v1

type BridgeStatus string

type InterfaceStatus string

type NetworkConfig struct {
	// WireGuardPort is the port to use for WireGuard. One will be
	// allocated automatically if not provided.
	WireGuardPort int `json:"wireguardPort,omitempty"`
	// InterfaceName is the name to give the interface. It will be
	// automatically chosen from the name of the remote network if
	// not provided.
	InterfaceName string `json:"interfaceName,omitempty"`
	// MTU is the MTU to use for the interface. It will be automatically
	// chosen if not provided.
	MTU int `json:"mtu,omitempty"`
	// ForwardDNS enables forwarding DNS requests from the remote network.
	// Requires that a MeshDNS server is running on each peered CNI node.
	ForwardDNS bool `json:"forwardDNS,omitempty"`
	// DisableIPv4 disables IPv4 forwarding on the interface.
	DisableIPv4 bool `json:"disableIPv4,omitempty"`
	// DisableIPv6 disables IPv6 forwarding on the interface.
	DisableIPv6 bool `json:"disableIPv6,omitempty"`
}

type Peer struct {
	// ID is the ID of the peer. If provided, the native authentication
	// will attempt ID based authentication. If not provided, an ID will
	// be extracted from the public key and used for authentication.
	ID string `json:"id,omitempty"`
	// PublicKey is the public key of the peer. This must be provided if no
	// ID is provided.
	PublicKey string `json:"publicKey,omitempty"`
	// Endpoints are the endpoints of the peer. When not performing
	// authentication and not using peer-discovery, these are remote
	// wireguard endpoints. When performing authentication without
	// peer-discovery, these are remote gRPC endpoints.
	Endpoints []string `json:"endpoints,omitempty"`
	// Rendezvous is a rendezvous point for the peer. This is used for
	// peer discovery.
	Rendezvous string `json:"rendezvous,omitempty"`
}

type PeerContainer struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   PeerContainerSpec   `json:"spec,omitempty"`
	Status PeerContainerStatus `json:"status,omitempty"`
}

type PeerContainerList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []PeerContainer `json:"items"`
}

type PeerContainerSpec struct {
	// NodeID is the ID to use for the container.
	NodeID string `json:"nodeID,omitempty"`
	// ContainerID is the ID of the container being created.
	ContainerID string `json:"containerID,omitempty"`
	// Netns is the network namespace of the container being created.
	Netns string `json:"netns,omitempty"`
	// IfName is the name of the interface create.
	IfName string `json:"ifName,omitempty"`
	// NodeName is the name of the node the container is running on.
	NodeName string `json:"nodeName,omitempty"`
	// MTU is the MTU to set on the interface.
	MTU int `json:"mtu,omitempty"`
	// DisableIPv4 is whether to disable IPv4 on the interface.
	DisableIPv4 bool `json:"disableIPv4,omitempty"`
	// DisableIPv6 is whether to disable IPv6 on the interface.
	DisableIPv6 bool `json:"disableIPv6,omitempty"`
	// LogLevel is the log level for the webmesh interface.
	LogLevel string `json:"logLevel,omitempty"`
}

type PeerContainerStatus struct {
	// InterfaceStatus is the current status of the interface.
	InterfaceStatus InterfaceStatus `json:"status,omitempty"`
	// InterfaceName is the name of the interface.
	InterfaceName string `json:"interfaceName,omitempty"`
	// MACAddress is the MAC address of the interface.
	MACAddress string `json:"macAddress,omitempty"`
	// IPv4Address is the IPv4 address of the interface.
	IPv4Address string `json:"ipv4Address,omitempty"`
	// IPv6Address is the IPv6 address of the interface.
	IPv6Address string `json:"ipv6Address,omitempty"`
	// NetworkV4 is the IPv4 network of the interface.
	NetworkV4 string `json:"networkV4,omitempty"`
	// NetworkV6 is the IPv6 network of the interface.
	NetworkV6 string `json:"networkV6,omitempty"`
	// DNSServers is an optional list of extra DNS servers to use for the interface.
	DNSServers []string `json:"dnsServers,omitempty"`
	// Error is any error that occurred while peering the interface.
	Error string `json:"error,omitempty"`
}

type RemoteAuthMethod string

type RemoteNetwork struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   RemoteNetworkSpec   `json:"spec,omitempty"`
	Status RemoteNetworkStatus `json:"status,omitempty"`
}

type RemoteNetworkList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []RemoteNetwork `json:"items"`
}

type RemoteNetworkSpec struct {
	// AuthMethod is the authentication method to use for peering with
	// the remote network.
	// +kubebuilder:validation:Enum=none;native;kubernetes
	// +kubebuilder:default=native
	AuthMethod RemoteAuthMethod `json:"authMethod"`
	// RemoteNamespace is the remote namespace to use for peer storage
	// when using the kubernetes authentication method. Defaults to the
	// storage namespace configured on the host.
	RemoteNamespace string `json:"remoteNamespace,omitempty"`
	// Network is the network configuration for the bridge connection.
	Network NetworkConfig `json:"network,omitempty"`
	// Peers are one or more peers in the remote network. These are optional
	// when using kubernetes authentication. Endpoints must be supplied for
	// one or more peers in the list if not using peer-discovery.
	Peers []Peer `json:"peers,omitempty"`
	// Credentials are a reference to a secret containing credentials for the remote
	// network. It may contain a kubeconfig for kubernetes authentication or TLS
	// credentials for mTLS authentication. If native authentication is set and no
	// kubeconfig or TLS credentials are present, ID authentication will be used.
	Credentials *corev1.ObjectReference `json:"credentials,omitempty"`
	// CheckInterval is the interval to check on the remote network status when
	// using native or no authentication. Defaults to 1 minute. Kubernetes authentication
	// relies on storage subscription events and does not require a check interval.
	CheckInterval *metav1.Duration `json:"checkInterval,omitempty"`
}

type RemoteNetworkStatus struct {
	// BridgeStatus is the status of the bridge interface.
	BridgeStatus BridgeStatus `json:"bridgeStatus,omitempty"`
	// InterfaceName is the name of the interface.
	InterfaceName string `json:"interfaceName"`
	// MACAddress is the MAC address of the interface.
	MACAddress string `json:"macAddress"`
	// IPv4Address is the IPv4 address of the interface.
	IPv4Address string `json:"ipv4Address"`
	// IPv6Address is the IPv6 address of the interface.
	IPv6Address string `json:"ipv6Address"`
	// NetworkV4 is the IPv4 network of the interface.
	NetworkV4 string `json:"networkV4"`
	// NetworkV6 is the IPv6 network of the interface.
	NetworkV6 string `json:"networkV6"`
	// Peers are the peers in the remote network.
	Peers []Peer `json:"peers,omitempty"`
	// Error is the last error encountered when peering with the remote network.
	Error string `json:"error,omitempty"`
}