byte `json:"hash"`

	// Status represents the state of the feature in the workload cluster
	Status FeatureStatus `json:"status"`

	// FailureReason indicates the type of error that occurred.
	// +optional
	FailureReason *string `json:"failureReason,omitempty"`

	// FailureMessage provides more information about the error.
	// +optional
	FailureMessage *string `json:"failureMessage,omitempty"`
}

type KyvernoConfiguration struct {
	// Policies references ConfigMaps containing the Kyverno policies
	// that need to be deployed in the workload cluster.
	Policies []corev1.ObjectReference `json:"policies,omitempty"`
}

type RoleType string

type Selector string

type SyncMode string

type WorkloadRole struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   WorkloadRoleSpec   `json:"spec,omitempty"`
	Status WorkloadRoleStatus `json:"status,omitempty"`
}

type WorkloadRoleList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []WorkloadRole `json:"items"`
}

type WorkloadRoleSpec struct {
	// Type specifies whether rules are cluster or namespaced wide
	// +kubebuilder:default:=Namespaced
	Type RoleType `json:"type"`

	// Namespace is the namespace where corresponding role will be created.
	// +optional
	Namespace *string `json:"namespace,omitempty"`

	// Rules holds all the PolicyRules for this ClusterRole
	// +optional
	Rules []rbacv1.PolicyRule `json:"rules,omitempty"`

	// AggregationRule is an optional field that describes how to build the Rules for this ClusterRole.
	// If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be
	// stomped by the controller.
	// +optional
	AggregationRule *rbacv1.AggregationRule `json:"aggregationRule,omitempty"`
}

type WorkloadRoleStatus struct {
}