v1

type BaseLoggerSpec struct {
	//+kubebuilder:validation:MinLength:=1
	Name string `json:"name,omitempty"`
	//+kubebuilder:default:=plain_text
	//+kubebuilder:validation:Enum=plain_text;json;yson
	Format LogFormat `json:"format,omitempty"`
	//+kubebuilder:validation:Enum=trace;debug;info;warning;error
	//+kubebuilder:default:=info
	MinLogLevel LogLevel `json:"minLogLevel,omitempty"`
	//+kubebuilder:default:=none
	//+kubebuilder:validation:Enum=none;gzip;zstd
	Compression LogCompression `json:"compression,omitempty"`
	//+kubebuilder:default:=false
	//+optional
	UseTimestampSuffix    bool               `json:"useTimestampSuffix"`
	EnableAnchorProfiling *bool              `json:"enableAnchorProfiling,omitempty"`
	RotationPolicy        *LogRotationPolicy `json:"rotationPolicy,omitempty"`
}

type BootstrapSpec struct {
	TabletCellBundles *BundlesBootstrapSpec `json:"tabletCellBundles,omitempty"`
}

type BundleBootstrapSpec struct {
	SnapshotPrimaryMedium  *string `json:"snapshotMedium,omitempty"`
	ChangelogPrimaryMedium *string `json:"changelogMedium,omitempty"`
	//+kubebuilder:default:=1
	TabletCellCount int     `json:"tabletCellCount,omitempty"`
	NodeTagFilter   *string `json:"nodeTagFilter,omitempty"`
}

type BundleControllerInfo struct {
	Disabled *bool `json:"disabled,omitempty"`
}

type BundleControllerSpec struct {
	InstanceSpec `json:",inline"`
}

type BundlesBootstrapSpec struct {
	Sys     *BundleBootstrapSpec `json:"sys,omitempty"`
	Default *BundleBootstrapSpec `json:"default,omitempty"`
}

type CHYTProxySpec struct {
	//+kubebuilder:default:=8123
	HttpPort     *int32 `json:"httpPort,omitempty"`
	HttpNodePort *int32 `json:"httpNodePort,omitempty"`
	//+kubebuilder:default:=8443
	HttpsPort     *int32 `json:"httpsPort,omitempty"`
	HttpsNodePort *int32 `json:"httpsNodePort,omitempty"`
}

type CRIJobEnvironmentSpec struct {
	// CRI service: containerd (default), crio, none.
	//+optional
	//+kubebuilder:validation:Enum={"containerd","crio","none"}
	CRIService *CRIServiceType `json:"criService,omitempty"`
	// CRI service monitoring port, default is 10026, set 0 to disable.
	// +optional
	MonitoringPort *int32 `json:"monitoringPort,omitempty"`
	// Specifies wrapper for CRI service command, default: ["tini", "--"].
	//+optional
	EntrypointWrapper []string `json:"entrypointWrapper,omitempty"`
	// Sandbox (pause) image.
	//+optional
	SandboxImage *string `json:"sandboxImage,omitempty"`
	// Timeout for retrying CRI API calls.
	//+optional
	APIRetryTimeoutSeconds *int32 `json:"apiRetryTimeoutSeconds,omitempty"`
	// CRI namespace for jobs containers.
	//+optional
	CRINamespace *string `json:"criNamespace,omitempty"`
	// Base cgroup for jobs.
	//+optional
	BaseCgroup *string `json:"baseCgroup,omitempty"`
	// For containerd: https://github.com/containerd/containerd/blob/main/docs/hosts.md
	//+optional
	RegistryConfigPath *string `json:"registryConfigPath,omitempty"`
	// Initial estimation for space required for pulling image into cache.
	//+optional
	ImageSizeEstimation *int64 `json:"imageSizeEstimation,omitempty"`
	// Multiplier for image size to account space used by unpacked images.
	//+optional
	ImageCompressionRatioEstimation *int32 `json:"imageCompressionRatioEstimation,omitempty"`
	// Always pull "latest" images.
	//+optional
	AlwaysPullLatestImage *bool `json:"alwaysPullLatestImage,omitempty"`
	// Pull images periodically.
	//+optional
	ImagePullPeriodSeconds *int32 `json:"imagePullPeriodSeconds,omitempty"`
	// For CRI-O: credentials for pulling job images, "jobImage", "sandboxImage": secret type "kubernetes.io/dockerconfigjson".
	// This is used if operation spec contains no "secure_vault/docker_auth".
	//+optional
	ImagePullSecret *corev1.LocalObjectReference `json:"imagePullSecret,omitempty"`
}

type CRIServiceType string

type CategoriesFilter struct {
	//+kubebuilder:validation:Enum=exclude;include
	Type CategoriesFilterType `json:"type,omitempty"`
	//+kubebuilder:validation:MinItems=1
	Values []string `json:"values,omitempty"`
}

type CategoriesFilterType string

type Chyt struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ChytSpec   `json:"spec,omitempty"`
	Status ChytStatus `json:"status,omitempty"`
}

type ChytList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Chyt `json:"items"`
}

type ChytReleaseStatus string

type ChytSpec struct {
	ImagePullSecrets []corev1.LocalObjectReference `json:"imagePullSecrets,omitempty"`

	Ytsaurus *corev1.LocalObjectReference `json:"ytsaurus,omitempty"`
	Image    string                       `json:"image,omitempty"`
	// Mark specified image as default for cliques.
	//+kubebuilder:default:=false
	MakeDefault bool `json:"makeDefault"`
	// Create ch_public clique, which is used by default when running CHYT queries.
	CreatePublicClique *bool `json:"createPublicClique,omitempty"`
}

type ChytStatus struct {
	Conditions    []metav1.Condition `json:"conditions,omitempty"`
	ReleaseStatus ChytReleaseStatus  `json:"releaseStatus,omitempty"`
}

type ClusterFeatures struct {
	// RPC proxies have "public_rpc" address. Required for separated internal/public TLS CA.
	RPCProxyHavePublicAddress bool `json:"rpcProxyHavePublicAddress,omitempty"`
	// HTTP proxies have "chyt_http_server" and "chyt_https_server". Opens ports for access to chyt via HTTP proxy.
	HTTPProxyHaveChytAddress bool `json:"httpProxyHaveChytAddress,omitempty"`
	// HTTP proxies have "https" address. Use HTTPS for all communications.
	HTTPProxyHaveHTTPSAddress bool `json:"httpProxyHaveHttpsAddress,omitempty"`
	// Validate that only secure transports are allowed for cluster connections.
	SecureClusterTransports bool `json:"secureClusterTransports,omitempty"`
	// Pull required images to all selected nodes before cluster initialization and update.
	// Alternatively ImageHeater could be enlisted in update plan for all or selected components.
	EnableImageHeater bool `json:"enableImageHeater,omitempty"`
	// Enable logging anchor profiling by default for loggers that don't explicitly disable it.
	EnableAnchorProfilingByDefault bool `json:"enableAnchorProfilingByDefault,omitempty"`
}

type ClusterMaintenance struct {
	// Shutdown defines which components are scaled down to zero replicas during cluster maintenance.
	// Component configs are not changed: cluster functions are degraded accordingly.
	//+kubebuilder:validation:Enum={"Compute","Everything","ExceptMasters","Tablets"}
	Shutdown ClusterShutdown `json:"shutdown"`
	// Trigger master cells roles assignment.
	// +optional
	AssignMasterCellsRoles bool `json:"assignMasterCellsRoles,omitempty"`
}

type ClusterNodesSpec struct {
	// List of the node tags.
	Tags []string `json:"tags,omitempty"`
	// Name of the node rack.
	Rack string `json:"rack,omitempty"`
}

type ClusterShutdown string

type ClusterState string

type CommonRemoteNodeStatus struct {
	Conditions []metav1.Condition `json:"conditions,omitempty"`
	// Reflects resource generation which was used for updating status.
	ObservedGeneration int64                   `json:"observedGeneration,omitempty"`
	ReleaseStatus      RemoteNodeReleaseStatus `json:"releaseStatus,omitempty"`
}

type CommonSpec struct {
	CoreImage string `json:"coreImage,omitempty"`

	ClusterFeatures *ClusterFeatures `json:"clusterFeatures,omitempty"`

	// Controls cluster maintenance.
	ClusterMaintenance *ClusterMaintenance `json:"clusterMaintenance,omitempty"`

	// Default docker image for user jobs.
	//+optional
	JobImage *string `json:"jobImage,omitempty"`

	// Cluster-wide timbertruck sidecar settings (image, logs delivery path) used by any component
	// that enables log delivery via a structured logger's enableDelivery flag.
	// Per-component overrides (e.g. primaryMasters.timbertruck) take precedence field-by-field.
	//+optional
	Timbertruck *TimbertruckSpec `json:"timbertruck,omitempty"`

	// Reference to trusted root certificates. Default kind="ConfigMap", key="ca-certificates.crt".
	// Will replace system CA root bundle for all server and job containers.
	//+optional
	CARootBundle *FileObjectReference `json:"caRootBundle,omitempty"`

	// Reference to trusted native transport certificates. Default kind="ConfigMap", key="ca.crt".
	// By default will use system CA bundle, which could be set by caRootBundle.
	//+optional
	CABundle *FileObjectReference `json:"caBundle,omitempty"`

	// Common config for native RPC bus transport.
	//+optional
	NativeTransport *RPCTransportSpec `json:"nativeTransport,omitempty"`

	// Common tracing configuration for all YTsaurus server components.
	//+optional
	Tracing *TracingSpec `json:"tracing,omitempty"`

	// Allow prioritizing performance over data safety. Useful for tests and experiments.
	//+kubebuilder:default:=false
	//+optional
	EphemeralCluster bool `json:"ephemeralCluster,omitempty"`

	//+kubebuilder:default:=false
	//+optional
	UseIPv6 bool `json:"useIpv6"`
	//+kubebuilder:default:=false
	//+optional
	UseIPv4 bool `json:"useIpv4"`
	//+optional
	KeepSocket *bool `json:"keepSocket,omitempty"`
	//+optional
	ForceTCP *bool `json:"forceTcp,omitempty"`

	// Do not add resource name into names of resources under control.
	// When enabled resource should not share namespace with other Ytsaurus.
	//+kubebuilder:default:=true
	//+optional
	UseShortNames bool `json:"useShortNames"`

	//+kubebuilder:default:=false
	//+optional
	UsePorto bool `json:"usePorto"`

	// Deprecated: Despite its name, it adds annotations to all resources. Use podAnnotations instead.
	ExtraPodAnnotations map[string]string `json:"extraPodAnnotations,omitempty"`

	ConfigOverrides *corev1.LocalObjectReference `json:"configOverrides,omitempty"`

	// Credentials for pulling "coreImage" and "image" set for components.
	ImagePullSecrets []corev1.LocalObjectReference `json:"imagePullSecrets,omitempty"`
}

type Component struct {
	Type ComponentType `json:"type,omitempty"`
	Name string        `json:"name,omitempty"`
}

type ComponentClass string

type ComponentOnDeleteUpdateMode struct {
}

type ComponentRollingUpdateMode struct {
}

type ComponentType string

type ComponentUpdateModeType string

type ComponentUpdateSelector struct {
	// Selects components by class: Nothing, Everything, Stateless (except Master, DataNode, TabletNode).
	//+kubebuilder:validation:Enum={"","Nothing","Stateless","Everything"}
	Class ComponentClass `json:"class,omitempty"`
	// Selects components by type and/or instance group name.
	Component Component `json:"component,omitempty"`
	// Limits count of instance groups updated concurrently.
	//+kubebuilder:validation:Minimum=0
	Concurrency *int32 `json:"concurrency,omitempty"`
	// Defines update strategy for selected instance groups.
	Strategy *ComponentUpdateStrategy `json:"strategy,omitempty"`
}

type ComponentUpdateStrategy struct {
	RunPreChecks  *bool                        `json:"runPreChecks,omitempty"`
	RollingUpdate *ComponentRollingUpdateMode  `json:"rollingUpdate,omitempty"`
	OnDelete      *ComponentOnDeleteUpdateMode `json:"onDelete,omitempty"`
}

type ControllerAgentsSpec struct {
	// label filter (for daemonset)
	InstanceSpec `json:",inline"`
}

type CypressProxiesSpec struct {
	InstanceSpec `json:",inline"`
	Disable      *bool `json:"disable,omitempty"`
}

type DataNodesSpec struct {
	InstanceSpec `json:",inline"`
	// Common part of the cluster node spec.
	ClusterNodesSpec `json:",inline"`
	//+kubebuilder:default:=default
	//+kubebuilder:validation:MinLength:=1
	Name string `json:"name,omitempty"`
}

type DeprecatedSpytSpec struct {
	SparkVersion string `json:"sparkVersion,omitempty"`
	SpytVersion  string `json:"spytVersion,omitempty"`
}

type DiscoverySpec struct {
	// label filter (for daemonset)
	InstanceSpec `json:",inline"`
}

type EmbeddedObjectMetadata struct {
	// Name must be unique within a namespace. Is required when creating resources, although
	// some resources may allow a client to request the generation of an appropriate name
	// automatically. Name is primarily intended for creation idempotence and configuration
	// definition.
	// Cannot be updated.
	// More info: http://kubernetes.io/docs/user-guide/identifiers#names
	// +optional
	Name string `json:"name,omitempty" protobuf:"bytes,1,opt,name=name"`

	// Map of string keys and values that can be used to organize and categorize
	// (scope and select) objects. May match selectors of replication controllers
	// and services.
	// More info: http://kubernetes.io/docs/user-guide/labels
	// +optional
	Labels map[string]string `json:"labels,omitempty" protobuf:"bytes,11,rep,name=labels"`

	// Annotations is an unstructured key value map stored with a resource that may be
	// set by external tools to store and retrieve arbitrary metadata. They are not
	// queryable and should be preserved when modifying objects.
	// More info: http://kubernetes.io/docs/user-guide/annotations
	// +optional
	Annotations map[string]string `json:"annotations,omitempty" protobuf:"bytes,12,rep,name=annotations"`
}

type EmbeddedPersistentVolumeClaim struct {
	metav1.TypeMeta `json:",inline"`

	// EmbeddedMetadata contains metadata relevant to an EmbeddedResource.
	EmbeddedObjectMetadata `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Spec defines the desired characteristics of a volume requested by a pod author.
	// More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
	// +optional
	Spec corev1.PersistentVolumeClaimSpec `json:"spec,omitempty" protobuf:"bytes,2,opt,name=spec"`
}

type ExecNodesSpec struct {
	// label filter (for daemonset)
	InstanceSpec `json:",inline"`
	// Common part of the cluster node spec.
	ClusterNodesSpec `json:",inline"`
	//+kubebuilder:default:=default
	//+kubebuilder:validation:MinLength:=1
	Name string `json:"name,omitempty"`
	// List of init containers as yaml of core/v1 Container.
	InitContainers []string `json:"initContainers,omitempty"`
	// List of sidecar containers as yaml of core/v1 Container.
	Sidecars []string `json:"sidecars,omitempty"`
	//+kubebuilder:default:=true
	//+optional
	Privileged bool `json:"privileged"`
	//+optional
	GPUManager      *GPUManagerSpec  `json:"gpuManager,omitempty"`
	JobProxyLoggers []TextLoggerSpec `json:"jobProxyLoggers,omitempty"`
	//+optional
	JobProxyLogManager *JobProxyLogManagerSpec `json:"jobProxyLogManager,omitempty"`
	// Resources dedicated for running jobs. Capacity is defined by requests, or limits for zero requests. Default: same limits as exec node with zero requests.
	//+optional
	JobResources *corev1.ResourceRequirements `json:"jobResources,omitempty"`
	//+optional
	JobEnvironment *JobEnvironmentSpec `json:"jobEnvironment,omitempty"`
}

type FileObjectReference struct {
	// Kind is the type of resource: ConfigMap or Secret.
	//+kubebuilder:validation:Enum=ConfigMap;Secret
	Kind string `json:"kind,omitempty"`
	// Name is the name of resource being referenced
	Name string `json:"name,omitempty"`
	// Key is the name of entry in ConfigMap or Secret.
	Key string `json:"key,omitempty"`
	// Items defines entries in ConfigMap or Secret, default: if Key is defined map to Path: "ca-certificates.crt".
	Items []corev1.KeyToPath `json:"items,omitempty"`
}

type GPUInfoProviderType string

type GPUManagerSpec struct {
	GPUInfoProvider *GPUInfoProviderType `json:"gpuInfoProvider,omitempty"`
}

type HTTPProxiesSpec struct {
	InstanceSpec `json:",inline"`
	//+kubebuilder:default:=NodePort
	ServiceType corev1.ServiceType `json:"serviceType,omitempty"`
	//+kubebuilder:default:=80
	HttpPort *int32 `json:"httpPort,omitempty"`
	//+kubebuilder:default:=443
	HttpsPort     *int32         `json:"httpsPort,omitempty"`
	HttpNodePort  *int32         `json:"httpNodePort,omitempty"`
	HttpsNodePort *int32         `json:"httpsNodePort,omitempty"`
	ChytProxy     *CHYTProxySpec `json:"chytProxy,omitempty"`
	//+kubebuilder:default:=default
	//+kubebuilder:validation:MinLength:=1
	Role string `json:"role,omitempty"`
	//+optional
	Transport HTTPTransportSpec `json:"transport,omitempty"`
}

type HTTPTransportSpec struct {
	// Reference to kubernetes.io/tls secret.
	//+optional
	HTTPSSecret *corev1.LocalObjectReference `json:"httpsSecret,omitempty"`
	//+optional
	DisableHTTP bool `json:"disableHttp,omitempty"`
}

type HealthcheckProbeParams struct {
	//+optional
	InitialDelaySeconds int32 `json:"initialDelaySeconds,omitempty"`
	//+optional
	TimeoutSeconds int32 `json:"timeoutSeconds,omitempty"`
	//+optional
	PeriodSeconds int32 `json:"periodSeconds,omitempty"`
	//+optional
	SuccessThreshold int32 `json:"successThreshold,omitempty"`
	//+optional
	FailureThreshold int32 `json:"failureThreshold,omitempty"`
}

type HydraPersistenceUploaderSpec struct {
	Image *string `json:"image,omitempty"`
}

type InstanceSpec struct {
	PodSpec `json:",inline"`

	// Overrides coreImage for component.
	//+optional
	Image *string `json:"image,omitempty"`
	// Specifies wrapper for component container command.
	//+optional
	EntrypointWrapper []string             `json:"entrypointWrapper,omitempty"`
	Volumes           []Volume             `json:"volumes,omitempty"`
	VolumeMounts      []corev1.VolumeMount `json:"volumeMounts,omitempty"`
	//+optional
	ReadinessProbeParams *HealthcheckProbeParams `json:"readinessProbeParams,omitempty"`
	// Resources dedicated for component. Capacity is defined by requests, or limits for zero requests.
	Resources corev1.ResourceRequirements `json:"resources,omitempty"`
	// Desired count of replicas. Default: 0.
	//+kubebuilder:default:=0
	//+kubebuilder:validation:Minimum:=0
	InstanceCount int32 `json:"instanceCount,omitempty"`
	// Required count of replicas. Defaulted and bounded by instanceCount.
	//+kubebuilder:validation:Minimum:=0
	MinReadyInstanceCount *int32                          `json:"minReadyInstanceCount,omitempty"`
	Locations             []LocationSpec                  `json:"locations,omitempty"`
	VolumeClaimTemplates  []EmbeddedPersistentVolumeClaim `json:"volumeClaimTemplates,omitempty"`
	// Deprecated: use Affinity.PodAntiAffinity instead.
	EnableAntiAffinity *bool `json:"enableAntiAffinity,omitempty"`
	//+optional
	MonitoringPort    *int32                 `json:"monitoringPort,omitempty"`
	MetricExporter    *MetricExporter        `json:"metricExporter,omitempty"`
	Loggers           []TextLoggerSpec       `json:"loggers,omitempty"`
	StructuredLoggers []StructuredLoggerSpec `json:"structuredLoggers,omitempty"`
	Affinity          *corev1.Affinity       `json:"affinity,omitempty"`
	// Component config for native RPC bus transport.
	//+optional
	NativeTransport *RPCTransportSpec `json:"nativeTransport,omitempty"`
}

type JobEnvironmentSpec struct {
	// Isolate job execution environment from exec node or not, by default true when possible.
	//+optional
	Isolated *bool `json:"isolated,omitempty"`
	// Count of slots for user jobs on each exec node, default is 5 per CPU.
	//+optional
	UserSlots *int `json:"userSlots,omitempty"`
	// CRI service configuration for running jobs in sidecar container.
	//+optional
	CRI *CRIJobEnvironmentSpec `json:"cri,omitempty"`
	// Pass artifacts as read-only bind-mounts rather than symlinks.
	//+optional
	UseArtifactBinds *bool `json:"useArtifactBinds,omitempty"`
	// Do not use slot user id for running jobs.
	//+optional
	DoNotSetUserId *bool `json:"doNotSetUserId,omitempty"`
	// Container Runtime configuration for CRI service. Default: runc.
	//+optional
	Runtime *JobRuntimeSpec `json:"runtime,omitempty"`
}

type JobProxyLogManagerSpec struct {
	// How the exec node stores job proxy logs.
	//+kubebuilder:default:=simple
	Mode JobProxyLoggingMode `json:"mode,omitempty"`

	// TTL for logs of finished jobs: job logs are removed when they become
	// older than this period.
	LogsStoragePeriodMilliseconds *int64 `json:"logsStoragePeriodMilliseconds,omitempty"`

	// How many directories are checked at the same time during logs cleanup.
	//+kubebuilder:validation:Minimum=1
	//+kubebuilder:validation:Maximum=8
	DirectoryTraversalConcurrency *int `json:"directoryTraversalConcurrency,omitempty"`

	// Directory with symlinks to job log directories on all locations.
	JobProxyLogSymlinksPath *string `json:"jobProxyLogSymlinksPath,omitempty"`
}

type JobProxyLoggingMode string

type JobRuntimeSpec struct {
	// Use NVIDIA Container Runtime.
	//+optional
	Nvidia *NvidiaRuntimeSpec `json:"nvidia,omitempty"`
	// Use METAX Container Runtime.
	//+optional
	Metax *MetaxRuntimeSpec `json:"metax,omitempty"`
}

type KafkaProxiesSpec struct {
	InstanceSpec `json:",inline"`
	ServiceType  *corev1.ServiceType `json:"serviceType,omitempty"`
	//+kubebuilder:default:=default
	//+kubebuilder:validation:MinLength:=1
	Role string `json:"role,omitempty"`
}

type LocationSpec struct {
	LocationType LocationType `json:"locationType,omitempty"`
	//+kubebuilder:validation:MinLength:=1
	Path string `json:"path,omitempty"`

	//+kubebuilder:default:=default
	Medium string `json:"medium,omitempty"`

	// Disk space quota, default is size of related volume.
	//+optional
	Quota *resource.Quantity `json:"quota,omitempty"`
	// Limit above which the volume is considered to be non-full.
	//+optional
	LowWatermark *resource.Quantity `json:"lowWatermark,omitempty"`
	// Max TTL of trash in milliseconds.
	//+kubebuilder:validation:Minimum:=60000
	MaxTrashMilliseconds *int64 `json:"maxTrashMilliseconds,omitempty"`
}

type LocationType string

type LogCompression string

type LogFormat string

type LogLevel string

type LogRotationPolicy struct {
	RotationPeriodMilliseconds *int64             `json:"rotationPeriodMilliseconds,omitempty"`
	MaxSegmentSize             *resource.Quantity `json:"maxSegmentSize,omitempty"`
	MaxTotalSizeToKeep         *resource.Quantity `json:"maxTotalSizeToKeep,omitempty"`
	MaxSegmentCountToKeep      *int64             `json:"maxSegmentCountToKeep,omitempty"`
}

type LogWriterType string

type MasterCachesConnectionSpec struct {
	//+listType=set
	HostAddresses []string `json:"hostAddresses,omitempty"`
}

type MasterCachesSpec struct {
	InstanceSpec               `json:",inline"`
	MasterCachesConnectionSpec `json:",inline"`
	HostAddressLabel           string `json:"hostAddressesLabel,omitempty"`

	// Deprecated: have no effect.
	CellTagMasterCaches uint16 `json:"cellTagMasterCaches,omitempty"`
	// Deprecated: use hostAddresses instead.
	HostAddressesMasterCaches []string `json:"hostAddressesMasterCaches,omitempty"`
}

type MasterCellMaintenanceInfo struct {
	CellTag      uint16 `json:"cellTag"`
	Unregistered bool   `json:"unregistered"`
}

type MasterCellRole string

type MasterConnectionSpec struct {
	// Cell tag is an immutable identifier for particular cell of YTsaurus cluster.
	// Must be unique among all connected clusters to prevent object ids from colliding.
	//+kubebuilder:validation:Required
	//+kubebuilder:validation:Minimum:=1
	//+kubebuilder:validation:Maximum:=61440
	CellTag uint16 `json:"cellTag"`
	//+listType=set
	HostAddresses []string `json:"hostAddresses,omitempty"`
}

type MastersSpec struct {
	InstanceSpec         `json:",inline"`
	MasterConnectionSpec `json:",inline"`

	// Roles assigned to this master cell. Explicit enlisting is preferred, because defaults could change.
	// In general, assigned or default roles cannot be removed later without risk of data loss.
	//+listType=set
	Roles *[]MasterCellRole `json:"roles,omitempty"`

	HostAddressLabel string `json:"hostAddressLabel,omitempty"`

	MaxSnapshotCountToKeep  *int `json:"maxSnapshotCountToKeep,omitempty"`
	MaxChangelogCountToKeep *int `json:"maxChangelogCountToKeep,omitempty"`

	HydraPersistenceUploader *HydraPersistenceUploaderSpec `json:"hydraPersistenceUploader,omitempty"`
	Timbertruck              *TimbertruckSpec              `json:"timbertruck,omitempty"`

	// List of sidecar containers as yaml of core/v1 Container.
	Sidecars []string `json:"sidecars,omitempty"`
}

type MetaxRuntimeSpec struct{}

type MetricExporter struct {
	Host         *string                `json:"host,omitempty"`
	InstanceTags map[string]string      `json:"instanceTags,omitempty"`
	Shards       map[string]MetricShard `json:"shards,omitempty"`
	GridStep     int32                  `json:"gridStep,omitempty"`
}

type MetricShard struct {
	Filter   []string `json:"filter,omitempty"`
	GridStep int32    `json:"gridStep,omitempty"`
}

type NvidiaRuntimeSpec struct{}

type OauthServiceSpec struct {
	//+kubebuilder:validation:MinLength:=1
	Host string `json:"host,omitempty"`
	//+kubebuilder:default:=80
	Port int `json:"port,omitempty"`
	//+kubebuilder:default:=false
	Secure   bool                     `json:"secure,omitempty"`
	UserInfo OauthUserInfoHandlerSpec `json:"userInfoHandler,omitempty"`
	// If DisableUserCreation is set, proxies will NOT create non-existing users with OAuth authentication.
	DisableUserCreation *bool `json:"disableUserCreation,omitempty"`
}

type OauthUserInfoHandlerSpec struct {
	//+kubebuilder:default:=user/info
	Endpoint string `json:"endpoint,omitempty"`
	//+kubebuilder:default:=nickname
	LoginField string  `json:"loginField,omitempty"`
	ErrorField *string `json:"errorField,omitempty"`
	// LoginTransformations will be applied to the login field consequentially if set.
	// Result of the transformations is treated as YTsaurus OAuth user's username.
	LoginTransformations []OauthUserLoginTransformation `json:"loginTransformations,omitempty"`
}

type OauthUserLoginTransformation struct {
	// MatchPattern expects RE2 (https://github.com/google/re2/wiki/syntax) syntax.
	MatchPattern string `json:"matchPattern,omitempty"`
	Replacement  string `json:"replacement,omitempty"`
}

type OffshoreDataGatewaySpec struct {
	// label filter (for daemonset)
	InstanceSpec `json:",inline"`
}

type OffshoreDataGateways struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   OffshoreDataGatewaysSpec   `json:"spec,omitempty"`
	Status OffshoreDataGatewaysStatus `json:"status,omitempty"`
}

type OffshoreDataGatewaysList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []OffshoreDataGateways `json:"items"`
}

type OffshoreDataGatewaysSpec struct {
	RemoteClusterSpec       *corev1.LocalObjectReference `json:"remoteClusterSpec"`
	CommonSpec              `json:",inline"`
	OffshoreDataGatewaySpec `json:",inline"`
}

type OffshoreDataGatewaysStatus struct {
	CommonRemoteNodeStatus `json:",inline"`
}

type PodSpec struct {
	// Labels for instance pods.
	PodLabels map[string]string `json:"podLabels,omitempty"`
	// Annotations for instance pods.
	PodAnnotations map[string]string `json:"podAnnotations,omitempty"`

	// Node selector for instance and init job pods.
	NodeSelector map[string]string `json:"nodeSelector,omitempty"`
	// Tolerations for instance and init job pods.
	Tolerations []corev1.Toleration `json:"tolerations,omitempty"`

	// Runtime class for instance pods.
	RuntimeClassName *string `json:"runtimeClassName,omitempty"`
	// Optional duration in seconds the pod needs to terminate gracefully. Defaults to 30 seconds.
	//+optional
	TerminationGracePeriodSeconds *int64 `json:"terminationGracePeriodSeconds,omitempty"`

	// Use the host's network namespace.
	HostNetwork *bool `json:"hostNetwork,omitempty"`
	// SetHostnameAsFQDN indicates whether to set the hostname as FQDN.
	//+kubebuilder:default:=true
	SetHostnameAsFQDN *bool `json:"setHostnameAsFqdn,omitempty"`
	// DNSPolicy defines how DNS will be configured.
	DNSPolicy *corev1.DNSPolicy `json:"dnsPolicy,omitempty"`
	// DNSConfig allows customizing the DNS settings.
	DNSConfig *corev1.PodDNSConfig `json:"dnsConfig,omitempty"`
}

type QueryTrackerSpec struct {
	InstanceSpec `json:",inline"`
}

type QueueAgentSpec struct {
	InstanceSpec `json:",inline"`
}

type RPCProxiesSpec struct {
	InstanceSpec `json:",inline"`
	ServiceType  *corev1.ServiceType `json:"serviceType,omitempty"`
	NodePort     *int32              `json:"nodePort,omitempty"`
	//+kubebuilder:default:=default
	//+kubebuilder:validation:MinLength:=1
	Role string `json:"role,omitempty"`
	//+optional
	Transport RPCTransportSpec `json:"transport,omitempty"`
}

type RPCTransportSpec struct {
	// Server certificate. Reference to kubernetes.io/tls secret.
	//+optional
	TLSSecret *corev1.LocalObjectReference `json:"tlsSecret,omitempty"`
	// Client certificate. Reference to kubernetes.io/tls secret.
	//+optional
	TLSClientSecret *corev1.LocalObjectReference `json:"tlsClientSecret,omitempty"`
	// Require secure TLS connections by server, otherwise only by client.
	//+optional
	TLSRequired bool `json:"tlsRequired,omitempty"`
	// Disable client certificate verification when TLS is required, if not required - verify neither.
	//+optional
	TLSInsecure bool `json:"tlsInsecure,omitempty"`
	// Define alternative host name for certificate verification.
	//+optional
	TLSPeerAlternativeHostName string `json:"tlsPeerAlternativeHostName,omitempty"`
}

type RemoteDataNodes struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   RemoteDataNodesSpec   `json:"spec,omitempty"`
	Status RemoteDataNodesStatus `json:"status,omitempty"`
}

type RemoteDataNodesList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []RemoteDataNodes `json:"items"`
}

type RemoteDataNodesSpec struct {
	RemoteClusterSpec *corev1.LocalObjectReference `json:"remoteClusterSpec"`
	CommonSpec        `json:",inline"`
	DataNodesSpec     `json:",inline"`
}

type RemoteDataNodesStatus struct {
	CommonRemoteNodeStatus `json:",inline"`
}

type RemoteExecNodes struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   RemoteExecNodesSpec   `json:"spec,omitempty"`
	Status RemoteExecNodesStatus `json:"status,omitempty"`
}

type RemoteExecNodesList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []RemoteExecNodes `json:"items"`
}

type RemoteExecNodesSpec struct {
	RemoteClusterSpec *corev1.LocalObjectReference `json:"remoteClusterSpec"`
	CommonSpec        `json:",inline"`
	ExecNodesSpec     `json:",inline"`
}

type RemoteExecNodesStatus struct {
	CommonRemoteNodeStatus `json:",inline"`
}

type RemoteNodeReleaseStatus string

type RemoteTabletNodes struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   RemoteTabletNodesSpec   `json:"spec,omitempty"`
	Status RemoteTabletNodesStatus `json:"status,omitempty"`
}

type RemoteTabletNodesList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []RemoteTabletNodes `json:"items"`
}

type RemoteTabletNodesSpec struct {
	RemoteClusterSpec *corev1.LocalObjectReference `json:"remoteClusterSpec"`
	CommonSpec        `json:",inline"`
	TabletNodesSpec   `json:",inline"`
}

type RemoteTabletNodesStatus struct {
	CommonRemoteNodeStatus `json:",inline"`
}

type RemoteYtsaurus struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   RemoteYtsaurusSpec   `json:"spec,omitempty"`
	Status RemoteYtsaurusStatus `json:"status,omitempty"`
}

type RemoteYtsaurusList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []RemoteYtsaurus `json:"items"`
}

type RemoteYtsaurusSpec struct {
	//+optional
	PrimaryMaster *MasterConnectionSpec `json:"primaryMaster,omitempty"`
	//+kubebuilder:validation:MaxItems:=48
	SecondaryMasters []MasterConnectionSpec `json:"secondaryMasters,omitempty"`
	//+optional
	MasterCaches *MasterCachesConnectionSpec `json:"masterCaches,omitempty"`

	// Deprecated: use primaryMaster.cellTag instead.
	//+kubebuilder:validation:Minimum:=1
	//+kubebuilder:validation:Maximum:=61440
	CellTag uint16 `json:"cellTag,omitempty"`
	// Deprecated: use primaryMaster.hostAddresses instead.
	HostAddresses []string `json:"hostAddresses,omitempty"`
	// Deprecated: have no effect.
	CellTagMasterCaches uint16 `json:"cellTagMasterCaches,omitempty"`
	// Deprecated: use masterCaches.hostAddresses instead.
	HostAddressesMasterCaches []string `json:"hostAddressesMasterCaches,omitempty"`
}

type RemoteYtsaurusStatus struct {
}

type SchedulersSpec struct {
	// label filter (for daemonset)
	InstanceSpec `json:",inline"`
}

type Spyt struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              SpytSpec   `json:"spec,omitempty"`
	Status            SpytStatus `json:"status,omitempty"`
}

type SpytList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Spyt `json:"items"`
}

type SpytReleaseStatus string

type SpytSpec struct {
	ImagePullSecrets []corev1.LocalObjectReference `json:"imagePullSecrets,omitempty"`

	Ytsaurus *corev1.LocalObjectReference `json:"ytsaurus,omitempty"`
	Image    string                       `json:"image,omitempty"`
	// If multiple versions are provided, only the first one is used for query tracker dynamic config.
	SparkVersions []string `json:"sparkVersions,omitempty"`
	// Use only local artifacts for spark distribution setup.
	SparkDistribOffline bool `json:"sparkDistribOffline,omitempty"`
}

type SpytStatus struct {
	Conditions    []metav1.Condition `json:"conditions,omitempty"`
	ReleaseStatus SpytReleaseStatus  `json:"releaseStatus,omitempty"`
}

type StrawberryControllerSpec struct {
	PodSpec `json:",inline"`

	Resources     corev1.ResourceRequirements `json:"resources,omitempty"`
	Image         *string                     `json:"image,omitempty"`
	ExternalProxy *string                     `json:"externalProxy,omitempty"`
	// Supported controller families, for example: "chyt", "jupyt", "livy".
	ControllerFamilies []string `json:"controllerFamilies,omitempty"`
	// The family that will receive requests for domains that are not explicitly specified in http_controller_mappings.
	// For example, "chyt" (with `ControllerFamilies` set to {"chyt", "jupyt"} would mean
	// that requests to "foo.<domain>" will be processed by chyt controller.
	DefaultRouteFamily *string `json:"defaultRouteFamily,omitempty"`
	// Write logs to stderr.
	LogToStderr bool `json:"logToStderr,omitempty"`
}

type StructuredLoggerSpec struct {
	BaseLoggerSpec `json:",inline"`
	// Exactly one of category and categoriesFilter must be set.
	//+optional
	Category *string `json:"category,omitempty"`
	// Filter for logs spanning several categories. Type must be set.
	// Exactly one of category and categoriesFilter must be set.
	//+optional
	CategoriesFilter *CategoriesFilter `json:"categoriesFilter,omitempty"`
	// EnableDelivery turns on timbertruck delivery of this structured log to the cluster log storage.
	// Requires a timbertruck image to be configured (spec.timbertruck.image or, for masters, primaryMasters.timbertruck.image).
	//+optional
	EnableDelivery *bool `json:"enableDelivery,omitempty"`
}

type TCPProxiesSpec struct {
	InstanceSpec `json:",inline"`
	ServiceType  *corev1.ServiceType `json:"serviceType,omitempty"`
	//+kubebuilder:default:=32000
	MinPort int32 `json:"minPort"`
	// Number of ports to allocate for balancing service.
	//+kubebuilder:default:=20
	PortCount int32 `json:"portCount"`
	//+kubebuilder:default:=default
	//+kubebuilder:validation:MinLength:=1
	Role string `json:"role,omitempty"`
}

type TabletBalancerSpec struct {
	InstanceSpec `json:",inline"`
}

type TabletCellBundleInfo struct {
	Name            string `yson:",value" json:"name"`
	TabletCellCount int    `yson:"tablet_cell_count,attr" json:"tabletCellCount"`
}

type TabletNodesSpec struct {
	// label filter (for daemonset)
	InstanceSpec `json:",inline"`
	// Common part of the cluster node spec.
	ClusterNodesSpec `json:",inline"`
	//+kubebuilder:default:=default
	//+kubebuilder:validation:MinLength:=1
	Name string `json:"name,omitempty"`
}

type TextLoggerSpec struct {
	BaseLoggerSpec `json:",inline"`
	//+kubebuilder:validation:Enum=file;stderr
	WriterType       LogWriterType     `json:"writerType,omitempty"`
	CategoriesFilter *CategoriesFilter `json:"categoriesFilter,omitempty"`
}

type TimbertruckSpec struct {
	Image         *string `json:"image,omitempty"`
	DirectoryPath *string `json:"directoryPath,omitempty"`
}

type TracingSpec struct {
	// Address of the tracing collector gRPC endpoint.
	//+kubebuilder:validation:MinLength:=1
	CollectorAddress string `json:"collectorAddress"`

	// Maximum memory occupied by queued spans.
	//+optional
	MaxMemory *resource.Quantity `json:"maxMemory,omitempty"`

	// Tags attached to the tracing process descriptor.
	//+optional
	ProcessTags map[string]string `json:"processTags,omitempty"`
}

type UIClusterURLs struct {
	Icon    string  `json:"icon"`
	Icon2x  string  `json:"icon2x"`
	IconBig *string `json:"iconbig,omitempty"`
}

type UISpec struct {
	PodSpec `json:",inline"`

	Image *string `json:"image,omitempty"`
	//+kubebuilder:default:=NodePort
	ServiceType  corev1.ServiceType `json:"serviceType,omitempty"`
	HttpNodePort *int32             `json:"httpNodePort,omitempty"`
	// If defined allows insecure (over http) authentication.
	//+kubebuilder:default:=true
	//+optional
	UseInsecureCookies bool `json:"useInsecureCookies"`
	// Use secure connection to the cluster's http-proxies.
	//+kubebuilder:default:=false
	//+optional
	Secure        bool                        `json:"secure"`
	Resources     corev1.ResourceRequirements `json:"resources,omitempty"`
	InstanceCount int32                       `json:"instanceCount,omitempty"`

	// If defined it will be used for direct heavy url/commands like: read_table, write_table, etc.
	//+optional
	ExternalProxy *string `json:"externalProxy,omitempty"`
	// Odin is a service for monitoring the availability of YTsaurus clusters.
	//+optional
	OdinBaseUrl *string `json:"odinBaseUrl,omitempty"`

	ExtraEnvVariables []corev1.EnvVar `json:"extraEnvVariables,omitempty"`

	//+kubebuilder:default:=testing
	Environment string `json:"environment,omitempty"`
	//+kubebuilder:default:=lavander
	Theme       string  `json:"theme,omitempty"`
	Description *string `json:"description,omitempty"`
	Group       *string `json:"group,omitempty"`
	//+optional
	URLs *UIClusterURLs `json:"urls,omitempty"`
	// When this is set to false, UI will use backend for downloading instead of proxy.
	// If this is set to true or omitted, UI use proxies, which is a default behaviour.
	//+optional
	DirectDownload *bool `json:"directDownload,omitempty"`
}

type UpdateState string

type UpdateStatus struct {
	State UpdateState `json:"state,omitempty"`
	// Subset of cluster components currently updating.
	UpdatingComponents []Component `json:"updatingComponents,omitempty"`
	// Summary for kubectl column.
	UpdatingComponentsSummary string `json:"updatingComponentsSummary,omitempty"`
	// Summary for kubectl column.
	BlockedComponentsSummary string `json:"blockedComponentsSummary,omitempty"`
	// Update progress.
	Conditions []metav1.Condition `json:"conditions,omitempty"`
	// State of master cells maintenance.
	MasterCellsMaintenance []MasterCellMaintenanceInfo `json:"masterCellsMaintenance,omitempty"`
	// Snapshot of tablet cell bundles.
	TabletCellBundles []TabletCellBundleInfo `json:"tabletCellBundles,omitempty"`
	// Snapshot of bundle controller.
	BundleController *BundleControllerInfo `json:"bundleController,omitempty"`
}

type Volume struct {
	// name of the volume.
	// Must be a DNS_LABEL and unique within the pod.
	// More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
	Name string `json:"name" protobuf:"bytes,1,opt,name=name"`
	// volumeSource represents the location and type of the mounted volume.
	// If not specified, the Volume is implied to be an EmptyDir.
	// This implied behavior is deprecated and will be removed in a future version.
	VolumeSource `json:",inline" protobuf:"bytes,2,opt,name=volumeSource"`
}

type VolumeSource struct {
	// hostPath represents a pre-existing file or directory on the host
	// machine that is directly exposed to the container. This is generally
	// used for system agents or other privileged things that are allowed
	// to see the host machine. Most containers will NOT need this.
	// More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
	// +optional
	HostPath *corev1.HostPathVolumeSource `json:"hostPath,omitempty" protobuf:"bytes,1,opt,name=hostPath"`
	// emptyDir represents a temporary directory that shares a pod's lifetime.
	// More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
	// +optional
	EmptyDir *corev1.EmptyDirVolumeSource `json:"emptyDir,omitempty" protobuf:"bytes,2,opt,name=emptyDir"`
	// secret represents a secret that should populate this volume.
	// More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
	// +optional
	Secret *corev1.SecretVolumeSource `json:"secret,omitempty" protobuf:"bytes,6,opt,name=secret"`
	// nfs represents an NFS mount on the host that shares a pod's lifetime
	// More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
	// +optional
	NFS *corev1.NFSVolumeSource `json:"nfs,omitempty" protobuf:"bytes,7,opt,name=nfs"`
	// iscsi represents an ISCSI Disk resource that is attached to a
	// kubelet's host machine and then exposed to the pod.
	// More info: https://examples.k8s.io/volumes/iscsi/README.md
	// +optional
	ISCSI *corev1.ISCSIVolumeSource `json:"iscsi,omitempty" protobuf:"bytes,8,opt,name=iscsi"`
	// persistentVolumeClaimVolumeSource represents a reference to a
	// PersistentVolumeClaim in the same namespace.
	// More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
	// +optional
	PersistentVolumeClaim *corev1.PersistentVolumeClaimVolumeSource `json:"persistentVolumeClaim,omitempty" protobuf:"bytes,10,opt,name=persistentVolumeClaim"`
	// downwardAPI represents downward API about the pod that should populate this volume
	// +optional
	DownwardAPI *corev1.DownwardAPIVolumeSource `json:"downwardAPI,omitempty" protobuf:"bytes,16,opt,name=downwardAPI"`
	// fc represents a Fibre Channel resource that is attached to a kubelet's host machine and then exposed to the pod.
	// +optional
	FC *corev1.FCVolumeSource `json:"fc,omitempty" protobuf:"bytes,17,opt,name=fc"`
	// configMap represents a configMap that should populate this volume
	// +optional
	ConfigMap *corev1.ConfigMapVolumeSource `json:"configMap,omitempty" protobuf:"bytes,19,opt,name=configMap"`
	// csi (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers (Beta feature).
	// +optional
	CSI *corev1.CSIVolumeSource `json:"csi,omitempty" protobuf:"bytes,28,opt,name=csi"`
	// ephemeral represents a volume that is handled by a cluster storage driver.
	// The volume's lifecycle is tied to the pod that defines it - it will be created before the pod starts,
	// and deleted when the pod is removed.
	//
	// Use this if:
	// a) the volume is only needed while the pod runs,
	// b) features of normal volumes like restoring from snapshot or capacity
	//    tracking are needed,
	// c) the storage driver is specified through a storage class, and
	// d) the storage driver supports dynamic volume provisioning through
	//    a PersistentVolumeClaim (see EphemeralVolumeSource for more
	//    information on the connection between this volume type
	//    and PersistentVolumeClaim).
	//
	// Use PersistentVolumeClaim or one of the vendor-specific
	// APIs for volumes that persist for longer than the lifecycle
	// of an individual pod.
	//
	// Use CSI for light-weight local ephemeral volumes if the CSI driver is meant to
	// be used that way - see the documentation of the driver for
	// more information.
	//
	// A pod can use both types of ephemeral volumes and
	// persistent volumes at the same time.
	//
	// +optional
	Ephemeral *corev1.EphemeralVolumeSource `json:"ephemeral,omitempty" protobuf:"bytes,29,opt,name=ephemeral"`
	// image represents an OCI object (a container image or artifact) pulled and mounted on the kubelet's host machine.
	// The volume is resolved at pod startup depending on which PullPolicy value is provided:
	//
	// - Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails.
	// - Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn't present.
	// - IfNotPresent: the kubelet pulls if the reference isn't already present on disk. Container creation will fail if the reference isn't present and the pull fails.
	//
	// The volume gets re-resolved if the pod gets deleted and recreated, which means that new remote content will become available on pod recreation.
	// A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
	// The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
	// The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
	// The volume will be mounted read-only (ro) and non-executable files (noexec).
	// Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath).
	// The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
	// +featureGate=ImageVolume
	// +optional
	Image *corev1.ImageVolumeSource `json:"image,omitempty" protobuf:"bytes,30,opt,name=image"`
}

type YQLAgentSpec struct {
	InstanceSpec `json:",inline"`
	// YQL DQ engine executes simple requests using shared pool of vanilla jobs.
	// Tuning for unwired parameters could be done in config overrides and entrypoint wrapper.
	DQEngine *YQLDQEngineSpec `json:"dqEngine,omitempty"`
}

type YQLDQEngineSpec struct {
	// DQ max jobs count
	MaxJobs *int `json:"maxJobs,omitempty"`
	// DQ jobs per operation
	JobsPerOperation *int `json:"jobsPerOperation,omitempty"`
	// DQ requests per job
	WorkerCapacity *int `json:"workerCapacity,omitempty"`
	// DQ operation pool
	Pool string `json:"pool,omitempty"`
	// DQ operation pool_trees
	PoolTrees []string `json:"poolTrees,omitempty"`
	// DQ operation scheduling_tag_filter
	SchedulingTagFilter string `json:"schedulingTagFilter,omitempty"`
	// DQ operation cpu_limit
	CPULimit *resource.Quantity `json:"cpuLimit,omitempty"`
	// DQ operation memory_limit
	MemoryLimit *resource.Quantity `json:"memoryLimit,omitempty"`
	// DQ operation artifacts cache size
	CacheSize *resource.Quantity `json:"cacheSize,omitempty"`
	// DQ operation use tmpfs for artifacts
	UseTmpFS *bool `json:"useTmpfs,omitempty"`
	// DQ artifacts replication_factor
	UploadReplicationFactor *int `json:"uploadReplicationFactor,omitempty"`
	// DQ gateway default settings
	GatewayDefaultSettings []YQLGatewayAttrSpec `json:"gatewayDefaultSettings,omitempty"`
}

type YQLGatewayAttrSpec struct {
	Name  string `json:"name"`
	Value string `json:"value"`
}

type Ytsaurus struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              YtsaurusSpec   `json:"spec,omitempty"`
	Status            YtsaurusStatus `json:"status,omitempty"`
}

type YtsaurusList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Ytsaurus `json:"items"`
}

type YtsaurusSpec struct {
	CommonSpec `json:",inline"`

	// Default settings for instance and init job pods.
	PodSpec `json:",inline"`

	UIImage string `json:"uiImage,omitempty"`

	// requiresOperatorVersion is used to lock the YT spec to an Operator version or range.
	// Syntax: https://github.com/Masterminds/semver
	// Example: "~0.1.2" is equivalent to ">= 0.1.2, < 0.2.0".
	//+optional
	RequiresOperatorVersion string `json:"requiresOperatorVersion,omitempty"`

	// Reference to secret with initial "login", "password", "token" for administrator user.
	// If secret is not specified or does not exist default admin/password is no longer set.
	AdminCredentials *corev1.LocalObjectReference `json:"adminCredentials,omitempty"`

	OauthService *OauthServiceSpec `json:"oauthService,omitempty"`

	// Setting to false disables all operator actions. Default: true.
	//+kubebuilder:default:=true
	IsManaged *bool `json:"isManaged,omitempty"`

	// Defines components which are allowed to update.
	// Can contain either single "class" item or several "component" items.
	// When empty: update nothing
	UpdatePlan []ComponentUpdateSelector `json:"updatePlan,omitempty"`

	Bootstrap *BootstrapSpec `json:"bootstrap,omitempty"`

	Discovery      DiscoverySpec `json:"discovery,omitempty"`
	PrimaryMasters MastersSpec   `json:"primaryMasters,omitempty"`
	//+kubebuilder:validation:MaxItems:=48
	SecondaryMasters []MastersSpec `json:"secondaryMasters,omitempty"`
	//+optional
	MasterCaches *MasterCachesSpec `json:"masterCaches,omitempty"`
	//+kubebuilder:validation:MinItems:=1
	HTTPProxies  []HTTPProxiesSpec  `json:"httpProxies,omitempty"`
	RPCProxies   []RPCProxiesSpec   `json:"rpcProxies,omitempty"`
	TCPProxies   []TCPProxiesSpec   `json:"tcpProxies,omitempty"`
	KafkaProxies []KafkaProxiesSpec `json:"kafkaProxies,omitempty"`
	//+kubebuilder:validation:MinItems:=1
	DataNodes        []DataNodesSpec       `json:"dataNodes,omitempty"`
	ExecNodes        []ExecNodesSpec       `json:"execNodes,omitempty"`
	Schedulers       *SchedulersSpec       `json:"schedulers,omitempty"`
	ControllerAgents *ControllerAgentsSpec `json:"controllerAgents,omitempty"`
	TabletNodes      []TabletNodesSpec     `json:"tabletNodes,omitempty"`

	StrawberryController *StrawberryControllerSpec `json:"strawberry,omitempty"`
	QueryTrackers        *QueryTrackerSpec         `json:"queryTrackers,omitempty"`
	Spyt                 *DeprecatedSpytSpec       `json:"spyt,omitempty"`
	YQLAgents            *YQLAgentSpec             `json:"yqlAgents,omitempty"`
	QueueAgents          *QueueAgentSpec           `json:"queueAgents,omitempty"`
	CypressProxies       *CypressProxiesSpec       `json:"cypressProxies,omitempty"`
	BundleController     *BundleControllerSpec     `json:"bundleController,omitempty"`
	TabletBalancer       *TabletBalancerSpec       `json:"tabletBalancers,omitempty"`

	UI *UISpec `json:"ui,omitempty"`
}

type YtsaurusStatus struct {
	//+kubebuilder:default:=Created
	State      ClusterState       `json:"state,omitempty"`
	Conditions []metav1.Condition `json:"conditions,omitempty"`
	// Reflects resource generation which was used for updating status.
	ObservedGeneration int64        `json:"observedGeneration,omitempty"`
	UpdateStatus       UpdateStatus `json:"updateStatus,omitempty"`
}