v1alpha2

type ACL struct {
	// allowedRanges is a list of allowed public IP ranges that can access
	// the managed cluster. When empty, all IP ranges are DENIED. Make sure the nodes
	// of your management cluster can still access the cluster by allowing their IPs.
	// +kubebuilder:validation:MaxItems=30
	// +optional
	// +listType=set
	AllowedRanges []CIDR `json:"allowedRanges,omitempty"`
}

type AutoUpgrade struct {
	// enabled defines whether auto upgrade is enabled for the cluster.
	// +required
	Enabled *bool `json:"enabled,omitempty"`

	// maintenanceWindow of the cluster auto upgrades.
	// +optional
	MaintenanceWindow MaintenanceWindow `json:"maintenanceWindow,omitempty,omitzero"`
}

type Autoscaler struct {
	// scaleDownDisabled allows to disable the cluster autoscaler.
	// +optional
	ScaleDownDisabled *bool `json:"scaleDownDisabled,omitempty"`

	// scaleDownDelayAfterAdd defines how long after scale up the scale down evaluation resumes.
	// +optional
	// +kubebuilder:validation:Format="duration"
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=10
	ScaleDownDelayAfterAdd string `json:"scaleDownDelayAfterAdd,omitempty"`

	// estimator is the type of resource estimator to be used in scale up.
	// +optional
	// +kubebuilder:validation:Enum=binpacking
	Estimator string `json:"estimator,omitempty"`

	// expander is the type of node group expander to be used in scale up.
	// +optional
	// +kubebuilder:validation:Enum=random;most_pods;least_waste;priority;price
	Expander string `json:"expander,omitempty"`

	// ignoreDaemonsetsUtilization allows to ignore DaemonSet pods when calculating
	// resource utilization for scaling down.
	// +optional
	IgnoreDaemonsetsUtilization *bool `json:"ignoreDaemonsetsUtilization,omitempty"`

	// balanceSimilarNodeGroups allows to detect similar node groups and balance
	// the number of nodes between them.
	// +optional
	BalanceSimilarNodeGroups *bool `json:"balanceSimilarNodeGroups,omitempty"`

	// expendablePodsPriorityCutoff defines the priority threshold below which pods
	// are considered expendable. Pods with priority below cutoff will be expendable.
	// They can be killed without any consideration during scale down and they won't cause scale up.
	// Pods with null priority (PodPriority disabled) are non expendable.
	// +optional
	ExpendablePodsPriorityCutoff *int32 `json:"expendablePodsPriorityCutoff,omitempty"`

	// scaleDownUnneededTime defines how long a node should be unneeded before it
	// is eligible to be scaled down.
	// +optional
	// +kubebuilder:validation:Format="duration"
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=10
	ScaleDownUnneededTime string `json:"scaleDownUnneededTime,omitempty"`

	// scaleDownUtilizationThreshold is the Node utilization level, defined as a
	// sum of requested resources divided by capacity, below which a node can be
	// considered for scale down.
	// +optional
	// +kubebuilder:validation:Format="float"
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=10
	ScaleDownUtilizationThreshold string `json:"scaleDownUtilizationThreshold,omitempty"`

	// maxGracefulTerminationSec is the maximum number of seconds the cluster autoscaler
	// waits for pod termination when trying to scale down a node.
	// +optional
	// +kubebuilder:validation:Minimum=1
	MaxGracefulTerminationSec int32 `json:"maxGracefulTerminationSec,omitempty"`
}

type CIDR string

type ControlPlaneDNS struct {
	// domain is the DNS Zone that this record should live in. It must be pre-existing in your Scaleway account.
	// The format must be a string that conforms to the definition of a subdomain in DNS (RFC 1123).
	// This is optional if the control plane load balancer is private.
	// +optional
	// +kubebuilder:validation:Pattern=^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=253
	Domain string `json:"domain,omitempty"`

	// name is the DNS short name of the record (non-FQDN). The format must consist of
	// alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character.
	// +required
	// +kubebuilder:validation:Pattern=^[a-z0-9]([-a-z0-9.]*[a-z0-9])?$
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	Name string `json:"name,omitempty"`
}

type ControlPlaneLoadBalancer struct {
	// +kubebuilder:validation:XValidation:rule="!has(oldSelf.ip) || self.ip == oldSelf.ip",message="ip is immutable"
	// +kubebuilder:validation:XValidation:rule="!has(oldSelf.zone) || self.zone == oldSelf.zone",message="zone is immutable"
	// +kubebuilder:validation:XValidation:rule="!has(oldSelf.privateIP) || self.privateIP == oldSelf.privateIP",message="privateIP is immutable"
	LoadBalancer `json:",inline"`

	// allowedRanges allows to set a list of allowed IP ranges that can access
	// the cluster through the load balancer. When unset, all IP ranges are allowed.
	// To allow the cluster to work properly, public IPs of nodes and Public
	// Gateways will automatically be allowed. However, if this field is set,
	// you MUST manually allow IPs of the nodes of your management cluster.
	// +optional
	// +listType=set
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=30
	AllowedRanges []CIDR `json:"allowedRanges,omitempty"`

	// private disables the creation of a public IP on the load balancers when it's set to true.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	Private *bool `json:"private,omitempty"`
}

type IDOrName struct {
	// id of the Scaleway resource.
	// +optional
	ID UUID `json:"id,omitempty"`

	// name of the Scaleway resource.
	// +optional
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=100
	Name string `json:"name,omitempty"`
}

type IPv4 string

type Image struct {
	IDOrName `json:",inline"`

	// label of the image (as defined in the marketplace).
	// +optional
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=100
	Label string `json:"label,omitempty"`
}

type LoadBalancer struct {
	// zone where to create the load balancer. Must be in the same region as the
	// cluster. Defaults to the first zone of the region.
	// +optional
	Zone ScalewayZone `json:"zone,omitempty"`

	// type is the load balancer commercial offer type.
	// +optional
	// +kubebuilder:default="LB-S"
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=10
	Type string `json:"type,omitempty"`

	// ip is an existing public IPv4 to use when creating a load balancer.
	// +optional
	IP IPv4 `json:"ip,omitempty"`

	// privateIP is an existing private IPv4 inside the Private Network to use
	// when attaching a load balancer to a Private Network. It must be pre-booked
	// inside the Scaleway IPAM.
	// +optional
	PrivateIP IPv4 `json:"privateIP,omitempty"`
}

type MaintenanceWindow struct {
	// startHour is the start time of the two-hour maintenance window.
	// +optional
	// +kubebuilder:validation:Minimum=0
	StartHour *int32 `json:"startHour,omitempty"`

	// day of the week for the maintenance window.
	// +optional
	// +kubebuilder:validation:Enum=any;monday;tuesday;wednesday;thursday;friday;saturday;sunday
	Day string `json:"day,omitempty"`
}

type OnDelete struct {
	// withAdditionalResources allows to also automatically delete all volumes
	// (including those with volume type "retain"), empty Private Networks and
	// Load Balancers whose names start with cluster ID.
	// +optional
	WithAdditionalResources *bool `json:"withAdditionalResources,omitempty"`
}

type OpenIDConnect struct {
	// issuerURL of the provider which allows the API server to discover public signing keys.
	// Only URLs using the https:// scheme are accepted. This is typically the provider's
	// discovery URL without a path, for example "https://accounts.google.com" or "https://login.salesforce.com".
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=255
	IssuerURL string `json:"issuerURL,omitempty"`

	// clientID is a client ID that all tokens must be issued for.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=255
	ClientID string `json:"clientID,omitempty"`

	// usernameClaim is the JWT claim to use as the user name. The default is "sub",
	// which is expected to be the end user's unique identifier. Admins can choose other claims,
	// such as email or name, depending on their provider. However, claims other
	// than email will be prefixed with the issuer URL to prevent name collision.
	// +optional
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=100
	UsernameClaim string `json:"usernameClaim,omitempty"`

	// usernamePrefix is the prefix prepended to username claims to prevent name collision (such as "system:" users).
	// For example, the value "oidc:"" will create usernames like "oidc:jane.doe".
	// If this flag is not provided and "username_claim" is a value other than email,
	// the prefix defaults to "( Issuer URL )#" where "( Issuer URL )" is the value of "issuer_url".
	// The value "-" can be used to disable all prefixing.
	// +optional
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=100
	UsernamePrefix string `json:"usernamePrefix,omitempty"`

	// groupsClaim is the JWT claim to use as the user's group.
	// +optional
	// +listType=set
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=10
	// +kubebuilder:validation:items:MinLength=1
	// +kubebuilder:validation:items:MaxLength=100
	GroupsClaim []string `json:"groupsClaim,omitempty"`

	// groupsPrefix is the prefix prepended to group claims to prevent name collision (such as "system:" groups).
	// For example, the value "oidc:" will create group names like "oidc:engineering" and "oidc:infra".
	// +optional
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=100
	GroupsPrefix string `json:"groupsPrefix,omitempty"`

	// requiredClaim is multiple key=value pairs describing a required claim in the ID token.
	// If set, the claims are verified to be present in the ID token with a matching value.
	// +optional
	// +listType=set
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=10
	// +kubebuilder:validation:items:MinLength=1
	// +kubebuilder:validation:items:MaxLength=100
	RequiredClaim []string `json:"requiredClaim,omitempty"`
}

type PrivateNetwork struct {
	// id allows to reuse an existing Private Network instead of creating a new one.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	ID UUID `json:"id,omitempty"`

	// vpcID defines the ID of the VPC where the new Private Network will be created if none is provided.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	VPCID UUID `json:"vpcID,omitempty"`

	// subnet defines a subnet for the Private Network. Only used on newly created Private Networks.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	Subnet CIDR `json:"subnet,omitempty"`
}

type PrivateNetworkSpec struct {
	PrivateNetwork `json:",inline"`

	// enabled allows to automatically attach machines to a Private Network when it's set to true.
	// The Private Network is automatically created if no existing Private
	// Network ID is provided.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	Enabled *bool `json:"enabled,omitempty"`
}

type PublicGateway struct {
	// type is a Public Gateway commercial offer type.
	// +optional
	// +kubebuilder:default="VPC-GW-S"
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=20
	Type string `json:"type,omitempty"`

	// ip to use when creating a Public Gateway.
	// +optional
	IP IPv4 `json:"ip,omitempty"`

	// zone where to create the Public Gateway. Must be in the same region as the
	// cluster. Defaults to the first zone of the region.
	// +optional
	Zone ScalewayZone `json:"zone,omitempty"`
}

type PublicNetwork struct {
	// enableIPv4 defines whether server should have an IPv4 created and attached.
	// +optional
	EnableIPv4 *bool `json:"enableIPv4,omitempty"`

	// enableIPv6 defines whether server should have an IPv6 created and attached.
	// +optional
	EnableIPv6 *bool `json:"enableIPv6,omitempty"`
}

type RootVolume struct {
	// size of the root volume in GB. Defaults to 20 GB.
	// +optional
	// +kubebuilder:default=20
	// +kubebuilder:validation:Minimum=8
	// +kubebuilder:validation:Maximum=10000
	Size int64 `json:"size,omitempty"`

	// type of the root volume. Can be local or block. Note that not all types
	// of instances support local volumes.
	// +optional
	// +kubebuilder:default="block"
	// +kubebuilder:validation:Enum=local;block
	Type string `json:"type,omitempty"`

	// iops is the number of IOPS requested for the disk. This is only applicable for block volumes.
	// +optional
	// +kubebuilder:validation:Minimum=5000
	IOPS int64 `json:"iops,omitempty"`
}

type ScalewayCluster struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty,omitzero"`

	// spec defines the desired state of ScalewayCluster
	// +required
	Spec ScalewayClusterSpec `json:"spec,omitempty,omitzero"`

	// status defines the observed state of ScalewayCluster
	// +optional
	Status ScalewayClusterStatus `json:"status,omitempty,omitzero"`
}

type ScalewayClusterInitializationStatus struct {
	// provisioned is true when the infrastructure provider reports that the Cluster's infrastructure is fully provisioned.
	// NOTE: this field is part of the Cluster API contract, and it is used to orchestrate initial Cluster provisioning.
	// +optional
	Provisioned *bool `json:"provisioned,omitempty"`
}

type ScalewayClusterList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ScalewayCluster `json:"items"`
}

type ScalewayClusterNetwork struct {
	// controlPlaneLoadBalancer defines settings for the load balancer of the control plane.
	// +optional
	ControlPlaneLoadBalancer ControlPlaneLoadBalancer `json:"controlPlaneLoadBalancer,omitempty,omitzero"`

	// controlPlaneExtraLoadBalancers allows configuring additional load balancers.
	// Because Scaleway load balancers are currently zonal resources, you may set
	// up to 3 additional load balancers for achieving regional redundancy. It is
	// mandatory to set the controlPlaneDNS field when you do so.
	// NOTE: This may be removed in the future, when Scaleway supports regional LoadBalancers.
	// +optional
	// +listType=atomic
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=3
	ControlPlaneExtraLoadBalancers []LoadBalancer `json:"controlPlaneExtraLoadBalancers,omitempty"`

	// controlPlaneDNS allows configuring a Scaleway Domain DNS Zone.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	ControlPlaneDNS ControlPlaneDNS `json:"controlPlaneDNS,omitempty,omitzero"`

	// privateNetwork allows attaching machines of the cluster to a Private Network.
	// +optional
	PrivateNetwork PrivateNetworkSpec `json:"privateNetwork,omitempty,omitzero"`

	// publicGateways allows to manage Public Gateways that will be created and
	// attached to the Private Network of the cluster.
	// +optional
	// +listType=atomic
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=6
	PublicGateways []PublicGateway `json:"publicGateways,omitempty"`
}

type ScalewayClusterNetworkStatus struct {
	// vpcID is set if the cluster has an associated Private Network.
	// +optional
	VPCID UUID `json:"vpcID,omitempty"`

	// privateNetworkID is set if the cluster has an associated Private Network.
	// +optional
	PrivateNetworkID UUID `json:"privateNetworkID,omitempty"`

	// publicGatewayIDs is a list of Public Gateway IDs.
	// +optional
	// +listType=atomic
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=10
	PublicGatewayIDs []UUID `json:"publicGatewayIDs,omitempty"`

	// loadBalancerIP is the public IP of the cluster control-plane.
	// +optional
	LoadBalancerIP IPv4 `json:"loadBalancerIP,omitempty"`

	// extraLoadBalancerIPs is a list of IPs of the extra loadbalancers.
	// +optional
	// +listType=atomic
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=10
	ExtraLoadBalancerIPs []IPv4 `json:"extraLoadBalancerIPs,omitempty"`
}

type ScalewayClusterSpec struct {
	// projectID is the ID of a Scaleway project where the cluster will be created.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	ProjectID UUID `json:"projectID,omitempty"`

	// region represents the region where the cluster will be hosted.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	Region ScalewayRegion `json:"region,omitempty"`

	// scalewaySecretName is the name of the secret that contains the Scaleway client parameters.
	// The following keys are required: SCW_ACCESS_KEY, SCW_SECRET_KEY.
	// The following key is optional: SCW_API_URL.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=253
	ScalewaySecretName string `json:"scalewaySecretName,omitempty"`

	// failureDomains is a list of failure domains where the control-plane nodes will be created.
	// Failure domains correspond to Scaleway zones inside the cluster region (e.g. fr-par-1).
	// +optional
	// +listType=set
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=3
	FailureDomains []ScalewayZone `json:"failureDomains,omitempty"`

	// network contains network related options for the cluster.
	// +optional
	Network ScalewayClusterNetwork `json:"network,omitempty,omitzero"`

	// controlPlaneEndpoint represents the endpoint used to communicate with the control plane.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	ControlPlaneEndpoint clusterv1.APIEndpoint `json:"controlPlaneEndpoint,omitempty,omitzero"`
}

type ScalewayClusterStatus struct {
	// conditions represent the current state of the ScalewayCluster resource.
	// Each condition has a unique type and reflects the status of a specific aspect of the resource.
	//
	// The status of each condition is one of True, False, or Unknown.
	// +optional
	// +listType=map
	// +listMapKey=type
	// +kubebuilder:validation:MaxItems=32
	Conditions []metav1.Condition `json:"conditions,omitempty"`

	// failureDomains is a list of failure domain objects synced from the infrastructure provider.
	// +optional
	// +listType=map
	// +listMapKey=name
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=100
	FailureDomains []clusterv1.FailureDomain `json:"failureDomains,omitempty"`

	// initialization provides observations of the ScalewayCluster initialization process.
	// NOTE: Fields in this struct are part of the Cluster API contract and are used to orchestrate initial Cluster provisioning.
	// +optional
	Initialization ScalewayClusterInitializationStatus `json:"initialization,omitempty,omitzero"`

	// network contains information about network resources of the cluster.
	// +optional
	Network ScalewayClusterNetworkStatus `json:"network,omitempty,omitzero"`
}

type ScalewayClusterTemplate struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty,omitzero"`

	// spec defines the desired state of ScalewayClusterTemplate
	// +required
	Spec ScalewayClusterTemplateSpec `json:"spec,omitempty,omitzero"`
}

type ScalewayClusterTemplateList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ScalewayClusterTemplate `json:"items"`
}

type ScalewayClusterTemplateResource struct {
	// metadata is a Standard object's metadata.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	// +optional
	ObjectMeta clusterv1.ObjectMeta `json:"metadata,omitempty,omitzero"`

	// spec defines the desired state of ScalewayCluster
	// +required
	Spec ScalewayClusterSpec `json:"spec,omitempty,omitzero"`
}

type ScalewayClusterTemplateSpec struct {
	// template is a ScalewayCluster template resource.
	// +required
	Template ScalewayClusterTemplateResource `json:"template,omitempty,omitzero"`
}

type ScalewayMachine struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty,omitzero"`

	// spec defines the desired state of ScalewayMachine
	// +required
	Spec ScalewayMachineSpec `json:"spec,omitempty,omitzero"`

	// status defines the observed state of ScalewayMachine
	// +optional
	Status ScalewayMachineStatus `json:"status,omitempty,omitzero"`
}

type ScalewayMachineInitializationStatus struct {
	// provisioned is true when the infrastructure provider reports that the Machine's infrastructure is fully provisioned.
	// NOTE: this field is part of the Cluster API contract, and it is used to orchestrate initial Machine provisioning.
	// +optional
	Provisioned *bool `json:"provisioned,omitempty"`
}

type ScalewayMachineList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ScalewayMachine `json:"items"`
}

type ScalewayMachineSpec struct {
	// providerID must match the provider ID as seen on the node object corresponding to this machine.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=512
	ProviderID string `json:"providerID,omitempty"`

	// commercialType of instance (e.g. PRO2-S).
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=20
	CommercialType string `json:"commercialType,omitempty"`

	// image defines an image ID, Name or Label to use to create the instance.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	Image Image `json:"image,omitempty,omitzero"`

	// rootVolume defines the characteristics of the system (root) volume.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	RootVolume RootVolume `json:"rootVolume,omitempty,omitzero"`

	// publicNetwork allows attaching public IPs to the instance.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	PublicNetwork PublicNetwork `json:"publicNetwork,omitempty,omitzero"`

	// placementGroup allows attaching a Placement Group to the instance.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	PlacementGroup IDOrName `json:"placementGroup,omitempty,omitzero"`

	// securityGroup allows attaching a Security Group to the instance.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	SecurityGroup IDOrName `json:"securityGroup,omitempty,omitzero"`
}

type ScalewayMachineStatus struct {
	// conditions represent the current state of the ScalewayMachine resource.
	// Each condition has a unique type and reflects the status of a specific aspect of the resource.
	//
	// The status of each condition is one of True, False, or Unknown.
	// +optional
	// +listType=map
	// +listMapKey=type
	// +kubebuilder:validation:MaxItems=32
	Conditions []metav1.Condition `json:"conditions,omitempty"`

	// initialization provides observations of the ScalewayMachine initialization process.
	// NOTE: Fields in this struct are part of the Cluster API contract and are used to orchestrate initial Machine provisioning.
	// +optional
	Initialization ScalewayMachineInitializationStatus `json:"initialization,omitempty,omitzero"`

	// addresses contains the associated addresses for the machine.
	// +optional
	// +listType=atomic
	// +kubebuilder:validation:MaxItems=32
	Addresses []clusterv1.MachineAddress `json:"addresses,omitempty"`
}

type ScalewayMachineTemplate struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty,omitzero"`

	// spec defines the desired state of ScalewayMachineTemplate
	// +required
	Spec ScalewayMachineTemplateSpec `json:"spec,omitempty,omitzero"`
}

type ScalewayMachineTemplateList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ScalewayMachineTemplate `json:"items"`
}

type ScalewayMachineTemplateResource struct {
	// metadata is a Standard object's metadata.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	// +optional
	ObjectMeta clusterv1.ObjectMeta `json:"metadata,omitempty,omitzero"`

	// spec defines the desired state of ScalewayMachine
	// +required
	Spec ScalewayMachineSpec `json:"spec,omitempty,omitzero"`
}

type ScalewayMachineTemplateSpec struct {
	// template is a ScalewayMachine template resource.
	// +required
	Template ScalewayMachineTemplateResource `json:"template,omitempty,omitzero"`
}

type ScalewayManagedCluster struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty,omitzero"`

	// spec defines the desired state of ScalewayManagedCluster
	// +required
	Spec ScalewayManagedClusterSpec `json:"spec,omitempty,omitzero"`

	// status defines the observed state of ScalewayManagedCluster
	// +optional
	Status ScalewayManagedClusterStatus `json:"status,omitempty,omitzero"`
}

type ScalewayManagedClusterInitializationStatus struct {
	// provisioned is true when the infrastructure provider reports that the Cluster's infrastructure is fully provisioned.
	// NOTE: this field is part of the Cluster API contract, and it is used to orchestrate initial Cluster provisioning.
	// +optional
	Provisioned *bool `json:"provisioned,omitempty"`
}

type ScalewayManagedClusterList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ScalewayManagedCluster `json:"items"`
}

type ScalewayManagedClusterNetwork struct {
	// privateNetwork allows attaching machines of the cluster to a Private Network.
	// +optional
	PrivateNetwork PrivateNetwork `json:"privateNetwork,omitempty,omitzero"`

	// publicGateways allows to manage Public Gateways that will be created and
	// attached to the Private Network of the cluster.
	// +optional
	// +listType=atomic
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=6
	PublicGateways []PublicGateway `json:"publicGateways,omitempty"`
}

type ScalewayManagedClusterNetworkStatus struct {
	// privateNetworkID is the ID of the Private Network that is attached to the cluster.
	// +optional
	PrivateNetworkID UUID `json:"privateNetworkID,omitempty"`
}

type ScalewayManagedClusterSpec struct {
	// region where the managed cluster will be created.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	Region ScalewayRegion `json:"region,omitempty"`

	// projectID in which the managed cluster will be created.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	ProjectID UUID `json:"projectID,omitempty"`

	// scalewaySecretName is the name of the secret that contains the Scaleway client parameters.
	// The following keys are required: SCW_ACCESS_KEY, SCW_SECRET_KEY.
	// The following key is optional: SCW_API_URL.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=253
	ScalewaySecretName string `json:"scalewaySecretName,omitempty"`

	// network defines the network configuration of the managed cluster.
	// +optional
	Network ScalewayManagedClusterNetwork `json:"network,omitempty,omitzero"`

	// controlPlaneEndpoint represents the endpoint used to communicate with the control plane.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	ControlPlaneEndpoint clusterv1.APIEndpoint `json:"controlPlaneEndpoint,omitempty,omitzero"`
}

type ScalewayManagedClusterStatus struct {
	// conditions represent the current state of the ScalewayManagedCluster resource.
	// Each condition has a unique type and reflects the status of a specific aspect of the resource.
	//
	// The status of each condition is one of True, False, or Unknown.
	// +optional
	// +listType=map
	// +listMapKey=type
	// +kubebuilder:validation:MaxItems=32
	Conditions []metav1.Condition `json:"conditions,omitempty"`

	// initialization provides observations of the ScalewayManagedCluster initialization process.
	// NOTE: Fields in this struct are part of the Cluster API contract and are used to orchestrate initial Cluster provisioning.
	// +optional
	Initialization ScalewayManagedClusterInitializationStatus `json:"initialization,omitempty,omitzero"`

	// network contains information about currently provisioned network resources.
	// +optional
	Network ScalewayManagedClusterNetworkStatus `json:"network,omitempty,omitzero"`
}

type ScalewayManagedControlPlane struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty,omitzero"`

	// spec defines the desired state of ScalewayManagedControlPlane
	// +required
	Spec ScalewayManagedControlPlaneSpec `json:"spec,omitempty,omitzero"`

	// status defines the observed state of ScalewayManagedControlPlane
	// +optional
	Status ScalewayManagedControlPlaneStatus `json:"status,omitempty,omitzero"`
}

type ScalewayManagedControlPlaneInitializationStatus struct {
	// controlPlaneInitialized is true when the control plane provider reports that the Kubernetes control plane is initialized;
	// usually a control plane is considered initialized when it can accept requests, no matter if this happens before
	// the control plane is fully provisioned or not.
	// NOTE: this field is part of the Cluster API contract, and it is used to orchestrate initial Cluster provisioning.
	// +optional
	ControlPlaneInitialized *bool `json:"controlPlaneInitialized,omitempty"`
}

type ScalewayManagedControlPlaneList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ScalewayManagedControlPlane `json:"items"`
}

type ScalewayManagedControlPlaneSpec struct {
	// clusterName allows you to specify the name of the Scaleway managed cluster.
	// If you don't specify a name then a default name will be created
	// based on the namespace and name of the managed control plane.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=100
	ClusterName string `json:"clusterName,omitempty"`

	// type of the cluster (e.g. kapsule, multicloud, etc.).
	// +optional
	// +kubebuilder:default="kapsule"
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=50
	Type string `json:"type,omitempty"`

	// version defines the desired Kubernetes version.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=256
	Version string `json:"version,omitempty"`

	// cni plugin running in the cluster.
	// +optional
	// +kubebuilder:validation:Enum=cilium;cilium_native;calico;kilo;none
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	CNI string `json:"cni,omitempty"`

	// additionalTags that will be added to the default tags.
	// +optional
	// +listType=atomic
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=30
	// +kubebuilder:validation:items:MinLength=1
	// +kubebuilder:validation:items:MaxLength=128
	AdditionalTags []string `json:"additionalTags,omitempty"`

	// autoscaler configuration of the cluster.
	// +optional
	Autoscaler Autoscaler `json:"autoscaler,omitempty,omitzero"`

	// autoUpgrade configuration of the cluster.
	// +optional
	AutoUpgrade AutoUpgrade `json:"autoUpgrade,omitempty,omitzero"`

	// featureGates to enable.
	// +optional
	// +listType=set
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=10
	// +kubebuilder:validation:items:MinLength=1
	// +kubebuilder:validation:items:MaxLength=128
	FeatureGates []string `json:"featureGates,omitempty"`

	// admissionPlugins to enable.
	// +optional
	// +listType=set
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=10
	// +kubebuilder:validation:items:MinLength=1
	// +kubebuilder:validation:items:MaxLength=128
	AdmissionPlugins []string `json:"admissionPlugins,omitempty"`

	// openIDConnect defines the OpenID Connect configuration of the Kubernetes API server.
	// +optional
	OpenIDConnect OpenIDConnect `json:"openIDConnect,omitempty,omitzero"`

	// apiServerCertSANs defines additional Subject Alternative Names for the
	// Kubernetes API server certificate.
	// +optional
	// +listType=set
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=10
	// +kubebuilder:validation:items:MinLength=1
	// +kubebuilder:validation:items:MaxLength=255
	APIServerCertSANs []string `json:"apiServerCertSANs,omitempty"`

	// onDelete configures the settings to apply when deleting the Scaleway managed cluster.
	// +optional
	OnDelete OnDelete `json:"onDelete,omitempty,omitzero"`

	// acl configures the ACLs of the managed cluster. If not set, ACLs will be set to [0.0.0.0/0].
	// +optional
	ACL *ACL `json:"acl,omitempty"`

	// enablePrivateEndpoint defines whether the apiserver's internal address
	// is used as the cluster endpoint.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	EnablePrivateEndpoint *bool `json:"enablePrivateEndpoint,omitempty"`

	// controlPlaneEndpoint represents the endpoint used to communicate with the control plane.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	ControlPlaneEndpoint clusterv1.APIEndpoint `json:"controlPlaneEndpoint,omitempty,omitzero"`
}

type ScalewayManagedControlPlaneStatus struct {
	// conditions represent the current state of the ScalewayManagedControlPlane resource.
	// Each condition has a unique type and reflects the status of a specific aspect of the resource.
	//
	// The status of each condition is one of True, False, or Unknown.
	// +optional
	// +listType=map
	// +listMapKey=type
	// +kubebuilder:validation:MaxItems=32
	Conditions []metav1.Condition `json:"conditions,omitempty"`

	// version defines the desired Kubernetes version for the control plane.
	// +optional
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=256
	Version string `json:"version,omitempty"`

	// externalManagedControlPlane is a bool that should be set to true if the
	// Node objects do not exist in the cluster.
	// +optional
	// +kubebuilder:default=true
	ExternalManagedControlPlane *bool `json:"externalManagedControlPlane,omitempty"`

	// initialization provides observations of the ScalewayManagedControlPlane initialization process.
	// NOTE: Fields in this struct are part of the Cluster API contract and are used to orchestrate initial Cluster provisioning.
	// +optional
	Initialization ScalewayManagedControlPlaneInitializationStatus `json:"initialization,omitempty,omitzero"`
}

type ScalewayManagedMachinePool struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty,omitzero"`

	// spec defines the desired state of ScalewayManagedMachinePool
	// +required
	Spec ScalewayManagedMachinePoolSpec `json:"spec,omitempty,omitzero"`

	// status defines the observed state of ScalewayManagedMachinePool
	// +optional
	Status ScalewayManagedMachinePoolStatus `json:"status,omitempty,omitzero"`
}

type ScalewayManagedMachinePoolInitializationStatus struct {
	// provisioned is true when the infrastructure provider reports that the MachinePool's infrastructure is fully provisioned.
	// +optional
	Provisioned *bool `json:"provisioned,omitempty"`
}

type ScalewayManagedMachinePoolList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ScalewayManagedMachinePool `json:"items"`
}

type ScalewayManagedMachinePoolSpec struct {
	// nodeType is the type of Scaleway Instance wanted for the pool. Nodes with
	// insufficient memory are not eligible (DEV1-S, PLAY2-PICO, STARDUST).
	// "external" is a special node type used to provision instances from other
	// cloud providers in a Kosmos Cluster.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +kubebuilder:validation:MinLength=2
	// +kubebuilder:validation:MaxLength=30
	NodeType string `json:"nodeType,omitempty"`

	// zone in which the pool's nodes will be spawned.
	// +required
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	Zone ScalewayZone `json:"zone,omitempty"`

	// placementGroupID in which all the nodes of the pool will be created,
	// placement groups are limited to 20 instances.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	PlacementGroupID UUID `json:"placementGroupID,omitempty"`

	// scaling configures the scaling of the pool.
	// +optional
	Scaling Scaling `json:"scaling,omitempty,omitzero"`

	// autohealing defines whether the autohealing feature is enabled for the pool.
	// +optional
	Autohealing *bool `json:"autohealing,omitempty"`

	// additionalTags that will be added to the default tags.
	// +optional
	// +listType=atomic
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=30
	// +kubebuilder:validation:items:MinLength=1
	// +kubebuilder:validation:items:MaxLength=128
	AdditionalTags []string `json:"additionalTags,omitempty"`

	// kubeletArgs defines Kubelet arguments to be used by this pool.
	// +optional
	KubeletArgs map[string]string `json:"kubeletArgs,omitempty"`

	// upgradePolicy defines the pool's upgrade policy.
	// +optional
	UpgradePolicy UpgradePolicy `json:"upgradePolicy,omitempty,omitzero"`

	// rootVolumeType is the system volume disk type.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +kubebuilder:validation:Enum=l_ssd;sbs_5k;sbs_15k
	RootVolumeType string `json:"rootVolumeType,omitempty"`

	// rootVolumeSizeGB is the size of the System volume disk size, in GB.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	// +kubebuilder:validation:Minimum=20
	RootVolumeSizeGB int64 `json:"rootVolumeSizeGB,omitempty"`

	// publicIPDisabled defines if the public IP should be removed from Nodes.
	// To use this feature, your Cluster must have an attached Private Network
	// set up with a Public Gateway.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	PublicIPDisabled *bool `json:"publicIPDisabled,omitempty"`

	// securityGroupID in which all the nodes of the pool will be created. If unset,
	// the pool will use default Kapsule security group in current zone.
	// +optional
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
	SecurityGroupID UUID `json:"securityGroupID,omitempty"`

	// providerIDList are the identification IDs of machine instances provided by the provider.
	// This field must match the provider IDs as seen on the node objects corresponding to a machine pool's machine instances.
	// +optional
	// +listType=atomic
	// +kubebuilder:validation:MaxItems=10000
	// +kubebuilder:validation:items:MinLength=1
	// +kubebuilder:validation:items:MaxLength=512
	ProviderIDList []string `json:"providerIDList,omitempty"`
}

type ScalewayManagedMachinePoolStatus struct {
	// conditions represent the current state of the ScalewayManagedMachinePool resource.
	// Each condition has a unique type and reflects the status of a specific aspect of the resource.
	//
	// The status of each condition is one of True, False, or Unknown.
	// +optional
	// +listType=map
	// +listMapKey=type
	// +kubebuilder:validation:MaxItems=32
	Conditions []metav1.Condition `json:"conditions,omitempty"`

	// ready is true when the provider resource is ready.
	// Deprecated: this field is kept for now as CAPI v1.11.3 still needs it.
	// The .initialization.provisioned field should be used instead.
	// +optional
	Ready *bool `json:"ready,omitempty"`

	// initialization provides observations of the ScalewayManagedMachinePool initialization process.
	// NOTE: Fields in this struct are part of the Cluster API contract and are used to orchestrate initial MachinePool provisioning.
	// +optional
	Initialization ScalewayManagedMachinePoolInitializationStatus `json:"initialization,omitempty,omitzero"`

	// replicas is the most recently observed number of replicas.
	// +optional
	Replicas *int32 `json:"replicas,omitempty"`
}

type ScalewayRegion string

type ScalewayZone string

type Scaling struct {
	// autoscaling defines whether the autoscaling feature is enabled for the pool.
	// +optional
	Autoscaling *bool `json:"autoscaling,omitempty"`

	// minSize defines the minimum size of the pool. Note that this field is only
	// used when autoscaling is enabled on the pool.
	// +optional
	// +kubebuilder:validation:Minimum=0
	MinSize *int32 `json:"minSize,omitempty"`

	// maxSize defines the maximum size of the pool. Note that this field is only
	// used when autoscaling is enabled on the pool.
	// +optional
	// +kubebuilder:validation:Minimum=0
	MaxSize *int32 `json:"maxSize,omitempty"`
}

type UUID string

type UpgradePolicy struct {
	// maxUnavailable is the maximum number of available nodes during upgrades.
	// +optional
	// +kubebuilder:validation:Minimum=0
	MaxUnavailable *int32 `json:"maxUnavailable,omitempty"`

	// maxSurge is the maximum number of additional nodes that can be provisioned
	// during upgrades.
	// +optional
	// +kubebuilder:validation:Minimum=0
	MaxSurge *int32 `json:"maxSurge,omitempty"`
}