v1alpha1

type ConfigItem struct {
	// Key is the configuration key or path to set.
	Key string `json:"key"`
	// The key contains a path to a property in a map or list to set
	// +optional
	Path *bool `json:"path,omitempty"`
	// Value is the configuration value to set.
	// +optional
	Value *string `json:"value,omitempty"`
	// ValueFrom is a reference to a value from the environment or from a file.
	// +optional
	ValueFrom *ConfigValueFrom `json:"valueFrom,omitempty"`
	// Secret marks the configuration value as a secret.
	Secret *bool `json:"secret,omitempty"`
}

type ConfigValueFrom struct {
	// Env is an environment variable in the pulumi container to use as the value.
	// +optional
	Env string `json:"env,omitempty"`
	// Path is a path to a file in the pulumi container containing the value.
	Path string `json:"path,omitempty"`
}

type EmbeddedObjectMeta struct {
	// Map of string keys and values that can be used to organize and categorize
	// (scope and select) objects. May match selectors of replication controllers
	// and services.
	// More info: http://kubernetes.io/docs/user-guide/labels
	// +optional
	Labels map[string]string `json:"labels,omitempty" protobuf:"bytes,11,rep,name=labels"`

	// Annotations is an unstructured key value map stored with a resource that may be
	// set by external tools to store and retrieve arbitrary metadata. They are not
	// queryable and should be preserved when modifying objects.
	// More info: http://kubernetes.io/docs/user-guide/annotations
	// +optional
	Annotations map[string]string `json:"annotations,omitempty" protobuf:"bytes,12,rep,name=annotations"`
}

type EmbeddedPodTemplateSpec struct {
	// EmbeddedMetadata contains metadata relevant to an embedded resource.
	// +optional
	Metadata EmbeddedObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Specification of the desired behavior of the pod.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	// +optional
	Spec *corev1.PodSpec `json:"spec,omitempty" protobuf:"bytes,2,opt,name=spec"`
}

type FluxSource struct {
	// URL is the URL of the artifact to fetch.
	Url string `json:"url,omitempty"`
	// Digest is the digest of the artifact to fetch.
	Digest string `json:"digest,omitempty"`
	// Dir gives the subdirectory containing the Pulumi project (i.e., containing Pulumi.yaml) of
	// interest, within the fetched artifact.
	// +optional
	Dir string `json:"dir,omitempty"`
}

type GitAuth struct {
	// SSHPrivateKey should contain a private key for access to the git repo.
	// When using `SSHPrivateKey`, the URL of the repository must be in the
	// format git@github.com:org/repository.git.
	SSHPrivateKey *corev1.SecretKeySelector `json:"sshPrivateKey,omitempty"`
	// Username is the username to use when authenticating to a git repository.
	Username *corev1.SecretKeySelector `json:"username,omitempty"`
	// The password that pairs with a username or as part of an SSH Private Key.
	Password *corev1.SecretKeySelector `json:"password,omitempty"`
	// Token is a Git personal access token in replacement of
	// your password.
	Token *corev1.SecretKeySelector `json:"token,omitempty"`
}

type GitSource struct {
	// URL is the git source control repository from which we fetch the project
	// code and configuration.
	URL string `json:"url,omitempty"`
	// Ref is the git ref (tag, branch, or commit SHA) to fetch.
	Ref string `json:"ref,omitempty"`
	// Dir is the directory to work from in the project's source repository
	// where Pulumi.yaml is located. It is used in case Pulumi.yaml is not
	// in the project source root.
	// +optional
	Dir string `json:"dir,omitempty"`
	// Auth contains optional authentication information to use when cloning
	// the repository.
	// +optional
	Auth *GitAuth `json:"auth,omitempty"`
	// Shallow controls whether the workspace uses a shallow clone or whether
	// all history is cloned.
	// +optional
	Shallow bool `json:"shallow,omitempty"`
}

type LocalSource struct {
	// Dir gives the subdirectory containing the Pulumi project (i.e., containing Pulumi.yaml) of
	// interest, within the workspace image.
	Dir string `json:"dir,omitempty"`
}

type SecurityProfile string

type Update struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   UpdateSpec   `json:"spec,omitempty"`
	Status UpdateStatus `json:"status,omitempty"`
}

type UpdateList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Update `json:"items"`
}

type UpdateSpec struct {
	// WorkspaceName is the workspace to update.
	WorkspaceName string `json:"workspaceName,omitempty"`
	// Specify the Pulumi stack to select for the update.
	StackName string `json:"stackName,omitempty"`
	// Type of the update to perform.
	Type UpdateType `json:"type,omitempty"`
	// TTL for a completed update object.
	// +optional
	TtlAfterCompleted *metav1.Duration `json:"ttlAfterCompleted,omitempty"`
	// Parallel is the number of resource operations to run in parallel at once
	// (1 for no parallelism). Defaults to unbounded.
	// +optional
	Parallel *int32 `json:"parallel,omitempty"`
	// Message (optional) to associate with the preview operation
	// +optional
	Message *string `json:"message,omitempty"`
	// Return an error if any changes occur during this update
	// +optional
	ExpectNoChanges *bool `json:"expectNoChanges,omitempty"`
	// Specify resources to replace
	// +optional
	Replace []string `json:"replace,omitempty"`
	// Specify an exclusive list of resource URNs to update
	// +optional
	Target []string `json:"target,omitempty"`
	// TargetDependents allows updating of dependent targets discovered but not
	// specified in the Target list
	// +optional
	TargetDependents *bool `json:"targetDependents,omitempty"`
	// refresh will run a refresh before the update.
	// +optional
	Refresh *bool `json:"refresh,omitempty"`
	// ContinueOnError will continue to perform the update operation despite the
	// occurrence of errors.
	ContinueOnError *bool `json:"continueOnError,omitempty"`
	// Remove the stack and its configuration after all resources in the stack
	// have been deleted.
	Remove *bool `json:"remove,omitempty"`
}

type UpdateStatus struct {
	// observedGeneration represents the .metadata.generation that the status was set based upon.
	// +optional
	// +kubebuilder:validation:Minimum=0
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

	// The start time of the operation.
	// +optional
	StartTime metav1.Time `json:"startTime,omitempty"`

	// The end time of the operation.
	// +optional
	EndTime metav1.Time `json:"endTime,omitempty"`

	// Represents the permalink URL in the Pulumi Console for the operation. Not available for DIY backends.
	// +optional
	Permalink string `json:"permalink,omitempty"`

	// +optional
	Message string `json:"message,omitempty"`

	// Outputs names a secret containing the outputs for this update.
	// +optional
	Outputs string `json:"outputs,omitempty"`

	// Represents the observations of an update's current state.
	// Known .status.conditions.type are: "Complete", "Failed", and "Progressing"
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	// +operator-sdk:csv:customresourcedefinitions:type=status
	Conditions []metav1.Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type" protobuf:"bytes,1,rep,name=conditions"`
}

type UpdateType string

type Workspace struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   WorkspaceSpec   `json:"spec,omitempty"`
	Status WorkspaceStatus `json:"status,omitempty"`
}

type WorkspaceList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Workspace `json:"items"`
}

type WorkspaceSpec struct {
	// ServiceAccountName is the Kubernetes service account identity of the workspace.
	// +kubebuilder:default="default"
	ServiceAccountName string `json:"serviceAccountName,omitempty"`

	// SecurityProfile applies a security profile to the workspace.
	// The restricted profile (default) runs the pod as a non-root user and with a security context that conforms with
	// the Restricted policy of the Pod Security Standards.
	// The baseline profile runs the pod as the root user and with a security context that conforms with
	// the Baseline policy of the Pod Security Standards.
	// +kubebuilder:default="restricted"
	// +optional
	SecurityProfile SecurityProfile `json:"securityProfile,omitempty"`

	// Image is the container image containing the 'pulumi' executable. If no image is provided,
	// the default image is used based on the securityProfile:
	// for 'baseline', it defaults to 'pulumi/pulumi:latest';
	// for 'restricted', it defaults to 'pulumi/pulumi:latest-nonroot'.
	Image string `json:"image,omitempty"`

	// Image pull policy.
	// One of Always, Never, IfNotPresent.
	// Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.
	// More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
	// +optional
	ImagePullPolicy corev1.PullPolicy `json:"imagePullPolicy,omitempty"`

	// Git is the git source containing the Pulumi program.
	// +optional
	Git *GitSource `json:"git,omitempty"`

	// Flux is the flux source containing the Pulumi program.
	// +optional
	Flux *FluxSource `json:"flux,omitempty"`

	// Local is the local source containing the Pulumi program.
	// +optional
	Local *LocalSource `json:"local,omitempty"`

	// List of sources to populate environment variables in the workspace.
	// The keys defined within a source must be a C_IDENTIFIER. All invalid keys
	// will be reported as an event when the container is starting. When a key exists in multiple
	// sources, the value associated with the last source will take precedence.
	// Values defined by an Env with a duplicate key will take precedence.
	// +optional
	// +listType=atomic
	EnvFrom []corev1.EnvFromSource `json:"envFrom,omitempty"`

	// List of environment variables to set in the container.
	// +optional
	// +patchMergeKey=name
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=name
	Env []corev1.EnvVar `json:"env,omitempty" patchStrategy:"merge" patchMergeKey:"name"`

	// Compute Resources required by this workspace.
	// More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
	// +optional
	Resources corev1.ResourceRequirements `json:"resources,omitempty"`

	// PodTemplate defines a PodTemplateSpec for Workspace's pods.
	//
	// +optional
	PodTemplate *EmbeddedPodTemplateSpec `json:"podTemplate,omitempty"`

	// PulumiLogVerbosity is the log verbosity level to use for the Pulumi CLI.
	// If unset,verbose logging is disabled.
	// See: https://www.pulumi.com/docs/iac/support/troubleshooting/#verbose-logging
	// for more information about log levels.
	// +optional
	PulumiLogVerbosity uint32 `json:"pulumiLogLevel,omitempty"`

	// List of stacks this workspace manages.
	// +optional
	// +patchMergeKey=name
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=name
	Stacks []WorkspaceStack `json:"stacks,omitempty"`
}

type WorkspaceStack struct {
	Name string `json:"name"`

	// Create the stack if it does not exist.
	Create *bool `json:"create,omitempty"`

	// SecretsProvider is the name of the secret provider to use for the stack.
	SecretsProvider *string `json:"secretsProvider,omitempty"`

	// Config is a list of confguration values to set on the stack.
	// +optional
	// +patchMergeKey=key
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=key
	Config []ConfigItem `json:"config,omitempty"`
}

type WorkspaceStatus struct {
	// observedGeneration represents the .metadata.generation that the status was set based upon.
	// +optional
	// +kubebuilder:validation:Minimum=0
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

	// +optional
	Address string `json:"address,omitempty"`

	// Represents the observations of a workspace's current state.
	// Known .status.conditions.type are: "Ready"
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	// +operator-sdk:csv:customresourcedefinitions:type=status
	Conditions []metav1.Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type" protobuf:"bytes,1,rep,name=conditions"`
}