v1alpha1

type ACLSpec struct {
	// AllowedRanges allows to set a list of allowed public IP ranges that can access
	// the managed cluster. When empty, all IP ranges are DENIED. Make sure the nodes
	// of your management cluster can still access the cluster by allowing their IPs.
	// +kubebuilder:validation:MaxItems=30
	// +listType=set
	// +optional
	AllowedRanges []CIDR `json:"allowedRanges,omitempty"`
}

type AutoUpgradeSpec struct {
	// Defines whether auto upgrade is enabled for the cluster.
	Enabled bool `json:"enabled"`

	// Maintenance window of the cluster auto upgrades.
	// +optional
	MaintenanceWindow *MaintenanceWindowSpec `json:"maintenanceWindow,omitempty"`
}

type AutoscalerSpec struct {
	// Disable the cluster autoscaler.
	// +optional
	ScaleDownDisabled *bool `json:"scaleDownDisabled,omitempty"`

	// How long after scale up the scale down evaluation resumes.
	// +optional
	ScaleDownDelayAfterAdd *string `json:"scaleDownDelayAfterAdd,omitempty"`

	// Type of resource estimator to be used in scale up.
	// +kubebuilder:validation:Enum=binpacking
	// +optional
	Estimator *string `json:"estimator,omitempty"`

	// Type of node group expander to be used in scale up.
	// +kubebuilder:validation:Enum=random;most_pods;least_waste;priority;price
	// +optional
	Expander *string `json:"expander,omitempty"`

	// Ignore DaemonSet pods when calculating resource utilization for scaling down.
	// +optional
	IgnoreDaemonsetsUtilization *bool `json:"ignoreDaemonsetsUtilization,omitempty"`

	// Detect similar node groups and balance the number of nodes between them.
	// +optional
	BalanceSimilarNodeGroups *bool `json:"balanceSimilarNodeGroups,omitempty"`

	// Pods with priority below cutoff will be expendable. They can be killed without
	// any consideration during scale down and they won't cause scale up.
	// Pods with null priority (PodPriority disabled) are non expendable.
	ExpendablePodsPriorityCutoff *int32 `json:"expendablePodsPriorityCutoff,omitempty"`

	// How long a node should be unneeded before it is eligible to be scaled down.
	// +optional
	ScaleDownUnneededTime *string `json:"scaleDownUnneededTime,omitempty"`

	// Node utilization level, defined as a sum of requested resources divided
	// by capacity, below which a node can be considered for scale down.
	// +kubebuilder:validation:Format="float"
	// +optional
	ScaleDownUtilizationThreshold *string `json:"scaleDownUtilizationThreshold,omitempty"`

	// Maximum number of seconds the cluster autoscaler waits for pod termination
	// when trying to scale down a node.
	// +optional
	MaxGracefulTerminationSec *int32 `json:"maxGracefulTerminationSec,omitempty"`
}

type CIDR string

type ControlPlaneDNSSpec struct {
	// Domain is the DNS Zone that this record should live in. It must be pre-existing in your Scaleway account.
	// The format must be a string that conforms to the definition of a subdomain in DNS (RFC 1123).
	// +kubebuilder:validation:Pattern:=^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
	Domain string `json:"domain"`
	// Name is the DNS short name of the record (non-FQDN). The format must consist of
	// alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character.
	// +kubebuilder:validation:Pattern:=^[a-z0-9]([-a-z0-9.]*[a-z0-9])?$
	Name string `json:"name"`
}

type ControlPlaneLoadBalancerSpec struct {
	// +kubebuilder:validation:XValidation:rule="!has(oldSelf.ip) || self.ip == oldSelf.ip",message="ip is immutable"
	// +kubebuilder:validation:XValidation:rule="!has(oldSelf.zone) || self.zone == oldSelf.zone",message="zone is immutable"
	// +kubebuilder:validation:XValidation:rule="!has(oldSelf.privateIP) || self.privateIP == oldSelf.privateIP",message="privateIP is immutable"
	LoadBalancerSpec `json:",inline"`

	// AllowedRanges allows to set a list of allowed IP ranges that can access
	// the cluster through the loadbalancer. When unset, all IP ranges are allowed.
	// To allow the cluster to work properly, public IPs of nodes and Public
	// Gateways will automatically be allowed. However, if this field is set,
	// you MUST manually allow IPs of the nodes of your management cluster.
	// +kubebuilder:validation:MaxItems=30
	// +listType=set
	// +optional
	AllowedRanges []CIDR `json:"allowedRanges,omitempty"`

	// Private disables the creation of a public IP on the LoadBalancers when it's set to true.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	Private *bool `json:"private,omitempty"`
}

type ControlPlanePrivateDNSSpec struct {
	// Name is the DNS short name of the record (non-FQDN). The format must consist of
	// alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character.
	// +kubebuilder:validation:Pattern:=^[a-z0-9]([-a-z0-9.]*[a-z0-9])?$
	Name string `json:"name"`
}

type ImageSpec struct {
	// ID of the image.
	ID *string `json:"id,omitempty"`
	// Name of the image.
	Name *string `json:"name,omitempty"`
	// Label of the image.
	Label *string `json:"label,omitempty"`
}

type LoadBalancerSpec struct {
	// Zone where to create the loadbalancer. Must be in the same region as the
	// cluster. Defaults to the first zone of the region.
	// +optional
	Zone *string `json:"zone,omitempty"`

	// Load Balancer commercial offer type.
	// +kubebuilder:default="LB-S"
	// +optional
	Type *string `json:"type,omitempty"`

	// IP to use when creating a loadbalancer.
	// +kubebuilder:validation:Format=ipv4
	// +optional
	IP *string `json:"ip,omitempty"`

	// Private IP to use when attaching a loadbalancer to a Private Network.
	// +kubebuilder:validation:Format=ipv4
	// +optional
	PrivateIP *string `json:"privateIP,omitempty"`
}

type MaintenanceWindowSpec struct {
	// Start time of the two-hour maintenance window.
	// +optional
	StartHour *int32 `json:"startHour,omitempty"`

	// Day of the week for the maintenance window.
	// +kubebuilder:validation:Enum=any;monday;tuesday;wednesday;thursday;friday;saturday;sunday
	// +optional
	Day *string `json:"day,omitempty"`
}

type ManagedNetworkSpec struct {
	// PrivateNetwork allows attaching machines of the cluster to a Private Network.
	// +kubebuilder:validation:XValidation:rule="has(self.vpcID) == has(oldSelf.vpcID)",message="vpcID cannot be added or removed"
	// +kubebuilder:validation:XValidation:rule="has(self.id) == has(oldSelf.id)",message="id cannot be added or removed"
	// +kubebuilder:validation:XValidation:rule="has(self.subnet) == has(oldSelf.subnet)",message="subnet cannot be added or removed"
	// +kubebuilder:validation:XValidation:rule="has(self.id) && !has(self.subnet) || !has(self.id)",message="subnet cannot be set when id is set"
	// +kubebuilder:validation:XValidation:rule="has(self.id) && !has(self.vpcID) || !has(self.id)",message="vpcID cannot be set when id is set"
	// +optional
	PrivateNetwork *PrivateNetworkParams `json:"privateNetwork,omitempty"`

	// PublicGateways allows to create Public Gateways that will be attached to the
	// Private Network of the cluster.
	// +kubebuilder:validation:MaxItems=6
	// +optional
	PublicGateways []PublicGatewaySpec `json:"publicGateways,omitempty"`
}

type ManagedNetworkStatus struct {
	// PrivateNetworkID is the ID of the Private Network that is attached to the cluster.
	// +optional
	PrivateNetworkID *string `json:"privateNetworkID,omitempty"`
}

type NetworkSpec struct {
	// ControlPlaneLoadBalancer contains loadbalancer settings.
	// +optional
	ControlPlaneLoadBalancer *ControlPlaneLoadBalancerSpec `json:"controlPlaneLoadBalancer,omitempty"`

	// ControlPlaneExtraLoadBalancers allows configuring additional LoadBalancers.
	// Because Scaleway LoadBalancers are currently zonal resources, you may set
	// up to 3 additional LoadBalancers for achieving regional redundancy. It is
	// mandatory to set the controlPlaneDNS field when you do so.
	// This may be removed in the future, when Scaleway supports regional LoadBalancers.
	// +kubebuilder:validation:MaxItems=3
	// +optional
	ControlPlaneExtraLoadBalancers []LoadBalancerSpec `json:"controlPlaneExtraLoadBalancers,omitempty"`

	// ControlPlaneDNS allows configuring a Scaleway Domain DNS Zone.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	ControlPlaneDNS *ControlPlaneDNSSpec `json:"controlPlaneDNS,omitempty"`

	// ControlPlanePrivateDNS allows configuring the DNS Zone of the VPC with
	// records that point to the control plane LoadBalancers. This field is only
	// available when the control plane LoadBalancers are private. Only one of
	// ControlPlaneDNS or ControlPlanePrivateDNS can be set.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	ControlPlanePrivateDNS *ControlPlanePrivateDNSSpec `json:"controlPlanePrivateDNS,omitempty"`

	// PrivateNetwork allows attaching machines of the cluster to a Private Network.
	// +optional
	PrivateNetwork *PrivateNetworkSpec `json:"privateNetwork,omitempty"`

	// PublicGateways allows to create Public Gateways that will be attached to the
	// Private Network of the cluster.
	// +kubebuilder:validation:MaxItems=6
	// +optional
	PublicGateways []PublicGatewaySpec `json:"publicGateways,omitempty"`
}

type NetworkStatus struct {
	// VPCID is set if the cluster has an associated Private Network.
	// +optional
	VPCID *string `json:"vpcID,omitempty"`

	// PrivateNetworkID is set if the cluster has an associated Private Network.
	// +optional
	PrivateNetworkID *string `json:"privateNetworkID,omitempty"`

	// PublicGatewayIDs is a list of Public Gateway IDs.
	// +optional
	PublicGatewayIDs []string `json:"publicGatewayIDs,omitempty"`

	// LoadBalancerIP is the public IP of the cluster control-plane.
	// +optional
	LoadBalancerIP *string `json:"loadBalancerIP,omitempty"`

	// ExtraLoadBalancerIPs is a list of IPs of the extra loadbalancers.
	// +optional
	ExtraLoadBalancerIPs []string `json:"extraLoadBalancerIPs,omitempty"`
}

type OnDeleteSpec struct {
	// WithAdditionalResources allows to also automatically delete all volumes
	// (including those with volume type "retain"), empty Private Networks and
	// Load Balancers whose names start with cluster ID.
	// +optional
	WithAdditionalResources *bool `json:"withAdditionalResources,omitempty"`
}

type OpenIDConnectSpec struct {
	// URL of the provider which allows the API server to discover public signing keys.
	// Only URLs using the https:// scheme are accepted. This is typically the provider's
	// discovery URL without a path, for example "https://accounts.google.com" or "https://login.salesforce.com".
	IssuerURL string `json:"issuerURL"`

	// A client ID that all tokens must be issued for.
	ClientID string `json:"clientID"`

	// JWT claim to use as the user name. The default is "sub", which is expected
	// to be the end user's unique identifier. Admins can choose other claims,
	// such as email or name, depending on their provider. However, claims other
	// than email will be prefixed with the issuer URL to prevent name collision.
	// +optional
	UsernameClaim *string `json:"usernameClaim,omitempty"`

	// Prefix prepended to username claims to prevent name collision (such as "system:" users).
	// For example, the value "oidc:"" will create usernames like "oidc:jane.doe".
	// If this flag is not provided and "username_claim" is a value other than email,
	// the prefix defaults to "( Issuer URL )#" where "( Issuer URL )" is the value of "issuer_url".
	// The value "-" can be used to disable all prefixing.
	// +optional
	UsernamePrefix *string `json:"usernamePrefix,omitempty"`

	// JWT claim to use as the user's group.
	// +optional
	GroupsClaim []string `json:"groupsClaim,omitempty"`

	// Prefix prepended to group claims to prevent name collision (such as "system:" groups).
	// For example, the value "oidc:" will create group names like "oidc:engineering" and "oidc:infra".
	// +optional
	GroupsPrefix *string `json:"groupsPrefix,omitempty"`

	// Multiple key=value pairs describing a required claim in the ID token. If set,
	// the claims are verified to be present in the ID token with a matching value.
	// +optional
	RequiredClaim []string `json:"requiredClaim,omitempty"`
}

type PlacementGroupSpec struct {
	// ID of the placement group.
	// +optional
	ID *string `json:"id,omitempty"`
	// Name of the placement group.
	// +optional
	Name *string `json:"name,omitempty"`
}

type PrivateNetworkParams struct {
	// Set a Private Network ID to reuse an existing Private Network.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	ID *string `json:"id,omitempty"`

	// Set the VPC ID where the new Private Network will be created.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	VPCID *string `json:"vpcID,omitempty"`

	// Optional subnet for the Private Network. Only used on newly created Private Networks.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	Subnet *string `json:"subnet,omitempty"`
}

type PrivateNetworkSpec struct {
	PrivateNetworkParams `json:",inline"`

	// Set to true to automatically attach machines to a Private Network.
	// The Private Network is automatically created if no existing Private
	// Network ID is provided.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	Enabled bool `json:"enabled"`
}

type PublicGatewaySpec struct {
	// Public Gateway commercial offer type.
	// +kubebuilder:default="VPC-GW-S"
	// +optional
	Type *string `json:"type,omitempty"`

	// IP to use when creating a Public Gateway.
	// +kubebuilder:validation:Format=ipv4
	// +optional
	IP *string `json:"ip,omitempty"`

	// Zone where to create the Public Gateway. Must be in the same region as the
	// cluster. Defaults to the first zone of the region.
	// +optional
	Zone *string `json:"zone,omitempty"`
}

type PublicNetworkSpec struct {
	// EnableIPv4 defines whether server has IPv4 address enabled.
	// +optional
	EnableIPv4 *bool `json:"enableIPv4,omitempty"`
	// EnableIPv6 defines whether server has IPv6 addresses enabled.
	// +optional
	EnableIPv6 *bool `json:"enableIPv6,omitempty"`
}

type RootVolumeSpec struct {
	// Size of the root volume in GB. Defaults to 20 GB.
	// +kubebuilder:default=20
	// +kubebuilder:validation:Minimum=8
	// +optional
	Size *int64 `json:"size,omitempty"`

	// Type of the root volume. Can be local or block. Note that not all types
	// of instances support local volumes.
	// +kubebuilder:validation:Enum=local;block
	// +kubebuilder:default="block"
	// +optional
	Type *string `json:"type,omitempty"`

	// IOPS is the number of IOPS requested for the disk. This is only applicable for block volumes.
	// +optional
	IOPS *int64 `json:"iops,omitempty"`
}

type ScalewayCluster struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ScalewayClusterSpec   `json:"spec,omitempty"`
	Status ScalewayClusterStatus `json:"status,omitempty"`
}

type ScalewayClusterList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ScalewayCluster `json:"items"`
}

type ScalewayClusterSpec struct {
	// ProjectID is the Scaleway project ID where the cluster will be created.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +kubebuilder:validation:Pattern:="^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$"
	ProjectID string `json:"projectID"`

	// Region represents the region where the cluster will be hosted.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +kubebuilder:validation:Pattern:="^[a-z]{2}-[a-z]{3}$"
	Region string `json:"region"`

	// Network contains network related options for the cluster.
	// +optional
	Network *NetworkSpec `json:"network,omitempty"`

	// ScalewaySecretName is the name of the secret that contains the Scaleway client parameters.
	// The following keys are required: SCW_ACCESS_KEY, SCW_SECRET_KEY.
	// The following key is optional: SCW_API_URL.
	ScalewaySecretName string `json:"scalewaySecretName"`

	// FailureDomains is a list of failure domains where the control-plane nodes will be created.
	// Failure domains correspond to Scaleway zones inside the cluster region (e.g. fr-par-1).
	// +listType=set
	// +optional
	FailureDomains []string `json:"failureDomains,omitempty"`

	// ControlPlaneEndpoint represents the endpoint used to communicate with the control plane.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	ControlPlaneEndpoint clusterv1beta1.APIEndpoint `json:"controlPlaneEndpoint,omitempty"`
}

type ScalewayClusterStatus struct {
	// Ready denotes that the Scaleway cluster infrastructure is fully provisioned.
	// NOTE: this field is part of the Cluster API contract and it is used to orchestrate provisioning.
	// The value of this field is never updated after provisioning is completed.
	// +optional
	Ready bool `json:"ready"`

	// Network contains information about network resources of the cluster.
	// +optional
	Network *NetworkStatus `json:"network,omitempty"`

	// FailureDomains is a list of failure domain objects synced from the infrastructure provider.
	// +optional
	FailureDomains clusterv1beta1.FailureDomains `json:"failureDomains,omitempty"`
}

type ScalewayClusterTemplate struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec ScalewayClusterTemplateSpec `json:"spec,omitempty"`
}

type ScalewayClusterTemplateList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ScalewayClusterTemplate `json:"items"`
}

type ScalewayClusterTemplateResource struct {
	// Standard object's metadata.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	// +optional
	ObjectMeta metav1.ObjectMeta   `json:"metadata,omitempty"`
	Spec       ScalewayClusterSpec `json:"spec"`
}

type ScalewayClusterTemplateSpec struct {
	Template ScalewayClusterTemplateResource `json:"template"`
}

type ScalewayMachine struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// +kubebuilder:validation:Required
	Spec   ScalewayMachineSpec   `json:"spec,omitempty"`
	Status ScalewayMachineStatus `json:"status,omitempty"`
}

type ScalewayMachineList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ScalewayMachine `json:"items"`
}

type ScalewayMachineSpec struct {
	// ProviderID must match the provider ID as seen on the node object corresponding to this machine.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	ProviderID *string `json:"providerID,omitempty"`

	// CommercialType of instance (e.g. PRO2-S).
	// +kubebuilder:default="PRO2-S"
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	CommercialType string `json:"commercialType"`

	// Image ID, Name or Label to use to create the instance.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	Image ImageSpec `json:"image"`

	// RootVolume defines the characteristics of the system (root) volume.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	RootVolume *RootVolumeSpec `json:"rootVolume,omitempty"`

	// PublicNetwork allows attaching public IPs to the instance.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	PublicNetwork *PublicNetworkSpec `json:"publicNetwork,omitempty"`

	// PlacementGroup allows attaching a Placement Group to the instance.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	PlacementGroup *PlacementGroupSpec `json:"placementGroup,omitempty"`

	// SecurityGroup allows attaching a Security Group to the instance.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	SecurityGroup *SecurityGroupSpec `json:"securityGroup,omitempty"`
}

type ScalewayMachineStatus struct {
	// Addresses contains the associated addresses for the machine.
	// +optional
	Addresses []clusterv1beta1.MachineAddress `json:"addresses,omitempty"`

	// Ready denotes that the Scaleway machine infrastructure is fully provisioned.
	// NOTE: this field is part of the Cluster API contract and it is used to orchestrate provisioning.
	// The value of this field is never updated after provisioning is completed. Please use conditions
	// to check the operational state of the infra machine.
	// +optional
	Ready bool `json:"ready"`
}

type ScalewayMachineTemplate struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec ScalewayMachineTemplateSpec `json:"spec,omitempty"`
}

type ScalewayMachineTemplateList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ScalewayMachineTemplate `json:"items"`
}

type ScalewayMachineTemplateResource struct {
	// Standard object's metadata.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	// +optional
	ObjectMeta metav1.ObjectMeta   `json:"metadata,omitempty"`
	Spec       ScalewayMachineSpec `json:"spec"`
}

type ScalewayMachineTemplateSpec struct {
	Template ScalewayMachineTemplateResource `json:"template"`
}

type ScalewayManagedCluster struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty,omitzero"`

	// spec defines the desired state of ScalewayManagedCluster
	// +required
	Spec ScalewayManagedClusterSpec `json:"spec"`

	// status defines the observed state of ScalewayManagedCluster
	// +optional
	Status ScalewayManagedClusterStatus `json:"status,omitempty,omitzero"`
}

type ScalewayManagedClusterList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ScalewayManagedCluster `json:"items"`
}

type ScalewayManagedClusterSpec struct {
	// Region where the managed cluster will be created.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +kubebuilder:validation:MinLength:=2
	Region string `json:"region"`

	// ProjectID in which the managed cluster will be created.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +kubebuilder:validation:MinLength:=2
	ProjectID string `json:"projectID"`

	// ScalewaySecretName is the name of the secret that contains the Scaleway client parameters.
	// The following keys are required: SCW_ACCESS_KEY, SCW_SECRET_KEY.
	// The following key is optional: SCW_API_URL.
	// +kubebuilder:validation:MinLength:=1
	ScalewaySecretName string `json:"scalewaySecretName"`

	// Network defines the network configuration of the managed cluster.
	// +optional
	Network *ManagedNetworkSpec `json:"network,omitempty"`

	// ControlPlaneEndpoint represents the endpoint used to communicate with the control plane.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	ControlPlaneEndpoint clusterv1beta1.APIEndpoint `json:"controlPlaneEndpoint,omitempty,omitzero"`
}

type ScalewayManagedClusterStatus struct {
	// Ready denotes that the Scaleway managed cluster infrastructure is fully provisioned.
	// NOTE: this field is part of the Cluster API contract and it is used to orchestrate provisioning.
	// The value of this field is never updated after provisioning is completed.
	// +optional
	Ready bool `json:"ready"`

	// Network contains information about currently provisioned network resources.
	// +optional
	Network *ManagedNetworkStatus `json:"network,omitempty"`
}

type ScalewayManagedControlPlane struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty,omitzero"`

	// spec defines the desired state of ScalewayManagedControlPlane
	// +required
	Spec ScalewayManagedControlPlaneSpec `json:"spec"`

	// status defines the observed state of ScalewayManagedControlPlane
	// +optional
	Status ScalewayManagedControlPlaneStatus `json:"status,omitempty,omitzero"`
}

type ScalewayManagedControlPlaneList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ScalewayManagedControlPlane `json:"items"`
}

type ScalewayManagedControlPlaneSpec struct {
	// ClusterName allows you to specify the name of the Scaleway managed cluster.
	// If you don't specify a name then a default name will be created
	// based on the namespace and name of the managed control plane.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +kubebuilder:validation:MaxLength:=100
	// +optional
	ClusterName *string `json:"clusterName,omitempty"`

	// Type of the cluster (e.g. kapsule, multicloud, etc.).
	// +kubebuilder:default="kapsule"
	Type string `json:"type"`

	// Version defines the desired Kubernetes version.
	// +kubebuilder:validation:MinLength:=2
	Version string `json:"version"`

	// CNI plugin running in the cluster.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +kubebuilder:validation:Enum=cilium;calico;kilo;none
	// +optional
	CNI *string `json:"cni,omitempty"`

	// AdditionalTags that will be added to the default tags.
	// +optional
	AdditionalTags []string `json:"additionalTags,omitempty"`

	// Autoscaler configuration of the cluster.
	// +optional
	Autoscaler *AutoscalerSpec `json:"autoscaler,omitempty"`

	// AutoUpgrade configuration of the cluster.
	// +optional
	AutoUpgrade *AutoUpgradeSpec `json:"autoUpgrade,omitempty"`

	// Feature gates to enable.
	// +optional
	FeatureGates []string `json:"featureGates,omitempty"`

	// Admission plugins to enable.
	// +optional
	AdmissionPlugins []string `json:"admissionPlugins,omitempty"`

	// OpenIDConnect defines the OpenID Connect configuration of the Kubernetes API server.
	OpenIDConnect *OpenIDConnectSpec `json:"openIDConnect,omitempty"`

	// APIServerCertSANs defines additional Subject Alternative Names for the
	// Kubernetes API server certificate.
	// +optional
	APIServerCertSANs []string `json:"apiServerCertSANs,omitempty"`

	// OnDelete configures the settings to apply when deleting the Scaleway managed cluster.
	// +optional
	OnDelete *OnDeleteSpec `json:"onDelete,omitempty"`

	// ACLSpec configures the ACLs of the managed cluster. If not set, ACLs
	// will be set to 0.0.0.0/0.
	// +optional
	ACL *ACLSpec `json:"acl,omitempty"`

	// EnablePrivateEndpoint defines whether the apiserver's internal address
	// is used as the cluster endpoint.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	EnablePrivateEndpoint *bool `json:"enablePrivateEndpoint,omitempty"`

	// ControlPlaneEndpoint represents the endpoint used to communicate with the control plane.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	ControlPlaneEndpoint clusterv1beta1.APIEndpoint `json:"controlPlaneEndpoint,omitempty"`
}

type ScalewayManagedControlPlaneStatus struct {
	// Ready is true when the provider resource is ready.
	// +optional
	Ready bool `json:"ready,omitempty"`

	// Initialized is true when the control plane is available for initial contact.
	// This may occur before the control plane is fully ready.
	// +optional
	Initialized bool `json:"initialized,omitempty"`

	// ExternalManagedControlPlane is a bool that should be set to true if the
	// Node objects do not exist in the cluster.
	// +kubebuilder:default=true
	// +optional
	ExternalManagedControlPlane bool `json:"externalManagedControlPlane,omitempty"`

	// Version represents the version of the Scaleway managed control plane.
	// +optional
	Version *string `json:"version,omitempty"`
}

type ScalewayManagedMachinePool struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty,omitzero"`

	// spec defines the desired state of ScalewayManagedMachinePool
	// +required
	Spec ScalewayManagedMachinePoolSpec `json:"spec"`

	// status defines the observed state of ScalewayManagedMachinePool
	// +optional
	Status ScalewayManagedMachinePoolStatus `json:"status,omitempty,omitzero"`
}

type ScalewayManagedMachinePoolList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ScalewayManagedMachinePool `json:"items"`
}

type ScalewayManagedMachinePoolSpec struct {
	// NodeType is the type of Scaleway Instance wanted for the pool. Nodes with
	// insufficient memory are not eligible (DEV1-S, PLAY2-PICO, STARDUST).
	// "external" is a special node type used to provision instances from other
	// cloud providers in a Kosmos Cluster.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +kubebuilder:validation:MinLength:=2
	NodeType string `json:"nodeType"`

	// Zone in which the pool's nodes will be spawned.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +kubebuilder:validation:MinLength:=2
	Zone string `json:"zone"`

	// PlacementGroupID in which all the nodes of the pool will be created,
	// placement groups are limited to 20 instances.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	PlacementGroupID *string `json:"placementGroupID,omitempty"`

	// Scaling configures the scaling of the pool.
	// +optional
	Scaling *ScalingSpec `json:"scaling,omitempty"`

	// Autohealing defines whether the autohealing feature is enabled for the pool.
	// +optional
	Autohealing *bool `json:"autohealing,omitempty"`

	// AdditionalTags that will be added to the default tags.
	// +optional
	AdditionalTags []string `json:"additionalTags,omitempty"`

	// KubeletArgs defines Kubelet arguments to be used by this pool.
	// +optional
	KubeletArgs map[string]string `json:"kubeletArgs,omitempty"`

	// UpgradePolicy defines the pool's upgrade policy.
	// +optional
	UpgradePolicy *UpgradePolicySpec `json:"upgradePolicy,omitempty"`

	// RootVolumeType is the system volume disk type.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +kubebuilder:validation:Enum=l_ssd;sbs_5k;sbs_15k
	// +optional
	RootVolumeType *string `json:"rootVolumeType,omitempty"`

	// RootVolumeSizeGB is the size of the System volume disk size, in GB.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	RootVolumeSizeGB *int64 `json:"rootVolumeSizeGB,omitempty"`

	// PublicIPDisabled defines if the public IP should be removed from Nodes.
	// To use this feature, your Cluster must have an attached Private Network
	// set up with a Public Gateway.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	PublicIPDisabled *bool `json:"publicIPDisabled,omitempty"`

	// SecurityGroupID in which all the nodes of the pool will be created. If unset,
	// the pool will use default Kapsule security group in current zone.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +optional
	SecurityGroupID *string `json:"securityGroupID,omitempty"`

	// ProviderIDList are the provider IDs of instances in the
	// managed instance group corresponding to the nodegroup represented by this
	// machine pool
	// +optional
	ProviderIDList []string `json:"providerIDList,omitempty"`
}

type ScalewayManagedMachinePoolStatus struct {
	// Ready denotes that the ScalewayManagedMachinePool has joined the cluster
	// +kubebuilder:default=false
	Ready bool `json:"ready"`
	// Replicas is the most recently observed number of replicas.
	// +optional
	Replicas int32 `json:"replicas"`
}

type ScalingSpec struct {
	// Autoscaling defines whether the autoscaling feature is enabled for the pool.
	// +optional
	Autoscaling *bool `json:"autoscaling,omitempty"`

	// MinSize defines the minimum size of the pool. Note that this field is only
	// used when autoscaling is enabled on the pool.
	// +optional
	MinSize *int32 `json:"minSize,omitempty"`

	// MaxSize defines the maximum size of the pool. Note that this field is only
	// used when autoscaling is enabled on the pool.
	// +optional
	MaxSize *int32 `json:"maxSize,omitempty"`
}

type SecurityGroupSpec struct {
	// ID of the security group.
	// +optional
	ID *string `json:"id,omitempty"`
	// +optional
	// Name of the security group.
	Name *string `json:"name,omitempty"`
}

type UpgradePolicySpec struct {
	// MaxUnavailable is the maximum number of available nodes during upgrades.
	// +kubebuilder:validation:Minimum=0
	// +optional
	MaxUnavailable *int32 `json:"maxUnavailable,omitempty"`

	// MaxSurge is the maximum number of additional nodes that can be provisioned
	// during upgrades.
	// +kubebuilder:validation:Minimum=0
	// +optional
	MaxSurge *int32 `json:"maxSurge,omitempty"`
}