v1alpha1

type StackitAPIServerLoadBalancerSpec struct {
	// enabled toggles creation of an API server load balancer.
	// +optional
	Enabled bool `json:"enabled,omitempty"`
}

type StackitBastionCloudInitRef struct {
	// kind is the Kubernetes object kind containing the cloud-init document.
	// +required
	// +kubebuilder:validation:Enum=ConfigMap;Secret
	Kind string `json:"kind"`

	// name is the ConfigMap or Secret name in the StackitCluster namespace.
	// +required
	// +kubebuilder:validation:MinLength=1
	Name string `json:"name"`

	// key is the data key containing the cloud-init document.
	// +required
	// +kubebuilder:validation:MinLength=1
	Key string `json:"key"`
}

type StackitBastionSpec struct {
	// enabled toggles creation of a provider-managed SSH bastion host.
	// +optional
	Enabled bool `json:"enabled,omitempty"`

	// imageID is the ID of the STACKIT image to boot the bastion from.
	// Required when enabled is true.
	// +optional
	// +kubebuilder:validation:Pattern=`^[0-9a-fA-F-]{36}$`
	ImageID string `json:"imageID,omitempty"`

	// machineType selects the STACKIT machine flavor for the bastion VM.
	// Required when enabled is true.
	// +optional
	// +kubebuilder:validation:Pattern=`^[a-z0-9][a-z0-9.-]*[a-z0-9]$`
	MachineType string `json:"machineType,omitempty"`

	// sshKeyName is the name of an existing SSH key in the STACKIT project.
	// Required when enabled is true.
	// +optional
	// +kubebuilder:validation:MaxLength=127
	// +kubebuilder:validation:Pattern=`^[A-Za-z0-9_.@-]+$`
	SSHKeyName string `json:"sshKeyName,omitempty"`

	// allowedCIDRs are CIDR ranges allowed to connect to TCP/22 on the bastion.
	// Required when enabled is true.
	// +optional
	// +kubebuilder:validation:items:Format=cidr
	AllowedCIDRs []string `json:"allowedCIDRs,omitempty"`

	// rootVolume configures the bastion root disk.
	// +optional
	RootVolume StackitRootVolumeSpec `json:"rootVolume,omitempty"`

	// cloudInitRef references cloud-init user data passed to the bastion VM.
	// It can point to a ConfigMap for non-sensitive configuration or a Secret
	// when the cloud-init document contains sensitive values.
	// +optional
	CloudInitRef *StackitBastionCloudInitRef `json:"cloudInitRef,omitempty"`
}

type StackitBastionStatus struct {
	// serverID is the provider-managed bastion server ID.
	// +optional
	ServerID string `json:"serverID,omitempty"`

	// publicIPID is the provider-managed public IP resource ID.
	// +optional
	PublicIPID string `json:"publicIPID,omitempty"`

	// publicIP is the routable IP address users connect to.
	// +optional
	PublicIP string `json:"publicIP,omitempty"`

	// securityGroupID is the provider-managed bastion security group ID.
	// +optional
	SecurityGroupID string `json:"securityGroupID,omitempty"`

	// cloudInitHash records the resolved cloudInitRef content used to create
	// the current provider-managed bastion server.
	// +optional
	CloudInitHash string `json:"cloudInitHash,omitempty"`
}

type StackitCluster struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitzero"`

	// spec defines the desired state of StackitCluster
	// +required
	Spec StackitClusterSpec `json:"spec"`

	// status defines the observed state of StackitCluster
	// +optional
	Status StackitClusterStatus `json:"status,omitzero"`
}

type StackitClusterInitializationStatus struct {
	// provisioned is true when the cluster infrastructure is provisioned.
	// +optional
	Provisioned bool `json:"provisioned,omitempty"`
}

type StackitClusterList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitzero"`
	Items           []StackitCluster `json:"items"`
}

type StackitClusterNetworkSpec struct {
	// id is the STACKIT network ID.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:Pattern=`^[0-9a-fA-F-]{36}$`
	ID string `json:"id"`
}

type StackitClusterSpec struct {
	// projectID is the STACKIT project that owns the cluster infrastructure.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:Pattern=`^[0-9a-fA-F-]{36}$`
	ProjectID string `json:"projectID"`

	// region is the STACKIT region in which infrastructure is created.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:Pattern=`^[a-z]{2}[0-9]{2}$`
	Region string `json:"region"`

	// credentialsSecretRef references the Secret containing STACKIT credentials.
	// +required
	CredentialsSecretRef corev1.SecretReference `json:"credentialsSecretRef"`

	// network references the existing STACKIT network the cluster will use.
	// For MVP the network must already exist.
	// +required
	Network StackitClusterNetworkSpec `json:"network"`

	// apiServerLoadBalancer configures the load balancer in front of the
	// Kubernetes API server.
	// +optional
	APIServerLoadBalancer StackitAPIServerLoadBalancerSpec `json:"apiServerLoadBalancer,omitempty"`

	// controlPlaneEndpoint allows the user to provide a pre-existing endpoint
	// when apiServerLoadBalancer.enabled is false.
	// +optional
	ControlPlaneEndpoint clusterv1.APIEndpoint `json:"controlPlaneEndpoint,omitempty,omitzero"`

	// bastion configures an optional provider-managed SSH bastion host.
	// +optional
	Bastion StackitBastionSpec `json:"bastion,omitempty"`

	// additionalLabels is merged into the labels applied to cluster-wide
	// STACKIT resources such as the API server load balancer.
	// +optional
	// +kubebuilder:validation:MaxProperties=64
	AdditionalLabels map[string]string `json:"additionalLabels,omitempty"`
}

type StackitClusterStatus struct {
	// ready indicates that the infrastructure required for the cluster is ready.
	// +optional
	Ready bool `json:"ready,omitempty"`

	// initialization provides Cluster API v1beta2 contract state.
	// +optional
	Initialization StackitClusterInitializationStatus `json:"initialization,omitempty"`

	// apiServerEndpoint is the endpoint the Kubernetes API server is reachable at.
	// +optional
	APIServerEndpoint clusterv1.APIEndpoint `json:"apiServerEndpoint,omitempty,omitzero"`

	// apiServerLoadBalancerID stores the ID of a provider-managed API server
	// load balancer so it can be deleted on cluster teardown.
	// +optional
	APIServerLoadBalancerID string `json:"apiServerLoadBalancerID,omitempty"`

	// bastion stores observed provider-managed bastion resources.
	// +optional
	Bastion StackitBastionStatus `json:"bastion,omitempty"`

	// failureDomains is a list of availability zones available to the cluster.
	// +listType=map
	// +listMapKey=name
	// +optional
	FailureDomains []clusterv1.FailureDomain `json:"failureDomains,omitempty"`

	// conditions represent the current state of the StackitCluster resource.
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type StackitClusterTemplate struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitzero"`

	// spec defines the desired state of StackitClusterTemplate
	// +required
	Spec StackitClusterTemplateSpec `json:"spec"`
}

type StackitClusterTemplateList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitzero"`
	Items           []StackitClusterTemplate `json:"items"`
}

type StackitClusterTemplateResource struct {
	// metadata is the standard object's metadata.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	// +optional
	ObjectMeta clusterv1.ObjectMeta `json:"metadata,omitempty,omitzero"`

	// spec is the StackitClusterSpec that will be used to create the
	// StackitCluster.
	// +required
	Spec StackitClusterSpec `json:"spec"`
}

type StackitClusterTemplateSpec struct {
	// template wraps the StackitCluster spec used to create new clusters.
	// +required
	Template StackitClusterTemplateResource `json:"template"`
}

type StackitMachine struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitzero"`

	// spec defines the desired state of StackitMachine
	// +required
	Spec StackitMachineSpec `json:"spec"`

	// status defines the observed state of StackitMachine
	// +optional
	Status StackitMachineStatus `json:"status,omitzero"`
}

type StackitMachineInitializationStatus struct {
	// provisioned is true when the VM is provisioned.
	// +optional
	Provisioned bool `json:"provisioned,omitempty"`
}

type StackitMachineList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitzero"`
	Items           []StackitMachine `json:"items"`
}

type StackitMachineNetworkSpec struct {
	// id is the STACKIT network ID.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:Pattern=`^[0-9a-fA-F-]{36}$`
	ID string `json:"id"`
}

type StackitMachineSpec struct {
	// providerID is the unique identifier the cloud-provider will use to
	// reconcile this machine with the corresponding Node. It is set by the
	// controller once the VM has been created.
	// +optional
	ProviderID *string `json:"providerID,omitempty"`

	// imageID is the ID of the STACKIT image to boot from.
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:Pattern=`^[0-9a-fA-F-]{36}$`
	ImageID string `json:"imageID"`

	// machineType selects the STACKIT machine flavor (e.g. c2i.2).
	// +required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:Pattern=`^[a-z0-9][a-z0-9.-]*[a-z0-9]$`
	MachineType string `json:"machineType"`

	// availabilityZone selects a STACKIT availability zone (e.g. eu01-1).
	// +optional
	// +kubebuilder:validation:Pattern=`^[a-z]{2}[0-9]{2}-[a-z0-9]+$`
	AvailabilityZone string `json:"availabilityZone,omitempty"`

	// sshKeyName is the name of an existing SSH key in the STACKIT project.
	// +optional
	// +kubebuilder:validation:MaxLength=127
	// +kubebuilder:validation:Pattern=`^[A-Za-z0-9_.@-]+$`
	SSHKeyName string `json:"sshKeyName,omitempty"`

	// rootVolume configures the root disk for the VM.
	// +optional
	RootVolume StackitRootVolumeSpec `json:"rootVolume,omitempty"`

	// network references the STACKIT network the VM should be attached to.
	// +required
	Network StackitMachineNetworkSpec `json:"network"`

	// securityGroups is a list of STACKIT security group IDs applied to the VM.
	// +optional
	// +kubebuilder:validation:items:Pattern=`^[0-9a-fA-F-]{36}$`
	SecurityGroups []string `json:"securityGroups,omitempty"`

	// additionalLabels is merged into the labels applied to STACKIT resources.
	// +optional
	// +kubebuilder:validation:MaxProperties=64
	AdditionalLabels map[string]string `json:"additionalLabels,omitempty"`
}

type StackitMachineStatus struct {
	// ready indicates the underlying VM is provisioned and known to the
	// provider.
	// +optional
	Ready bool `json:"ready,omitempty"`

	// initialization provides Cluster API v1beta2 contract state.
	// +optional
	Initialization StackitMachineInitializationStatus `json:"initialization,omitempty"`

	// providerID is the providerID written back to the owning Machine.
	// +optional
	ProviderID string `json:"providerID,omitempty"`

	// instanceID is the STACKIT server ID assigned to this machine.
	// +optional
	InstanceID string `json:"instanceID,omitempty"`

	// instanceState is the latest known state of the STACKIT server.
	// +optional
	InstanceState string `json:"instanceState,omitempty"`

	// addresses contains the IP addresses associated with the VM.
	// +optional
	Addresses []clusterv1.MachineAddress `json:"addresses,omitempty"`

	// conditions represent the current state of the StackitMachine resource.
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type StackitMachineTemplate struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitzero"`

	// spec defines the desired state of StackitMachineTemplate
	// +required
	Spec StackitMachineTemplateSpec `json:"spec"`
}

type StackitMachineTemplateList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitzero"`
	Items           []StackitMachineTemplate `json:"items"`
}

type StackitMachineTemplateResource struct {
	// metadata is the standard object's metadata.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	// +optional
	ObjectMeta clusterv1.ObjectMeta `json:"metadata,omitempty,omitzero"`

	// spec is the StackitMachineSpec that will be used to create the
	// StackitMachine.
	// +required
	Spec StackitMachineSpec `json:"spec"`
}

type StackitMachineTemplateSpec struct {
	// template wraps the StackitMachine spec used to create new machines.
	// +required
	Template StackitMachineTemplateResource `json:"template"`
}

type StackitRootVolumeSpec struct {
	// sizeGiB is the size of the root volume in GiB.
	// +optional
	// +kubebuilder:validation:Minimum=0
	SizeGiB int `json:"sizeGiB,omitempty"`

	// performanceClass selects a STACKIT storage performance class.
	// +optional
	// +kubebuilder:validation:MinLength=1
	PerformanceClass string `json:"performanceClass,omitempty"`

	// deleteOnTermination causes the root volume to be deleted when the VM is
	// deleted.
	// +optional
	DeleteOnTermination *bool `json:"deleteOnTermination,omitempty"`
}