v1beta1

type ConditionStatus string

type ConditionType string

type StepClusterIssuer struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   StepClusterIssuerSpec   `json:"spec,omitempty"`
	Status StepClusterIssuerStatus `json:"status,omitempty"`
}

type StepClusterIssuerCondition struct {
	// Type of the condition, currently ('Ready').
	Type ConditionType `json:"type"`

	// Status of the condition, one of ('True', 'False', 'Unknown').
	// +kubebuilder:validation:Enum=True;False;Unknown
	Status ConditionStatus `json:"status"`

	// LastTransitionTime is the timestamp corresponding to the last status
	// change of this condition.
	// +optional
	LastTransitionTime *metav1.Time `json:"lastTransitionTime,omitempty"`

	// Reason is a brief machine readable explanation for the condition's last
	// transition.
	// +optional
	Reason string `json:"reason,omitempty"`

	// Message is a human readable description of the details of the last
	// transition, complementing reason.
	// +optional
	Message string `json:"message,omitempty"`
}

type StepClusterIssuerList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []StepClusterIssuer `json:"items"`
}

type StepClusterIssuerSecretKeySelector struct {
	// The name of the secret in the pod's namespace to select from.
	Name string `json:"name"`

	// The namespace of the secret in the pod's namespace to select from.
	Namespace string `json:"namespace"`

	// The key of the secret to select from. Must be a valid secret key.
	// +optional
	Key string `json:"key,omitempty"`
}

type StepClusterIssuerSpec struct {

	// URL is the base URL for the step certificates instance.
	URL string `json:"url"`

	// Provisioner contains the step certificates provisioner configuration.
	Provisioner StepClusterProvisioner `json:"provisioner"`

	// CABundle is a base64 encoded TLS certificate used to verify connections
	// to the step certificates server. If not set the system root certificates
	// are used to validate the TLS connection.
	CABundle []byte `json:"caBundle"`
}

type StepClusterIssuerStatus struct {

	// +optional
	Conditions []StepClusterIssuerCondition `json:"conditions,omitempty"`
}

type StepClusterProvisioner struct {
	// Names is the name of the JWK provisioner.
	Name string `json:"name"`

	// KeyID is the kid property of the JWK provisioner.
	KeyID string `json:"kid"`

	// PasswordRef is a reference to a Secret containing the provisioner
	// password used to decrypt the provisioner private key.
	PasswordRef StepClusterIssuerSecretKeySelector `json:"passwordRef"`
}

type StepIssuer struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   StepIssuerSpec   `json:"spec,omitempty"`
	Status StepIssuerStatus `json:"status,omitempty"`
}

type StepIssuerCondition struct {
	// Type of the condition, currently ('Ready').
	Type ConditionType `json:"type"`

	// Status of the condition, one of ('True', 'False', 'Unknown').
	// +kubebuilder:validation:Enum=True;False;Unknown
	Status ConditionStatus `json:"status"`

	// LastTransitionTime is the timestamp corresponding to the last status
	// change of this condition.
	// +optional
	LastTransitionTime *metav1.Time `json:"lastTransitionTime,omitempty"`

	// Reason is a brief machine readable explanation for the condition's last
	// transition.
	// +optional
	Reason string `json:"reason,omitempty"`

	// Message is a human readable description of the details of the last
	// transition, complementing reason.
	// +optional
	Message string `json:"message,omitempty"`
}

type StepIssuerList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []StepIssuer `json:"items"`
}

type StepIssuerSecretKeySelector struct {
	// The name of the secret in the pod's namespace to select from.
	Name string `json:"name"`

	// The key of the secret to select from. Must be a valid secret key.
	// +optional
	Key string `json:"key,omitempty"`
}

type StepIssuerSpec struct {

	// URL is the base URL for the step certificates instance.
	URL string `json:"url"`

	// Provisioner contains the step certificates provisioner configuration.
	Provisioner StepProvisioner `json:"provisioner"`

	// CABundle is a base64 encoded TLS certificate used to verify connections
	// to the step certificates server. If not set the system root certificates
	// are used to validate the TLS connection.
	CABundle []byte `json:"caBundle"`
}

type StepIssuerStatus struct {

	// +optional
	Conditions []StepIssuerCondition `json:"conditions,omitempty"`
}

type StepProvisioner struct {
	// Names is the name of the JWK provisioner.
	Name string `json:"name"`

	// KeyID is the kid property of the JWK provisioner.
	KeyID string `json:"kid"`

	// PasswordRef is a reference to a Secret containing the provisioner
	// password used to decrypt the provisioner private key.
	PasswordRef StepIssuerSecretKeySelector `json:"passwordRef"`
}