v2

type AddressScopeSpec struct {
	Name        string           `json:"name" yaml:"name"`                                     // address scope name
	IpVersion   int              `json:"ip_version" yaml:"ip_version"`                         // ip-version 4 or 6
	Shared      *bool            `json:"shared,omitempty" yaml:"shared,omitempty"`             // boolean flag to indicate if the address-scope is shared
	SubnetPools []SubnetPoolSpec `json:"subnet_pools,omitempty" yaml:"subnet_pools,omitempty"` // list of subnet-pools in the address-scope
}

type DNSQuotaSpec struct {
	ApiExportSize    int `json:"api_export_size,omitempty" yaml:"api_export_size,omitempty"`
	Zones            int `json:"zones,omitempty" yaml:"zones,omitempty"`
	ZoneRecords      int `json:"zone_records,omitempty" yaml:"zone_records,omitempty"`
	ZoneRecordSets   int `json:"zone_recordsets,omitempty" yaml:"zone_recordsets,omitempty"`
	RecordsetRecords int `json:"recordset_records,omitempty" yaml:"recordset_records,omitempty"`
}

type DNSRecordsetSpec struct {
	Name        string   `json:"name" yaml:"name"`                                   // DNS Name for the recordset
	Type        string   `json:"type" yaml:"type"`                                   // They RRTYPE of the recordset.
	TTL         int      `json:"ttl,omitempty" yaml:"ttl,omitempty"`                 // TTL (Time to Live) for the recordset.
	Description string   `json:"description,omitempty" yaml:"description,omitempty"` // Description for this recordset
	Records     []string `json:"records,omitempty" yaml:"records,omitempty"`         // A list of data for this recordset. Each item will be a separate record in Designate These items should conform to the DNS spec for the record type - e.g. A records must be IPv4 addresses, CNAME records must be a hostname.
}

type DNSTSIGKeySpec struct {
	Name       string `json:"name" yaml:"name"`                                   // Name for this tsigkey
	Algorithm  string `json:"algorithm,omitempty" yaml:"algorithm,omitempty"`     // The encryption algorithm for this tsigkey
	Secret     string `json:"secret,omitempty" yaml:"secret,omitempty"`           // The actual key to be used
	Scope      string `json:"scope,omitempty" yaml:"scope,omitempty"`             // scope for this tsigkey which can be either ZONE or POOL scope
	ResourceId string `json:"resource_id,omitempty" yaml:"resource_id,omitempty"` // resource id for this tsigkey which can be either zone or pool id
}

type DNSZoneSpec struct {
	Name          string             `json:"name" yaml:"name"`                                   // DNS Name for the zone
	Type          string             `json:"type" yaml:"type"`                                   // Type of zone. PRIMARY is controlled by Designate, SECONDARY zones are slaved from another DNS Server. Defaults to PRIMARY
	Email         string             `json:"email" yaml:"email"`                                 // e-mail for the zone. Used in SOA records for the zone
	TTL           int                `json:"ttl,omitempty" yaml:"ttl,omitempty"`                 // TTL (Time to Live) for the zone.
	Description   string             `json:"description,omitempty" yaml:"description,omitempty"` // description of the zone
	DNSRecordsets []DNSRecordsetSpec `json:"recordsets,omitempty" yaml:"recordsets,omitempty"`   // The zones recordsets
}

type DomainConfigSpec struct {
	IdentityConfig *IdentityConfigSpec `json:"identity,omitempty" yaml:"identity,omitempty"` // the identity driver configuration settings
	LdapConfig     *LdapConfigSpec     `json:"ldap,omitempty" yaml:"ldap,omitempty"`         // the ldap driver configuration settings
}

type DomainSpec struct {
	ID              string               `json:"id" yaml:"id"`
	Name            string               `json:"name" yaml:"name"`                                             // domain name
	Description     string               `json:"description,omitempty" yaml:"description,omitempty"`           // domain description
	Enabled         bool                 `json:"enabled,omitempty" yaml:"enabled,omitempty"`                   // boolean flag to indicate if the domain is enabled
	Users           []UserSpec           `json:"users,omitempty" yaml:"users,omitempty"`                       // list of domain users
	Groups          []GroupSpec          `json:"groups,omitempty" yaml:"groups,omitempty"`                     // list of domain groups
	Projects        []ProjectSpec        `json:"projects,omitempty" yaml:"projects,omitempty"`                 // list of domain projects
	Roles           []RoleSpec           `json:"roles,omitempty" yaml:"roles,omitempty"`                       // list of domain-roles
	RoleAssignments []RoleAssignmentSpec `json:"role_assignments,omitempty" yaml:"role_assignments,omitempty"` // list of domain-role-assignments
	Config          *DomainConfigSpec    `json:"config,omitempty" yaml:"config,omitempty"`                     // optional domain configuration
}

type Ec2CredSpec struct {
	User       string `json:"user" yaml:"user"`               // Username
	UserDomain string `json:"user_domain" yaml:"user_domain"` // Openstack domain of the user
	Access     string `json:"access" yaml:"access"`           // EC2 access id of the credential
	Key        string `json:"key" yaml:"key"`                 // EC2 key for the access id
}

type EndpointSpec struct {
	Region string `json:"region" yaml:"region"` // region-id
	// +kubebuilder:validation:Required
	Interface string `json:"interface" yaml:"interface"` // interface type (usually public, admin, internal)
	// +kubebuilder:validation:Required
	URL     string `json:"url" yaml:"url"`         // the endpoints URL
	Enabled bool   `json:"enabled" yaml:"enabled"` // boolean flag to indicate if the endpoint is enabled
}

type ExternalFixedIPsSpec struct {
	Subnet    string `json:"subnet,omitempty" yaml:"subnet,omitempty"`         // subnet-name (subnet@project@domain)
	SubnetId  string `json:"subnet_id,omitempty" yaml:"subnet_id,omitempty"`   // or subnet-id
	IpAddress string `json:"ip_address,omitempty" yaml:"ip_address,omitempty"` // IP address
}

type ExternalGatewayInfoSpec struct {
	Network          string                 `json:"network,omitempty" yaml:"network,omitempty"`                       // network-name (network@project@domain)
	NetworkId        string                 `json:"network_id,omitempty" yaml:"network_id,omitempty"`                 // or network-id
	EnableSNAT       *bool                  `json:"enable_snat,omitempty" yaml:"enable_snat,omitempty"`               // Enable Source NAT (SNAT) attribute. Default is true. To persist this attribute value, set the enable_snat_by_default option in the neutron.conf file. It is available when ext-gw-mode extension is enabled.
	ExternalFixedIPs []ExternalFixedIPsSpec `json:"external_fixed_ips,omitempty" yaml:"external_fixed_ips,omitempty"` // external gateway interface of the router. It is a list of IP addresses you would like to assign to the external gateway interface.
}

type ExtraServiceSpec struct {
	Name        string         `json:"name" yaml:"name"`                                   // service name
	Endpoints   []EndpointSpec `json:"endpoints,omitempty" yaml:"endpoints,omitempty"`     // list of service endpoints
	Description string         `json:"description,omitempty" yaml:"description,omitempty"` // description of the service
}

type FlavorSpec struct {
	Name       string            `json:"name" yaml:"name"` // flavor name
	Id         string            `json:"id,omitempty" yaml:"id,omitempty"`
	Ram        int               `json:"ram,omitempty" yaml:"ram,omitempty"`
	Disk       int               `json:"disk,omitempty" yaml:"disk,omitempty"`
	Vcpus      int               `json:"vcpus,omitempty" yaml:"vcpus,omitempty"`
	Swap       int               `json:"swap,omitempty" yaml:"swap,omitempty"`
	RxTxfactor int               `json:"rxtxfactor,omitempty" yaml:"rxtxfactor,omitempty"`
	IsPublic   *bool             `json:"is_public,omitempty" yaml:"is_public,omitempty"`
	Disabled   *bool             `json:"disabled,omitempty" yaml:"disabled,omitempty"`
	Ephemeral  int               `json:"ephemeral,omitempty" yaml:"ephemeral,omitempty"`
	ExtraSpecs map[string]string `json:"extra_specs,omitempty" yaml:"extra_specs,omitempty"` // list of extra specs
}

type GroupSpec struct {
	Name            string               `json:"name" yaml:"name"`                                             // group name
	Description     string               `json:"description,omitempty" yaml:"description,omitempty"`           // description of the group
	Users           []string             `json:"users,omitempty" yaml:"users,omitempty"`                       // a list of group members (user names)
	RoleAssignments []RoleAssignmentSpec `json:"role_assignments,omitempty" yaml:"role_assignments,omitempty"` // list of the users role-assignments
}

type IdentityConfigSpec struct {
	Driver string `json:"driver" yaml:"driver"` // Entry point for the domain-specific configuration driver in the 'keystone.resource.domain_config` namespace
}

type LdapConfigSpec struct {
	Url        string `json:"url" yaml:"url"`                                     // URL(s) for connecting to the LDAP server. Multiple LDAP URLs may be specified as a comma separated string. The first URL to successfully bind is used for the connection.
	User       string `json:"user" yaml:"user"`                                   // The user name of the administrator bind DN to use when querying the LDAP server, if your LDAP server requires it.
	Password   string `json:"password" yaml:"password"`                           // The password of the administrator bind DN to use when querying the LDAP server, if your LDAP server requires it.
	Suffix     string `json:"suffix,omitempty" yaml:"suffix,omitempty"`           // The default LDAP server suffix to use, if a DN is not defined via either `[ldap] user_tree_dn` or `[ldap] group_tree_dn`.
	QueryScope string `json:"query_scope,omitempty" yaml:"query_scope,omitempty"` // The search scope which defines how deep to search within the search base. A  value of `one` (representing `oneLevel` or `singleLevel`) indicates a search of objects immediately below to the base object, but does not include the base object itself. A value of `sub` (representing `subtree` or `wholeSubtree`) indicates a search of both the base object itself and the entire subtree below it.
	PageSize   int    `json:"page_size,omitempty" yaml:"page_size,omitempty"`     // Defines the maximum number of results per page that keystone should request  from the LDAP server when listing objects. A value of zero (`0`) disables paging.

	UseTLS         *bool  `json:"use_tls,omitempty" yaml:"use_tls,omitempty"`
	TLSCACertFile  string `json:"tls_cacertfile,omitempty" yaml:"tls_cacertfile,omitempty"`
	TLSCACertDir   string `json:"tls_cacertdir,omitempty" yaml:"tls_cacertdir,omitempty"`
	TLSRequestCert string `json:"tls_req_cert,omitempty" yaml:"tls_req_cert,omitempty"`

	UsePool                *bool `json:"use_pool,omitempty" yaml:"use_pool,omitempty"`
	PoolSize               int   `json:"pool_size,omitempty" yaml:"pool_size,omitempty"`                               // The size of the LDAP connection pool
	PoolRetryMax           int   `json:"pool_retry_max,omitempty" yaml:"pool_retry_max,omitempty"`                     // The maximum number of times to attempt reconnecting to the LDAP server before aborting. A value of zero prevents retries.
	PoolRetryDelay         int   `json:"pool_retry_delay,omitempty" yaml:"pool_retry_delay,omitempty"`                 // The number of seconds to wait before attempting to reconnect to the LDAP server.
	PoolConnectionTimeout  int   `json:"pool_connection_timeout,omitempty" yaml:"pool_connection_timeout,omitempty"`   //
	PoolConnectionLifetime int   `json:"pool_connection_lifetime,omitempty" yaml:"pool_connection_lifetime,omitempty"` //

	UseAuthPool                *bool `json:"use_auth_pool,omitempty" yaml:"use_auth_pool,omitempty"`
	AuthPoolSize               int   `json:"auth_pool_size,omitempty" yaml:"auth_pool_size,omitempty"`                               // The size of the LDAP auth connection pool
	AuthPoolConnectionLifetime int   `json:"auth_pool_connection_lifetime,omitempty" yaml:"auth_pool_connection_lifetime,omitempty"` //

	AliasDereferencing string `json:"alias_dereferencing,omitempty" yaml:"alias_dereferencing,omitempty"`
	DebugLevel         int    `json:"debug_level,omitempty" yaml:"debug_level,omitempty"`

	UserTreeDN           string `json:"user_tree_dn,omitempty" yaml:"user_tree_dn,omitempty"`
	UserFilter           string `json:"user_filter,omitempty" yaml:"user_filter,omitempty"`
	UserObjectClass      string `json:"user_objectclass,omitempty" yaml:"user_objectclass,omitempty"`
	UserIdAttribute      string `json:"user_id_attribute,omitempty" yaml:"user_id_attribute,omitempty"`
	UserNameAttribute    string `json:"user_name_attribute,omitempty" yaml:"user_name_attribute,omitempty"`
	UserDescAttribute    string `json:"user_description_attribute,omitempty" yaml:"user_description_attribute,omitempty"`
	UserMailAttribute    string `json:"user_mail_attribute,omitempty" yaml:"user_mail_attribute,omitempty"`
	UserPassAttribute    string `json:"user_pass_attribute,omitempty" yaml:"user_pass_attribute,omitempty"`
	UserEnabledAttribute string `json:"user_enabled_attribute,omitempty" yaml:"user_enabled_attribute,omitempty"`
	UserEnabledMask      int    `json:"user_enabled_mask,omitempty" yaml:"user_enabled_mask,omitempty"`
	UserEnabledDefault   string `json:"user_enabled_default,omitempty" yaml:"user_enabled_default,omitempty"`
	UserAttributeIgnore  string `json:"user_attribute_ignore,omitempty" yaml:"user_attribute_ignore,omitempty"`
	UserAllowCreate      *bool  `json:"user_allow_create,omitempty" yaml:"user_allow_create,omitempty"`
	UserAllowUpdate      *bool  `json:"user_allow_update,omitempty" yaml:"user_allow_update,omitempty"`
	UserAllowDelete      *bool  `json:"user_allow_delete,omitempty" yaml:"user_allow_delete,omitempty"`

	GroupTreeDN          string `json:"group_tree_dn,omitempty" yaml:"group_tree_dn,omitempty"`
	GroupFilter          string `json:"group_filter,omitempty" yaml:"group_filter,omitempty"`
	GroupObjectClass     string `json:"group_objectclass,omitempty" yaml:"group_objectclass,omitempty"`
	GroupIdAttribute     string `json:"group_id_attribute,omitempty" yaml:"group_id_attribute,omitempty"`
	GroupNameAttribute   string `json:"group_name_attribute,omitempty" yaml:"group_name_attribute,omitempty"`
	GroupDescAttribute   string `json:"group_description_attribute,omitempty" yaml:"group_description_attribute,omitempty"`
	GroupMemberAttribute string `json:"group_member_attribute,omitempty" yaml:"group_member_attribute,omitempty"`
	GroupMembersAreIDs   *bool  `json:"group_members_are_ids,omitempty" yaml:"group_members_are_ids,omitempty"`
	GroupAttributeIgnore string `json:"group_attribute_ignore,omitempty" yaml:"group_attribute_ignore,omitempty"`
	GroupAllowCreate     *bool  `json:"group_allow_create,omitempty" yaml:"group_allow_create,omitempty"`
	GroupAllowUpdate     *bool  `json:"group_allow_update,omitempty" yaml:"group_allow_update,omitempty"`
	GroupAllowDelete     *bool  `json:"group_allow_delete,omitempty" yaml:"group_allow_delete,omitempty"`
}

type NetworkQuotaSpec struct {
	FloatingIP        int `json:"floatingip,omitempty" yaml:"floatingip,omitempty"`                   // The number of floating IP addresses allowed for each project. A value of -1 means no limit.
	Network           int `json:"network,omitempty" yaml:"network,omitempty"`                         // The number of networks allowed for each project. A value of -1 means no limit.
	Port              int `json:"port,omitempty" yaml:"port,omitempty"`                               // The number of ports allowed for each project. A value of -1 means no limit.
	RbacPolicy        int `json:"rbac_policy,omitempty" yaml:"rbac_policy,omitempty"`                 // The number of role-based access control (RBAC) policies for each project. A value of -1 means no limit.
	Router            int `json:"router,omitempty" yaml:"router,omitempty"`                           // The number of routers allowed for each project. A value of -1 means no limit.
	SecurityGroup     int `json:"security_group,omitempty" yaml:"security_group,omitempty"`           // The number of security groups allowed for each project. A value of -1 means no limit.
	SecurityGroupRule int `json:"security_group_rule,omitempty" yaml:"security_group_rule,omitempty"` // The number of security group rules allowed for each project. A value of -1 means no limit.
	Subnet            int `json:"subnet,omitempty" yaml:"subnet,omitempty"`                           // The number of subnets allowed for each project. A value of -1 means no limit.
	SubnetPool        int `json:"subnetpool,omitempty" yaml:"subnetpool,omitempty"`                   // The number of subnet pools allowed for each project. A value of -1 means no limit.
	HealthMonitor     int `json:"healthmonitor,omitempty" yaml:"healthmonitor,omitempty"`             //
	L7Policy          int `json:"l7policy,omitempty" yaml:"l7policy,omitempty"`                       //
	Listener          int `json:"listener,omitempty" yaml:"listener,omitempty"`                       //
	LoadBalancer      int `json:"loadbalancer,omitempty" yaml:"loadbalancer,omitempty"`               //
}

type NetworkSpec struct {
	Name                    string       `json:"name" yaml:"name"`                                                               // network name
	AdminStateUp            *bool        `json:"admin_state_up,omitempty" yaml:"admin_state_up,omitempty"`                       // The administrative state of the network, which is up (true) or down (false).
	PortSecurityEnabled     *bool        `json:"port_security_enabled,omitempty" yaml:"port_security_enabled,omitempty"`         // The port security status of the network. Valid values are enabled (true) and disabled (false). This value is used as the default value of port_security_enabled field of a newly created port.
	ProviderNetworkType     string       `json:"provider_network_type,omitempty" yaml:"provider_network_type,omitempty"`         // The type of physical network that this network should be mapped to. For example, flat, vlan, vxlan, or gre. Valid values depend on a networking back-end.
	ProviderPhysicalNetwork string       `json:"provider_physical_network,omitempty" yaml:"provider_physical_network,omitempty"` // The physical network where this network should be implemented. The Networking API v2.0 does not provide a way to list available physical networks. For example, the Open vSwitch plug-in configuration file defines a symbolic name that maps to specific bridges on each compute host.
	ProviderSegmentationId  string       `json:"provider_segmentation_id,omitempty" yaml:"provider_segmentation_id,omitempty"`   // The ID of the isolated segment on the physical network. The network_type attribute defines the segmentation model. For example, if the network_type value is vlan, this ID is a vlan identifier. If the network_type value is gre, this ID is a gre key.
	QosPolicyId             string       `json:"qos_policy_id,omitempty" yaml:"qos_policy_id,omitempty"`                         // The ID of the QoS policy.
	RouterExternal          *bool        `json:"router_external,omitempty" yaml:"router_external,omitempty"`                     // Indicates whether this network can provide floating IPs via a router.
	Shared                  *bool        `json:"shared,omitempty" yaml:"shared,omitempty"`                                       // Indicates whether this network is shared across all projects. By default, only administrative users can change this value.
	VlanTransparent         *bool        `json:"vlan_transparent,omitempty" yaml:"vlan_transparent,omitempty"`                   // Indicates the VLAN transparency mode of the network, which is VLAN transparent (true) or not VLAN transparent (false).
	Description             string       `json:"description,omitempty" yaml:"description,omitempty"`                             // description of the network
	Subnets                 []SubnetSpec `json:"subnets,omitempty" yaml:"subnets,omitempty"`                                     // List of subnets
	Tags                    []string     `json:"tags,omitempty" yaml:"tags,omitempty"`                                           // List of network tags (see https://developer.openstack.org/api-ref/networking/v2/index.html#tag-extension-tags)
}

type OpenstackSeed struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   OpenstackSeedSpec   `json:"spec,omitempty"`
	Status OpenstackSeedStatus `json:"status,omitempty"`
}

type OpenstackSeedList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []OpenstackSeed `json:"items"`
}

type OpenstackSeedSpec struct {

	// Foo is an example field of OpenstackSeed. Edit openstackseed_types.go to remove/update
	// list of required specs that need to be resolved before the current one
	Dependencies []string `json:"requires,omitempty" yaml:"requires,omitempty"`
	// list of keystone roles
	Roles []RoleSpec `json:"roles,omitempty" yaml:"roles,omitempty"`
	// list of implied roles
	RoleInferences []RoleInferenceSpec `json:"role_inferences,omitempty" yaml:"role_inferences,omitempty"`
	// list keystone regions
	Regions []RegionSpec `json:"regions,omitempty" yaml:"regions,omitempty"`
	// list keystone services and their endpoints
	Services []ServiceSpec `json:"services,omitempty" yaml:"services,omitempty"`
	// list of nova flavors
	Flavors []FlavorSpec `json:"flavors,omitempty" yaml:"flavors,omitempty"`
	// list of Manila share types
	ShareTypes []ShareTypeSpec `json:"share_types,omitempty" yaml:"share_types,omitempty"`
	// list of resource classes for the placement service (currently still part of nova)
	ResourceClasses []string `json:"resource_classes,omitempty" yaml:"resource_classes,omitempty"`
	// list keystone domains with their configuration, users, groups, projects, etc
	Domains []DomainSpec `json:"domains,omitempty" yaml:"domains,omitempty"`
	// list of neutron rbac polices (currently only network rbacs are supported)
	RBACPolicies []RBACPolicySpec `json:"rbac_policies,omitempty" yaml:"rbac_policies,omitempty"`
	// list of cinder volume types
	VolumeTypes []VolumeTypeSpec `json:"volume_types,omitempty" yaml:"volume_types,omitempty"`
}

type OpenstackSeedStatus struct {
	// INSERT ADDITIONAL STATUS FIELD - define observed state of cluster
	// Important: Run "make" to regenerate code after modifying this file
	UnfinishedSeeds           map[string]string `json:"unfinished_seeds,omitempty" yaml:"unfinished_seeds,omitempty"`
	ReconciledResourceVersion string            `json:"reconciled_resource_version,omitempty" yaml:"reconciled_resource_version,omitempty"`
}

type ProjectEndpointSpec struct {
	Region  string `json:"region" yaml:"region"`   // region-id
	Service string `json:"service" yaml:"service"` // service-id
}

type ProjectSpec struct {
	Name            string                `json:"name" yaml:"name"`                                             // project name
	Description     string                `json:"description,omitempty" yaml:"description,omitempty"`           // project description
	Enabled         *bool                 `json:"enabled,omitempty" yaml:"enabled,omitempty"`                   // boolean flag to indicate if the project is enabled
	Parent          string                `json:"parent,omitempty" yaml:"parent,omitempty"`                     // (optional) parent project name
	IsDomain        *bool                 `json:"is_domain,omitempty" yaml:"is_domain,omitempty"`               // is the project actually a domain?
	Endpoints       []ProjectEndpointSpec `json:"endpoints,omitempty" yaml:"endpoints,omitempty"`               // list of project endpoint filters
	RoleAssignments []RoleAssignmentSpec  `json:"role_assignments,omitempty" yaml:"role_assignments,omitempty"` // list of project-role-assignments
	Flavors         []string              `json:"flavors,omitempty" yaml:"flavors,omitempty"`                   // list of nova flavor-id's
	ShareTypes      []string              `json:"share_types,omitempty" yaml:"share_types,omitempty"`           // list of manila share types
	AddressScopes   []AddressScopeSpec    `json:"address_scopes,omitempty" yaml:"address_scopes,omitempty"`     // list of neutron address-scopes
	SubnetPools     []SubnetPoolSpec      `json:"subnet_pools,omitempty" yaml:"subnet_pools,omitempty"`         // list of neutron subnet-pools
	NetworkQuota    *NetworkQuotaSpec     `json:"network_quota,omitempty" yaml:"network_quota,omitempty"`       // neutron quota
	Networks        []NetworkSpec         `json:"networks,omitempty" yaml:"networks,omitempty"`                 // neutron networks
	Routers         []RouterSpec          `json:"routers,omitempty" yaml:"routers,omitempty"`                   // neutron routers
	Swift           *SwiftAccountSpec     `json:"swift,omitempty" yaml:"swift,omitempty"`                       // swift account
	DNSQuota        *DNSQuotaSpec         `json:"dns_quota,omitempty" yaml:"dns_quota,omitempty"`               // designate quota
	DNSZones        []DNSZoneSpec         `json:"dns_zones,omitempty" yaml:"dns_zones,omitempty"`               // designate zones, recordsets
	DNSTSIGKeys     []DNSTSIGKeySpec      `json:"dns_tsigkeys,omitempty" yaml:"dns_tsigkeys,omitempty"`         // designate tsig keys
	Ec2Creds        []Ec2CredSpec         `json:"ec2_creds,omitempty" yaml:"ec2_creds,omitempty"`               // ec2 credentions for user
}

type RBACPolicySpec struct {
	ObjectType       string `json:"object_type" yaml:"object_type"`               // The type of the object that the RBAC policy affects. Types include qos-policy or network.
	ObjectName       string `json:"object_name" yaml:"object_name"`               // The name of the object (like networkname@project@domain) or
	Action           string `json:"action" yaml:"action"`                         // Action for the RBAC policy which is access_as_external or access_as_shared.
	TargetTenantName string `json:"target_tenant_name" yaml:"target_tenant_name"` // The name of the target tenant (project@domain) or
}

type RegionSpec struct {
	ID             string `json:"id" yaml:"id"`                                       // the region id
	Description    string `json:"description,omitempty" yaml:"description,omitempty"` // the regions description
	ParentRegionID string `json:"parent_region_id" yaml:"parent_region_id"`           // the (optional) id of the parent region

}

type RoleAssignmentSpec struct {
	Role      string `json:"role" yaml:"role"`                                 // the role name
	Domain    string `json:"domain,omitempty" yaml:"domain,omitempty"`         // domain-role-assigment: the domain name
	Project   string `json:"project,omitempty" yaml:"project,omitempty"`       // project-role-assignment: project_name@domain_name
	ProjectID string `json:"project_id,omitempty" yaml:"project_id,omitempty"` // project-role assignment: project id
	System    string `json:"system,omitempty" yaml:"system,omitempty"`         // system-role assignment (currently only 'all' is supported)
	Group     string `json:"group,omitempty" yaml:"group,omitempty"`           // group name (for project/domain group-role-assignment)
	User      string `json:"user,omitempty" yaml:"user,omitempty"`             // user name (for project/domain user-role-assignment)
	Inherited *bool  `json:"inherited,omitempty" yaml:"inherited,omitempty"`   // boolean flag to indicate if the role-assignment should be inherited
}

type RoleInferenceSpec struct {
	PriorRole   string `json:"prior_role" yaml:"prior_role"`     // the prior role name
	ImpliedRole string `json:"implied_role" yaml:"implied_role"` // the implied role
}

type RoleSpec struct {
	ID          string `json:"id" yaml:"id"`
	DomainID    string `json:"domain_id" yaml:"domain_id"`
	Name        string `json:"name" yaml:"name"`                                   // the role name
	Description string `json:"description,omitempty" yaml:"description,omitempty"` // the role description
}

type RouterPortSpec struct {
	PortId   string `json:"port_id,omitempty" yaml:"port_id,omitempty"`     // The ID of the port. One of subnet_id or port_id must be specified.
	Subnet   string `json:"subnet,omitempty" yaml:"subnet,omitempty"`       // Subnet-name (subnet-name or subnet-name@project@domain). Looks up a subnet-id by name.
	SubnetId string `json:"subnet_id,omitempty" yaml:"subnet_id,omitempty"` // The ID of the subnet. One of subnet_id or port_id must be specified.
}

type RouterRouteSpec struct {
	Destination string `json:"destination,omitempty" yaml:"destination,omitempty"` // Route destination
	Nexthop     string `json:"nexthop,omitempty" yaml:"nexthop,omitempty"`         // Route nexthop
}

type RouterSpec struct {
	Name                string                   `json:"name" yaml:"name"`                                         // router name
	AdminStateUp        *bool                    `json:"admin_state_up,omitempty" yaml:"admin_state_up,omitempty"` // The administrative state of the router, which is up (true) or down (false).
	Description         string                   `json:"description,omitempty" yaml:"description,omitempty"`       // description of the router
	ExternalGatewayInfo *ExternalGatewayInfoSpec `json:"external_gateway_info,omitempty" yaml:"external_gateway_info,omitempty"`
	Distributed         *bool                    `json:"distributed,omitempty" yaml:"distributed,omitempty"`         // true indicates a distributed router. It is available when dvr extension is enabled.
	HA                  *bool                    `json:"ha,omitempty" yaml:"ha,omitempty"`                           // true indicates a highly-available router. It is available when l3-ha extension is enabled.
	FlavorId            string                   `json:"flavor_id,omitempty" yaml:"flavor_id,omitempty"`             // The ID of the flavor associated with the router
	ServiceTypeId       string                   `json:"service_type_id,omitempty" yaml:"service_type_id,omitempty"` // The ID of the service type associated with the router.
	RouterPorts         []RouterPortSpec         `json:"interfaces,omitempty" yaml:"interfaces,omitempty"`           // Router internal interface specs. This means a specified subnet is attached to a router as an internal router interface.
	Routes              []RouterRouteSpec        `json:"routes,omitempty" yaml:"routes,omitempty"`                   // The extra routes configuration for L3 router. It is available when extraroute extension is enabled.
}

type ServiceSpec struct {
	ID          string         `json:"id"`
	Type        string         `json:"type" yaml:"type"`                                   // service type
	Enabled     bool           `json:"enabled" yaml:"enabled"`                             // boolean flag to indicate if the service is enabled
	Name        string         `json:"name" yaml:"name"`                                   // service name
	Description string         `json:"description,omitempty" yaml:"description,omitempty"` // description of the service
	Endpoints   []EndpointSpec `json:"endpoints,omitempty" yaml:"endpoints,omitempty"`
}

type ShareTypeSpec struct {
	Name        string                   `json:"name" yaml:"name"`                                   // share type name
	Description string                   `json:"description,omitempty" yaml:"description,omitempty"` // description
	IsPublic    *bool                    `json:"is_public,omitempty" yaml:"is_public,omitempty"`     // share type is public or private; deafult is public
	Specs       *ShareTypeSpecifiedSpecs `json:"specs" yaml:"specs"`                                 // specs that are typed
	ExtraSpecs  map[string]string        `json:"extra_specs,omitempty" yaml:"extra_specs,omitempty"` // extra specs that are not typed or validated
}

type ShareTypeSpecifiedSpecs struct {
	DHSS            *bool `json:"driver_handles_share_servers" yaml:"driver_handles_share_servers"` // driver_handles_share_servers, required
	SnapshotSupport *bool `json:"snapshot_support,omitempty" yaml:"snapshot_support,omitempty"`     // snapshot support, optional
}

type SubnetPoolSpec struct {
	Name             string   `json:"name" yaml:"name"`                                               // subnet-pool name
	DefaultQuota     int      `json:"default_quota,omitempty" yaml:"default_quota,omitempty"`         // A per-project quota on the prefix space that can be allocated from the subnet pool for project subnets.
	Prefixes         []string `json:"prefixes" yaml:"prefixes"`                                       // A list of subnet prefixes to assign to the subnet pool
	MinPrefixLen     int      `json:"min_prefixlen,omitempty" yaml:"min_prefixlen,omitempty"`         // The smallest prefix that can be allocated from a subnet pool.
	Shared           *bool    `json:"shared,omitempty" yaml:"shared,omitempty"`                       // Admin-only. Indicates whether this network is shared across all projects.
	DefaultPrefixLen int      `json:"default_prefixlen,omitempty" yaml:"default_prefixlen,omitempty"` // The size of the prefix to allocate when the cidr or prefixlen attributes are omitted when you create the subnet. Default is min_prefixlen.
	MaxPrefixLen     int      `json:"max_prefixlen,omitempty" yaml:"max_prefixlen,omitempty"`         // The maximum prefix size that can be allocated from the subnet pool. For IPv4 subnet pools, default is 32. For IPv6 subnet pools, default is 128.
	AddressScopeId   string   `json:"address_scope_id,omitempty" yaml:"address_scope_id,omitempty"`   // An address scope to assign to the subnet pool.
	IsDefault        *bool    `json:"is_default,omitempty" yaml:"is_default,omitempty"`
	Description      string   `json:"description,omitempty" yaml:"description,omitempty"` // description of the subnet-pool
}

type SubnetSpec struct {
	Name            string   `json:"name" yaml:"name"`                                               // network name
	EnableDHCP      *bool    `json:"enable_dhcp,omitempty" yaml:"enable_dhcp,omitempty"`             // Indicates whether dhcp is enabled or disabled for the subnet. Default is true.
	DNSNameServers  []string `json:"dns_name_servers,omitempty" yaml:"dns_name_servers,omitempty"`   // List of dns name servers associated with the subnet.
	AllocationPools []string `json:"allocation_pools,omitempty" yaml:"allocation_pools,omitempty"`   // Allocation pools with start and end IP addresses for this subnet. If allocation_pools are not specified, OpenStack Networking automatically allocates pools for covering all IP addresses in the CIDR, excluding the address reserved for the subnet gateway by default.
	HostRoutes      []string `json:"host_routes,omitempty" yaml:"host_routes,omitempty"`             // Additional routes for the subnet. A list of dictionaries with destination and nexthop parameters.
	IpVersion       int      `json:"ip_version,omitempty" yaml:"ip_version,omitempty"`               // ip-version 4 or 6
	GatewayIP       string   `json:"gateway_ip,omitempty" yaml:"gateway_ip,omitempty"`               // Gateway IP of this subnet. If the value is null that implies no gateway is associated with the subnet. If the gateway_ip is not specified, OpenStack Networking allocates an address from the CIDR for the gateway for the subnet by default.
	CIDR            string   `json:"cidr,omitempty" yaml:"cidr,omitempty"`                           // The CIDR of the subnet.
	Prefixlen       *int     `json:"prefixlen,omitempty" yaml:"prefixlen,omitempty"`                 // The prefix length to use for subnet allocation from a subnet pool. If not specified, the default_prefixlen value of the subnet pool will be used.
	Description     string   `json:"description,omitempty" yaml:"description,omitempty"`             // description of the network
	IPV6AddressMode string   `json:"ipv6_address_mode,omitempty" yaml:"ipv6_address_mode,omitempty"` // The IPv6 address modes specifies mechanisms for assigning IP addresses. Value is slaac, dhcpv6-stateful, dhcpv6-stateless.
	IPV6RaMode      string   `json:"ipv6_ra_mode,omitempty" yaml:"ipv6_ra_mode,omitempty"`           // The IPv6 router advertisement specifies whether the networking service should transmit ICMPv6 packets, for a subnet. Value is slaac, dhcpv6-stateful, dhcpv6-stateless.
	SegmentlId      string   `json:"segment_id,omitempty" yaml:"segment_id,omitempty"`               // The ID of a network segment the subnet is associated with. It is available when segment extension is enabled.
	SubnetPoolId    string   `json:"subnetpool_id,omitempty" yaml:"subnetpool_id,omitempty"`         // Subnet-pool ID
	SubnetPool      string   `json:"subnetpool,omitempty" yaml:"subnetpool,omitempty"`               // Subnet-pool name within teh subnets project
	Tags            []string `json:"tags,omitempty" yaml:"tags,omitempty"`                           // List of subnet tags (see https://developer.openstack.org/api-ref/networking/v2/index.html#tag-extension-tags)
}

type SwiftAccountSpec struct {
	Enabled    *bool                `json:"enabled,omitempty" yaml:"enabled,omitempty"`       // Create a swift account
	Containers []SwiftContainerSpec `json:"containers,omitempty" yaml:"containers,omitempty"` // Containers
}

type SwiftContainerSpec struct {
	Name     string            `json:"name" yaml:"name"`                             // Container name
	Metadata map[string]string `json:"metadata,omitempty" yaml:"metadata,omitempty"` // Container metadata
}

type UserSpec struct {
	// +kubebuilder:validation:Required
	Name             string               `json:"name" yaml:"name"`                                             // username
	Description      string               `json:"description,omitempty" yaml:"description,omitempty"`           // description of the user
	Password         string               `json:"password,omitempty" yaml:"password,omitempty"`                 // password of the user (only evaluated on user creation)
	Enabled          *bool                `json:"enabled,omitempty" yaml:"enabled,omitempty"`                   // boolean flag to indicate if the user is enabled
	RoleAssignments  []RoleAssignmentSpec `json:"role_assignments,omitempty" yaml:"role_assignments,omitempty"` // list of the users role-assignments
	DefaultProjectID string               `json:"default_project,omitempty" yaml:"default_project,omitempty"`   // default project scope for the user
}

type VolumeTypeSpec struct {
	Name        string            `json:"name" yaml:"name"`                                   // volume type name
	Description string            `json:"description,omitempty" yaml:"description,omitempty"` // description
	IsPublic    *bool             `json:"is_public,omitempty" yaml:"is_public,omitempty"`     // volume type is public or private; deafult is public
	ExtraSpecs  map[string]string `json:"extra_specs,omitempty" yaml:"extra_specs,omitempty"` // extra specs that are not typed or validated
}