v1alpha1

type BerthLease struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   BerthLeaseSpec   `json:"spec,omitempty"`
	Status BerthLeaseStatus `json:"status,omitempty"`
}

type BerthLeaseList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []BerthLease `json:"items"`
}

type BerthLeaseSpec struct {
	// LeaseName is the unique identifier for this lease within its namespace.
	// +kubebuilder:validation:MaxLength=253
	LeaseName string `json:"leaseName"`

	// HolderIdentity identifies the entity requesting or holding the lease.
	// +kubebuilder:validation:MaxLength=253
	HolderIdentity string `json:"holderIdentity"`

	// TTLSeconds is the time-to-live for the lease in seconds. The lease
	// expires if not renewed within this duration.
	TTLSeconds int32 `json:"ttlSeconds"`

	// HeartbeatIntervalSeconds is the interval at which the holder must
	// renew the lease to prevent TTL expiration.
	HeartbeatIntervalSeconds int32 `json:"heartbeatIntervalSeconds"`

	// Semantics selects the lease-window behavior. "at-most-once" is the
	// implemented exclusive-holder mode. "at-least-once" is accepted by the
	// schema but currently behaves as exclusive-holder mode until the central
	// API server implements at-least-once lease windows.
	// +kubebuilder:validation:Enum=at-most-once;at-least-once
	Semantics string `json:"semantics"`

	// Target is an optional reference to a workload the operator manages
	// in response to lease state transitions.
	Target *TargetRef `json:"target,omitempty"`

	// AcquireAction defines the action applied to the target workload when
	// the lease is acquired.
	AcquireAction *LeaseAction `json:"acquireAction,omitempty"`

	// ReleaseAction defines the action applied to the target workload when
	// the lease is released or expires.
	ReleaseAction *LeaseAction `json:"releaseAction,omitempty"`
}

type BerthLeaseStatus struct {
	// Workload records admission and cleanup responsibility independently of
	// the last central API response. Only the operator may write status.
	Workload *WorkloadStatus `json:"workload,omitempty"`

	// ObservedGeneration is the most recent .metadata.generation observed by
	// the operator. It is set on every status write so clients can tell
	// whether status reflects the current spec.
	// +optional
	// +kubebuilder:validation:Minimum=0
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

	// LeaseState is the current state of the lease (e.g. "held", "released", "expired").
	LeaseState string `json:"leaseState,omitempty"`

	// CurrentHolder is the identity of the entity currently holding the lease.
	CurrentHolder string `json:"currentHolder,omitempty"`

	// Tenant is the resolved tenant identifier for the current holder.
	Tenant string `json:"tenant,omitempty"`

	// AcquiredAt is the timestamp when the lease was last acquired.
	AcquiredAt *metav1.Time `json:"acquiredAt,omitempty"`

	// ExpiresAt is the timestamp when the lease will expire if not renewed.
	ExpiresAt *metav1.Time `json:"expiresAt,omitempty"`

	// LastHeartbeat is the timestamp of the most recent lease renewal.
	LastHeartbeat *metav1.Time `json:"lastHeartbeat,omitempty"`

	// FencingToken is the monotonic fencing token returned by the central
	// API server on the most recent successful Acquire/Renew. Workload cleanup
	// retains its exact release identity separately until Pods have stopped.
	FencingToken int32 `json:"fencingToken,omitempty"`

	// Conditions represent the latest observations of the lease's state.
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type LeaseAction struct {
	// Suspend, when non-nil, sets the suspend field on the target workload.
	// Setting this to true pauses the workload; false resumes it. Applies to
	// workload kinds that expose a spec.suspend field, such as CronJob.
	Suspend *bool `json:"suspend,omitempty"`

	// Scale, when non-nil, sets the replica count on the target workload's
	// scale subresource. Applies to workload kinds that expose a scale
	// subresource, such as Deployment, StatefulSet, and ReplicaSet.
	Scale *ScaleAction `json:"scale,omitempty"`
}

type PermittedPod struct {
	Name string `json:"name"`
	UID  string `json:"uid"`
}

type ScaleAction struct {
	// Replicas is the desired replica count. Use 0 to scale a workload down
	// to zero (for example, on lease release).
	// +kubebuilder:validation:Minimum=0
	Replicas int32 `json:"replicas"`
}

type TargetRef struct {
	// APIVersion is the API group and version of the target resource (e.g. "apps/v1").
	// +kubebuilder:validation:MaxLength=63
	APIVersion string `json:"apiVersion"`
	// Kind is the resource kind of the target (e.g. "Deployment").
	// +kubebuilder:validation:MaxLength=63
	Kind string `json:"kind"`
	// Name is the name of the target resource in the same namespace as the lease.
	// +kubebuilder:validation:MaxLength=253
	Name string `json:"name"`
}

type WorkloadStatus struct {
	// TargetUID is recorded during final target CREATE admission. It is not
	// inferred from caller-provided annotations on an existing target.
	TargetUID string `json:"targetUID"`
	// Phase is empty before activation, Active while permitting starts, and
	// Stopping until all permitted Pods have terminated.
	// +kubebuilder:validation:Enum="";Active;Stopping
	Phase string `json:"phase,omitempty"`
	// Deadline is the conservative local expiry deadline for this activation.
	Deadline *metav1.Time `json:"deadline,omitempty"`
	// LeaseName and Holder retain the exact central identity used at activation.
	LeaseName string `json:"leaseName,omitempty"`
	Holder    string `json:"holder,omitempty"`
	Token     int32  `json:"token,omitempty"`
	// Pods contains every UID whose gate may have been removed. A Pending Pod
	// must remain registered: an earlier ungate request may still be in flight.
	// +kubebuilder:validation:MaxItems=1024
	// +listType=map
	// +listMapKey=uid
	Pods []PermittedPod `json:"pods,omitempty"`
}