v1alpha1

type APIKey struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	Spec   APIKeySpec   `json:"spec,omitempty" protobuf:"bytes,2,opt,name=spec"`
	Status APIKeyStatus `json:"status,omitempty" protobuf:"bytes,3,opt,name=status"`
}

type APIKeyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []APIKey `json:"items"`
}

type APIKeySpec struct {
	// InstanceName is the name of the instance this API key is for
	InstanceName string `json:"instanceName,omitempty" protobuf:"bytes,1,opt,name=instanceName"`

	// ServiceAccountName is the name of the service account this API key is for
	ServiceAccountName string `json:"serviceAccountName,omitempty" protobuf:"bytes,2,opt,name=serviceAccountName"`

	// Description is a user defined description of the key
	// +optional
	Description string `json:"description,omitempty" protobuf:"bytes,3,opt,name=description"`

	// Expiration is a duration (as a golang duration string) that defines how long this API key is valid for.
	// This can only be set on initial creation and not updated later
	// +optional
	ExpirationTime *metav1.Time `json:"expirationTime,omitempty" protobuf:"bytes,4,opt,name=expiration"`

	// Revoke is a boolean that defines if the token of this API key should be revoked.
	// +kubebuilder:default=false
	// +optional
	Revoke bool `json:"revoke,omitempty" protobuf:"bytes,5,opt,name=revoke"`

	// EncryptionKey is a public key to encrypt the API Key token.
	// Please provide an RSA key with modulus length of at least 2048 bits.
	// See: https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/generateKey#rsa_key_pair_generation
	// See: https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/exportKey#subjectpublickeyinfo_export
	// +optional
	EncryptionKey *EncryptionKey `json:"encryptionKey,omitempty" protobuf:"bytes,6,opt,name=encryptionKey"`
}

type APIKeyStatus struct {

	// KeyID is a generated field that is a uid for the token
	// +optional
	KeyID *string `json:"keyId,omitempty" protobuf:"bytes,1,opt,name=keyId"`

	// IssuedAt is a timestamp of when the key was issued, stored as an epoch in seconds
	// +optional
	IssuedAt *metav1.Time `json:"issuedAt,omitempty" protobuf:"bytes,2,opt,name=issuedAt"`

	// ExpiresAt is a timestamp of when the key expires
	// +optional
	ExpiresAt *metav1.Time `json:"expiresAt,omitempty" protobuf:"bytes,3,opt,name=expiresAt"`

	// Token is the plaintext security token issued for the key.
	// +optional
	Token *string `json:"token,omitempty" protobuf:"bytes,4,opt,name=keySecret"`

	// Token is the encrypted security token issued for the key.
	// +optional
	EncryptedToken *EncryptedToken `json:"encryptedToken,omitempty" protobuf:"bytes,7,opt,name=encryptedToken"`

	// Conditions is an array of current observed service account conditions.
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []metav1.Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type" protobuf:"bytes,5,rep,name=conditions"`

	// ExpiresAt is a timestamp of when the key was revoked, it triggers revocation action
	// +optional
	RevokedAt *metav1.Time `json:"revokedAt,omitempty" protobuf:"bytes,6,opt,name=revokedAt"`
}

type AWSCloudConnection struct {
	//nolint:stylecheck
	AccountId string `json:"accountId" protobuf:"bytes,1,name=accountId"`
}

type AmqpConfig struct {
}

type AuditLog struct {
	// +listType=set
	Categories []string `json:"categories" protobuf:"bytes,1,rep,name=categories"`
}

type AzureConnection struct {
	//nolint:stylecheck
	SubscriptionId string `json:"subscriptionId" protobuf:"bytes,1,name=subscriptionId"`
	//nolint:stylecheck
	TenantId string `json:"tenantId" protobuf:"bytes,2,name=tenantId"`
	//nolint:stylecheck
	ClientId string `json:"clientId" protobuf:"bytes,3,name=clientId"`
	//nolint:stylecheck
	SupportClientId string `json:"supportClientId" protobuf:"bytes,4,name=supportClientId"`
}

type BookKeeperSetReference struct {
	// +optional
	Namespace string `json:"namespace,omitempty" protobuf:"bytes,1,opt,name=namespace"`
	Name      string `json:"name" protobuf:"bytes,2,opt,name=name"`
}

type ClusterRole struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	Spec   ClusterRoleSpec   `json:"spec,omitempty" protobuf:"bytes,2,opt,name=spec"`
	Status ClusterRoleStatus `json:"status,omitempty" protobuf:"bytes,3,opt,name=status"`
}

type ClusterRoleList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ClusterRole `json:"items"`
}

type ClusterRoleSpec struct {
	// +listType=atomic
	// Permissions Designed for general permission format
	//     SERVICE.RESOURCE.VERB
	Permissions []string `json:"permissions,omitempty" protobuf:"bytes,1,opt,name=permissions"`
}

type ClusterRoleStatus struct {
	// Conditions is an array of current observed conditions.
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type" protobuf:"bytes,1,rep,name=conditions"`

	// FailedClusters is an array of clusters which failed to apply the ClusterRole resources.
	// +deprecated, shouldn't expose the failed clusters to the user
	// +optional
	// +listType=atomic
	FailedClusters []FailedCluster `json:"failedClusters,omitempty" protobuf:"bytes,2,rep,name=failedClusters"`
}

type Condition struct {
	Type               ConditionType          `json:"type" protobuf:"bytes,1,opt,name=type,casttype=ConditionType"`
	Status             metav1.ConditionStatus `json:"status" protobuf:"bytes,2,opt,name=status,casttype=k8s.io/apimachinery/pkg/apis/meta/v1.ConditionStatus"`
	Reason             ConditionReason        `json:"reason,omitempty" protobuf:"bytes,3,opt,name=reason,casttype=ConditionReason"`
	Message            string                 `json:"message,omitempty" protobuf:"bytes,4,opt,name=message"`
	LastTransitionTime metav1.Time            `json:"lastTransitionTime,omitempty" protobuf:"bytes,5,opt,name=lastTransitionTime"`
	// +optional
	// +kubebuilder:validation:Minimum=0
	ObservedGeneration int64 `json:"observedGeneration,omitempty" protobuf:"varint,6,opt,name=observedGeneration"`
}

type ConditionGroup struct {
	Relation        ConditionGroupRelation `json:"relation,omitempty" protobuf:"bytes,1,opt,name=relation"`
	Conditions      []RoleBindingCondition `json:"conditions" protobuf:"bytes,2,req,name=conditions"`
	ConditionGroups []ConditionGroup       `json:"conditionGroups,omitempty" protobuf:"bytes,3,opt,name=conditionGroups"`
}

type ConditionGroupRelation int

type ConditionReason string

type ConditionType string

type Config struct {
	// WebsocketEnabled controls whether websocket is enabled.
	// +optional
	WebsocketEnabled *bool `json:"websocketEnabled,omitempty" protobuf:"varint,1,opt,name=websocketEnabled"`

	// FunctionEnabled controls whether function is enabled.
	// +optional
	FunctionEnabled *bool `json:"functionEnabled,omitempty" protobuf:"varint,2,opt,name=functionEnabled"`

	// TransactionEnabled controls whether transaction is enabled.
	// +optional
	TransactionEnabled *bool `json:"transactionEnabled,omitempty" protobuf:"varint,3,opt,name=transactionEnabled"`

	// Protocols controls the protocols enabled in brokers.
	// +optional
	Protocols *ProtocolsConfig `json:"protocols,omitempty" protobuf:"bytes,5,opt,name=protocols"`

	// AuditLog controls the custom config of audit log.
	// +optional
	AuditLog *AuditLog `json:"auditLog,omitempty" protobuf:"bytes,6,opt,name=auditLog"`

	// LakehouseStorage controls the lakehouse storage config.
	// +optional
	LakehouseStorage *LakehouseStorageConfig `json:"lakehouseStorage,omitempty" protobuf:"bytes,7,opt,name=lakehouseStorage"`

	// Custom accepts custom configurations.
	// +optional
	Custom map[string]string `json:"custom,omitempty" protobuf:"bytes,4,rep,name=custom"`
}

type Domain struct {
	Name string `json:"name" protobuf:"bytes,1,opt,name=name"`
	// +optional
	Type DomainType `json:"type,omitempty" protobuf:"bytes,2,opt,name=type"`
	// +optional
	TLS *DomainTLS `json:"tls,omitempty" protobuf:"bytes,3,opt,name=tls"`
}

type DomainTLS struct {
	// CertificateName specifies the certificate object name to use.
	// +optional
	CertificateName string `json:"certificateName,omitempty" protobuf:"bytes,1,opt,name=name"`
}

type DomainType string

type EncryptedToken struct {
	// JWE is the token as a JSON Web Encryption (JWE) message.
	// For RSA public keys, the key encryption algorithm is RSA-OAEP, and the content encryption algorithm is AES GCM.
	// +optional
	JWE *string `json:"jwe,omitempty" protobuf:"bytes,7,opt,name=jwe"`
}

type EncryptionKey struct {
	// PEM is a PEM-encoded public key in PKIX, ASN.1 DER form ("spki" format).
	// +optional
	PEM string `json:"pem,omitempty" protobuf:"bytes,1,opt,name=pem"`

	// JWK is a JWK-encoded public key.
	// +optional
	JWK string `json:"jwk,omitempty" protobuf:"bytes,2,opt,name=jwk"`
}

type FailedCluster struct {
	// Name is the Cluster's name
	Name string `json:"name" protobuf:"bytes,1,opt,name=name"`

	// Namespace is the Cluster's namespace
	Namespace string `json:"namespace" protobuf:"bytes,2,opt,name=namespace"`

	// Reason is the failed reason
	Reason string `json:"reason" protobuf:"bytes,3,opt,name=reason"`
}

type GCPCloudConnection struct {
	//nolint:stylecheck
	ProjectId string `json:"projectId" protobuf:"bytes,1,name=projectId"`
}

type KafkaConfig struct {
}

type LakehouseStorageConfig struct {

	// +optional
	// +kubebuilder:validation:Enum:=iceberg
	// +kubebuilder:default=iceberg
	LakehouseType *string `json:"lakehouseType,omitempty" protobuf:"bytes,1,opt,name=lakehouseType"`

	// +optional
	// +kubebuilder:validation:Enum:=rest
	// +kubebuilder:default=rest
	CatalogType *string `json:"catalogType,omitempty" protobuf:"bytes,2,opt,name=catalogType"`

	// todo: maybe we need to support mount secrets as the catalog credentials?
	// +kubebuilder:validation:Required
	CatalogCredentials string `json:"catalogCredentials" protobuf:"bytes,3,opt,name=catalogCredentials"`

	// +kubebuilder:validation:Required
	//nolint:stylecheck
	CatalogConnectionUrl string `json:"catalogConnectionUrl" protobuf:"bytes,4,opt,name=catalogConnectionUrl"`

	// +kubebuilder:validation:Required
	CatalogWarehouse string `json:"catalogWarehouse" protobuf:"bytes,5,opt,name=catalogWarehouse"`
}

type MqttConfig struct {
}

type PoolMemberReference struct {
	Namespace string `json:"namespace" protobuf:"bytes,1,opt,name=namespace"`
	Name      string `json:"name" protobuf:"bytes,2,opt,name=name"`
}

type PoolRef struct {
	Namespace string `json:"namespace" protobuf:"bytes,1,opt,name=namespace"`
	Name      string `json:"name" protobuf:"bytes,2,opt,name=name"`
}

type ProtocolsConfig struct {
	// Kafka controls whether to enable Kafka protocol in brokers
	// +optional
	Kafka *KafkaConfig `json:"kafka,omitempty" protobuf:"bytes,1,opt,name=kafka"`

	// Amqp controls whether to enable Amqp protocol in brokers
	// +optional
	//nolint:stylecheck
	Amqp *AmqpConfig `json:"amqp,omitempty" protobuf:"bytes,2,opt,name=amqp"`

	// Mqtt controls whether to enable mqtt protocol in brokers
	// +optional
	Mqtt *MqttConfig `json:"mqtt,omitempty" protobuf:"bytes,3,opt,name=mqtt"`
}

type PullPolicy string

type ResourceName struct {
	Organization   string `json:"organization,omitempty" protobuf:"bytes,1,opt,name=organization"`
	Instance       string `json:"instance,omitempty" protobuf:"bytes,2,opt,name=instance"`
	Cluster        string `json:"cluster,omitempty" protobuf:"bytes,3,opt,name=cluster"`
	Tenant         string `json:"tenant,omitempty" protobuf:"bytes,4,opt,name=tenant"`
	Namespace      string `json:"namespace,omitempty" protobuf:"bytes,5,opt,name=namespace"`
	TopicDomain    string `json:"topicDomain,omitempty" protobuf:"bytes,6,opt,name=topicDomain"`
	TopicName      string `json:"topicName,omitempty" protobuf:"bytes,7,opt,name=topicName"`
	Subscription   string `json:"subscription,omitempty" protobuf:"bytes,8,opt,name=subscription"`
	ServiceAccount string `json:"serviceAccount,omitempty" protobuf:"bytes,9,opt,name=serviceAccount"`
	APIKey         string `json:"apiKey,omitempty" protobuf:"bytes,10,opt,name=apiKey"`
	Secret         string `json:"secret,omitempty" protobuf:"bytes,11,opt,name=secret"`
}

type RoleBinding struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	Spec   RoleBindingSpec   `json:"spec,omitempty" protobuf:"bytes,2,opt,name=spec"`
	Status RoleBindingStatus `json:"status,omitempty" protobuf:"bytes,3,opt,name=status"`
}

type RoleBindingCondition struct {
	Type     RoleBindingConditionType     `json:"type,omitempty" protobuf:"bytes,1,opt,name=type"`
	Operator RoleBindingConditionOperator `json:"operator,omitempty" protobuf:"bytes,2,opt,name=operator"`
	Srn      Srn                          `json:"srn,omitempty" protobuf:"bytes,3,opt,name=srn"`
}

type RoleBindingConditionOperator int

type RoleBindingConditionType int

type RoleBindingList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []RoleBinding `json:"items"`
}

type RoleBindingSpec struct {
	// +listType=atomic
	Subjects []Subject `json:"subjects" protobuf:"bytes,1,rep,name=subjects"`
	RoleRef  RoleRef   `json:"roleRef" protobuf:"bytes,2,opt,name=roleRef"`

	// +optional
	ConditionGroup *ConditionGroup `json:"conditionGroup,omitempty" protobuf:"bytes,3,opt,name=conditionGroup"`
	// +optional
	CEL *string `json:"cel,omitempty" protobuf:"bytes,4,opt,name=cel"`

	// +optional
	// +listType=atomic
	// ResourceNames indicate the StreamNative Resource Name
	ResourceNames []ResourceName `json:"resourceNames,omitempty" protobuf:"bytes,5,opt,name=resourceNames"`
}

type RoleBindingStatus struct {
	// Conditions is an array of current observed conditions.
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type" protobuf:"bytes,1,rep,name=conditions"`

	// FailedClusters is an array of clusters which failed to apply the RoleBinding resources.
	// +optional
	// +listType=atomic
	FailedClusters []FailedCluster `json:"failedClusters,omitempty" protobuf:"bytes,2,rep,name=failedClusters"`

	// SyncedClusters is a map of clusters which applied the RoleBinding resources and the RoleBinding's generation.
	// If the generation in this map is same with the current RoleBinding's generation, it will skip apply the
	// RoleBinding to the cluster
	// +optional
	// +listType=atomic
	SyncedClusters map[string]int64 `json:"syncedClusters,omitempty" protobuf:"bytes,3,rep,name=syncedClusters"`
}

type RoleRef struct {
	Kind     string `json:"kind" protobuf:"bytes,1,opt,name=kind"`
	Name     string `json:"name" protobuf:"bytes,2,opt,name=name"`
	APIGroup string `json:"apiGroup" protobuf:"bytes,3,opt,name=apiGroup"`
}

type Secret struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	Spec   SecretSpec   `json:"spec,omitempty" protobuf:"bytes,2,opt,name=spec"`
	Status SecretStatus `json:"status,omitempty" protobuf:"bytes,3,opt,name=status"`

	// InstanceName is the name of the instance this secret is for (e.g. pulsar-instance)
	// +optional
	InstanceName string `json:"instanceName" protobuf:"bytes,4,opt,name=instanceName"`

	// Location is the location of the secret.
	// +optional
	Location string `json:"location" protobuf:"bytes,5,opt,name=location"`

	// the value should be base64 encoded
	Data map[string]string `json:"data,omitempty" protobuf:"bytes,6,opt,name=data"`

	// PoolMemberRef is the pool member to deploy the secret.
	// admission controller will infer this information automatically
	// +optional
	PoolMemberRef *PoolMemberReference `json:"poolMemberRef,omitempty" protobuf:"bytes,7,opt,name=poolMemberRef"`

	// +optional
	// +listType=atomic
	Tolerations []Toleration `json:"tolerations,omitempty" protobuf:"bytes,8,opt,name=tolerations"`

	// Type Used to facilitate programmatic handling of secret data.
	// +optional
	Type *corev1.SecretType `json:"type,omitempty" protobuf:"bytes,9,opt,name=type"`
}

type SecretList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Secret `json:"items"`
}

type SecretRef struct {
	// Namespace is the secret namespace
	// +optional
	Namespace string `json:"namespace,omitempty" protobuf:"bytes,1,opt,name=namespace"`

	// Name is the secret name
	Name string `json:"name,omitempty" protobuf:"bytes,2,opt,name=name"`
}

type SecretSpec struct {
}

type SecretStatus struct {
}

type ServiceAccount struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	Spec   ServiceAccountSpec   `json:"spec,omitempty" protobuf:"bytes,2,opt,name=spec"`
	Status ServiceAccountStatus `json:"status,omitempty" protobuf:"bytes,3,opt,name=status"`
}

type ServiceAccountBinding struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	Spec   ServiceAccountBindingSpec   `json:"spec,omitempty" protobuf:"bytes,2,opt,name=spec"`
	Status ServiceAccountBindingStatus `json:"status,omitempty" protobuf:"bytes,3,opt,name=status"`
}

type ServiceAccountBindingList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ServiceAccountBinding `json:"items"`
}

type ServiceAccountBindingSpec struct {
	// refers to the ServiceAccount under the same namespace as this binding object
	ServiceAccountName string `json:"serviceAccountName,omitempty" protobuf:"bytes,4,name=serviceAccountName"`

	// refers to a PoolMember in the current namespace or other namespaces
	PoolMemberRef PoolMemberReference `json:"poolMemberRef,omitempty" protobuf:"bytes,5,name=poolMemberRef"`
}

type ServiceAccountBindingStatus struct {
	// Conditions is an array of current observed service account binding conditions.
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type" protobuf:"bytes,1,rep,name=conditions"`
}

type ServiceAccountList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ServiceAccount `json:"items"`
}

type ServiceAccountSpec struct {
}

type ServiceAccountStatus struct {

	// PrivateKeyType indicates the type of private key information
	// +optional
	PrivateKeyType string `json:"privateKeyType,omitempty" protobuf:"bytes,1,opt,name=privateKeyType"`

	// PrivateKeyData provides the private key data (in base-64 format) for authentication purposes
	// +optional
	PrivateKeyData string `json:"privateKeyData,omitempty" protobuf:"bytes,2,opt,name=privateKeyData"`

	// Conditions is an array of current observed service account conditions.
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type" protobuf:"bytes,3,rep,name=conditions"`
}

type SharingConfig struct {
	// +listType=atomic
	Namespaces []string `json:"namespaces" protobuf:"bytes,1,rep,name=namespaces"`
}

type Srn struct {
	Schema       string `json:"schema,omitempty" protobuf:"bytes,1,opt,name=schema"`
	Version      string `json:"version,omitempty" protobuf:"bytes,2,opt,name=version"`
	Organization string `json:"organization,omitempty" protobuf:"bytes,3,opt,name=organization"`
	Instance     string `json:"instance,omitempty" protobuf:"bytes,4,opt,name=instance"`
	Cluster      string `json:"cluster,omitempty" protobuf:"bytes,5,opt,name=cluster"`
	Tenant       string `json:"tenant,omitempty" protobuf:"bytes,6,opt,name=tenant"`
	Namespace    string `json:"namespace,omitempty" protobuf:"bytes,7,opt,name=namespace"`
	TopicDomain  string `json:"topicDomain,omitempty" protobuf:"bytes,8,opt,name=topicDomain"`
	TopicName    string `json:"topicName,omitempty" protobuf:"bytes,9,opt,name=topicName"`
	Subscription string `json:"subscription,omitempty" protobuf:"bytes,10,opt,name=subscription"`
}

type Subject struct {
	Kind string `json:"kind" protobuf:"bytes,1,opt,name=kind"`
	Name string `json:"name" protobuf:"bytes,2,opt,name=name"`
	// +optional
	Namespace string `json:"namespace,omitempty" protobuf:"bytes,3,opt,name=namespace"`
	APIGroup  string `json:"apiGroup" protobuf:"bytes,4,opt,name=apiGroup"`
}

type Taint struct {
	// Required. The taint key to be applied to a workload cluster.
	Key string `json:"key" protobuf:"bytes,1,opt,name=key"`
	// Optional. The taint value corresponding to the taint key.
	// +optional
	Value string `json:"value,omitempty" protobuf:"bytes,2,opt,name=value"`
	// Required. The effect of the taint on workloads
	// that do not tolerate the taint.
	// Valid effects are NoSchedule, PreferNoSchedule and NoExecute.
	Effect TaintEffect `json:"effect" protobuf:"bytes,3,opt,name=effect,casttype=TaintEffect"`
	// TimeAdded represents the time at which the taint was added.
	// +optional
	TimeAdded *metav1.Time `json:"timeAdded,omitempty" protobuf:"bytes,4,opt,name=timeAdded"`
}

type TaintEffect string

type Toleration struct {
	// Key is the taint key that the toleration applies to. Empty means match all taint keys.
	// If the key is empty, operator must be Exists; this combination means to match all values and all keys.
	// +optional
	Key string `json:"key,omitempty" protobuf:"bytes,1,opt,name=key"`
	// Operator represents a key's relationship to the value.
	// Valid operators are Exists and Equal. Defaults to Equal.
	// Exists is equivalent to wildcard for value, so that a workload can
	// tolerate all taints of a particular category.
	// +optional
	Operator TolerationOperator `json:"operator,omitempty" protobuf:"bytes,2,opt,name=operator,casttype=TolerationOperator"`
	// Value is the taint value the toleration matches to.
	// If the operator is Exists, the value should be empty, otherwise just a regular string.
	// +optional
	Value string `json:"value,omitempty" protobuf:"bytes,3,opt,name=value"`
	// Effect indicates the taint effect to match. Empty means match all taint effects.
	// When specified, allowed values are NoSchedule and PreferNoSchedule.
	// +optional
	Effect TaintEffect `json:"effect,omitempty" protobuf:"bytes,4,opt,name=effect,casttype=TaintEffect"`
}

type TolerationOperator string

type ZooKeeperSetReference struct {
	// +optional
	Namespace string `json:"namespace,omitempty" protobuf:"bytes,1,opt,name=namespace"`
	Name      string `json:"name" protobuf:"bytes,2,opt,name=name"`
}