v1alpha1

type ComputeResourceRule struct {
	validationrule.ManuallyNamed `json:",inline" yaml:",omitempty"`

	// RuleName is the name of the compute resource validation rule.
	RuleName string `json:"name" yaml:"name"`

	// ClusterName is required when the vCenter entity resides beneath a Cluster in the vCenter object hierarchy.
	ClusterName string `json:"clusterName,omitempty" yaml:"clusterName"`

	// Scope is the scope of the compute resource validation rule.
	Scope string `json:"scope" yaml:"scope"`

	// EntityName is the name of the entity to validate.
	EntityName string `json:"entityName" yaml:"entityName"`

	// NodepoolResourceRequirements is the list of nodepool resource requirements.
	NodepoolResourceRequirements []NodepoolResourceRequirement `json:"nodepoolResourceRequirements" yaml:"nodepoolResourceRequirements"`
}

type NTPValidationRule struct {
	validationrule.ManuallyNamed `json:",inline" yaml:",omitempty"`

	// RuleName is the name of the NTP validation rule.
	RuleName string `json:"name" yaml:"name"`

	// ClusterName is required when the vCenter Host(s) reside beneath a Cluster in the vCenter object hierarchy.
	ClusterName string `json:"clusterName,omitempty" yaml:"clusterName,omitempty"`

	// Hosts is the list of vCenter Hosts to validate NTP configuration for.
	Hosts []string `json:"hosts" yaml:"hosts"`
}

type NodepoolResourceRequirement struct {
	// Name is the name of the node pool.
	Name string `json:"name" yaml:"name"`

	// NumberOfNodes is the number of nodes in the node pool.
	NumberOfNodes int `json:"numberOfNodes" yaml:"numberOfNodes"`

	// CPU is the CPU requirement for the node pool.
	CPU string `json:"cpu" yaml:"cpu"`

	// Memory is the memory requirement for the node pool.
	Memory string `json:"memory" yaml:"memory"`

	// DiskSpace is the disk space requirement for the node pool.
	DiskSpace string `json:"diskSpace" yaml:"diskSpace"`
}

type PrivilegeValidationRule struct {
	validationrule.ManuallyNamed `json:",inline" yaml:",omitempty"`

	// RuleName is the name of the privilege validation rule.
	RuleName string `json:"name" yaml:"name"`

	// ClusterName is required when the vCenter entity resides beneath a Cluster in the vCenter object hierarchy.
	ClusterName string `json:"clusterName,omitempty" yaml:"clusterName,omitempty"`

	// EntityType is the type of the vCenter entity to validate.
	EntityType string `json:"entityType" yaml:"entityType"`

	// EntityName is the name of the vCenter entity to validate privileges on.
	EntityName string `json:"entityName" yaml:"entityName"`

	// Privileges is the list of privileges to validate that the user has with respect to the designated vCenter entity.
	Privileges []string `json:"privileges" yaml:"privileges"`

	// Propagation validation configuration for permissions that grant the user privileges on the vCenter entity.
	Propagation Propagation `json:"propagation,omitempty" yaml:"propagation,omitempty"`
}

type Propagation struct {
	// Enabled controls whether propagation validation is performed.
	Enabled bool `json:"enabled" yaml:"enabled"`

	// GroupPrincipals is an optional list of vCenter group principals that the user is a member of.
	// Group membership can be determined dynamically by a vSphere admin user, but specifying
	// group principals manually allows privilege validation for non-admin users.
	// Group principals must be of the format DOMAIN\group-name, e.g., VSPHERE.LOCAL\my-custom-group.
	GroupPrincipals []string `json:"groupPrincipals,omitempty" yaml:"groupPrincipals,omitempty"`

	// Propagated indicates whether the permission that grants privileges to the user for the rule's
	// entity is expected to be propagated or not.
	Propagated bool `json:"propagated" yaml:"propagated"`
}

type TagValidationRule struct {
	validationrule.ManuallyNamed `json:",inline" yaml:",omitempty"`

	// RuleName is the name of the tag validation rule.
	RuleName string `json:"name" yaml:"name"`

	// ClusterName is required when the vCenter entity resides beneath a Cluster in the vCenter object hierarchy.
	ClusterName string `json:"clusterName,omitempty" yaml:"clusterName"`

	// EntityType is the type of the vCenter entity to validate.
	EntityType string `json:"entityType" yaml:"entityType"`

	// EntityName is the name of the vCenter entity to validate tags on.
	EntityName string `json:"entityName" yaml:"entityName"`

	// Tag is the tag to validate on the vCenter entity.
	Tag string `json:"tag" yaml:"tag"`
}

type VsphereAuth struct {
	// SecretName is the name of the secret containing vCenter credentials.
	SecretName string `json:"secretName,omitempty" yaml:"secretName,omitempty"`

	// Account is the vCenter account to use for authentication.
	Account *vcenter.Account `json:"account,omitempty" yaml:"account,omitempty"`
}

type VsphereValidator struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   VsphereValidatorSpec   `json:"spec,omitempty"`
	Status VsphereValidatorStatus `json:"status,omitempty"`
}

type VsphereValidatorList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []VsphereValidator `json:"items"`
}

type VsphereValidatorSpec struct {
	Auth                     VsphereAuth               `json:"auth" yaml:"auth"`
	Datacenter               string                    `json:"datacenter" yaml:"datacenter"`
	PrivilegeValidationRules []PrivilegeValidationRule `json:"privilegeValidationRules,omitempty" yaml:"privilegeValidationRules,omitempty"`
	TagValidationRules       []TagValidationRule       `json:"tagValidationRules,omitempty" yaml:"tagValidationRules,omitempty"`
	ComputeResourceRules     []ComputeResourceRule     `json:"computeResourceRules,omitempty" yaml:"computeResourceRules,omitempty"`
	NTPValidationRules       []NTPValidationRule       `json:"ntpValidationRules,omitempty" yaml:"ntpValidationRules,omitempty"`
}

type VsphereValidatorStatus struct{}