base

type AwssqsSourceConfiguration struct {
	Enabled bool `json:"enabled"`
}

type CephSourceConfiguration struct {
	Enabled bool `json:"enabled"`
}

type ClusterProfileReference struct {
	// Name is the name of the ClusterProfile resource.
	// +kubebuilder:validation:MinLength=1
	Name string `json:"name"`
	// Namespace is the namespace of the ClusterProfile resource.
	// +kubebuilder:validation:MinLength=1
	Namespace string `json:"namespace"`
}

type CommonSpec struct {
	// A means to override the corresponding entries in the upstream configmaps
	// +optional
	Config ConfigMapData `json:"config,omitempty"`

	// A means to override the corresponding deployment images in the upstream.
	// If no registry is provided, the knative release images will be used.
	// +optional
	Registry Registry `json:"registry,omitempty"`

	// DEPRECATED.
	// DeprecatedResources overrides containers' resource requirements.
	// +optional
	DeprecatedResources []ResourceRequirementsOverride `json:"resources,omitempty"`

	// DEPRECATED. Use workloads
	// DeploymentOverride overrides Deployment configurations such as resources and replicas.
	// +optional
	DeploymentOverride []WorkloadOverride `json:"deployments,omitempty"`

	// NamespaceConfiguration overrides namespace configurations such as labels and annotations.
	// +optional
	NamespaceConfiguration *NamespaceConfiguration `json:"namespace,omitempty"`

	// Workloads overrides workloads configurations such as resources and replicas.
	// +optional
	Workloads []WorkloadOverride `json:"workloads,omitempty"`

	// ServiceOverride overrides Service configurations such as labels and annotations.
	// +optional
	ServiceOverride []ServiceOverride `json:"services,omitempty"`

	// WorkloadOverride containers' resource requirements
	// +optional
	Version string `json:"version,omitempty"`

	// A means to specify the manifests to install
	// +optional
	Manifests []Manifest `json:"manifests,omitempty"`

	// A means to specify the additional manifests to install
	// +optional
	AdditionalManifests []Manifest `json:"additionalManifests,omitempty"`

	// HighAvailability allows specification of HA control plane.
	// +optional
	HighAvailability *HighAvailability `json:"high-availability,omitempty"`

	// PodDisruptionBudgetOverride overrides PodDisruptionBudget configurations via minAvailable.
	// +optional
	PodDisruptionBudgetOverride []PodDisruptionBudgetOverride `json:"podDisruptionBudgets,omitempty"`

	// ClusterProfileRef optionally targets a ClusterProfile; when set, the
	// component is reconciled on the referenced remote cluster.
	// +optional
	ClusterProfileRef *ClusterProfileReference `json:"clusterProfileRef,omitempty"`
}

type ConfigMapData map[string]map[string]string

type ContourIngressConfiguration struct {
	// +optional
	Enabled bool `json:"enabled,omitempty"`
}

type CouchdbSourceConfiguration struct {
	Enabled bool `json:"enabled"`
}

type CustomCerts struct {
	// One of ConfigMap or Secret
	Type string `json:"type"`

	// The name of the ConfigMap or Secret
	Name string `json:"name"`
}

type EnvRequirementsOverride struct {
	// The container name
	Container string `json:"container"`
	// The desired EnvVarRequirements
	EnvVars []corev1.EnvVar `json:"envVars,omitempty"`
}

type GatewayAPIIngressConfiguration struct {
	// +optional
	Enabled bool `json:"enabled,omitempty"`
}

type GithubSourceConfiguration struct {
	Enabled bool `json:"enabled"`
}

type GitlabSourceConfiguration struct {
	Enabled bool `json:"enabled"`
}

type HighAvailability struct {
	// Replicas is the number of replicas that HA parts of the control plane
	// will be scaled to.
	Replicas *int32 `json:"replicas"`
}

type IstioGatewayOverride struct {
	// A map of values to replace the "selector" values in the knative-ingress-gateway and knative-local-gateway(cluster-local-gateway)
	Selector map[string]string `json:"selector,omitempty"`

	// Servers is a list of server specifications applied to the Istio Gateway.
	// +optional
	Servers []IstioServer `json:"servers,omitempty"`
}

type IstioIngressConfiguration struct {
	// +optional
	Enabled bool `json:"enabled,omitempty"`

	// KnativeIngressGateway overrides the knative-ingress-gateway.
	// +optional
	KnativeIngressGateway *IstioGatewayOverride `json:"knative-ingress-gateway,omitempty"`

	// KnativeLocalGateway overrides the knative-local-gateway.
	// +optional
	KnativeLocalGateway *IstioGatewayOverride `json:"knative-local-gateway,omitempty"`
}

type IstioPort struct {
	// Number is a valid non-negative integer port number.
	// +optional
	Number uint32 `json:"number,omitempty"`

	// Protocol exposed on the port. MUST BE one of
	// HTTP|HTTPS|GRPC|HTTP2|MONGO|TCP|TLS.
	// +optional
	Protocol string `json:"protocol,omitempty"`

	// Name is a label assigned to the port.
	// +optional
	Name string `json:"name,omitempty"`

	// TargetPort is the target port on the workload.
	// The snake_case JSON tag is preserved for backward compatibility with existing KnativeServing CRs.
	// +optional
	TargetPort uint32 `json:"target_port,omitempty"`
}

type IstioServer struct {
	// Port on which the proxy should listen for incoming connections.
	// +optional
	Port *IstioPort `json:"port,omitempty"`

	// Bind is the IP or the Unix domain socket to which the listener should
	// be bound to. Format: `x.x.x.x` or `unix:///path/to/uds` or
	// `unix://@foobar` (Linux abstract namespace). When using Unix domain
	// sockets, the port number should be 0.
	// +optional
	Bind string `json:"bind,omitempty"`

	// Hosts is one or more hosts exposed by this gateway. A host is specified
	// as a `dnsName` with an optional `namespace/` prefix.
	// +optional
	Hosts []string `json:"hosts,omitempty"`

	// Name is an optional name of the server. When set it must be unique
	// across all servers on a single Gateway.
	// +optional
	Name string `json:"name,omitempty"`

	// Tls configures TLS settings for the server.
	// +optional
	Tls *IstioServerTLSSettings `json:"tls,omitempty"`

	// DefaultEndpoint is the loopback IP endpoint or Unix domain socket to
	// which traffic should be forwarded to by default.
	// +optional
	DefaultEndpoint string `json:"defaultEndpoint,omitempty"`
}

type IstioServerTLSSettings struct {
	// HttpsRedirect, if set to true, causes the load balancer to send a 301
	// redirect to HTTPS for all HTTP requests. Should only be used on HTTP
	// listeners and is mutually exclusive with all other TLS options.
	// +optional
	HttpsRedirect bool `json:"httpsRedirect,omitempty"`

	// Mode indicates whether connections should be secured by TLS.
	// +optional
	// +kubebuilder:validation:Enum=PASSTHROUGH;SIMPLE;MUTUAL;AUTO_PASSTHROUGH;ISTIO_MUTUAL
	Mode string `json:"mode,omitempty"`

	// ServerCertificate is the path to the file holding the server-side TLS
	// certificate to use.
	// +optional
	ServerCertificate string `json:"serverCertificate,omitempty"`

	// PrivateKey is the path to the file holding the server's private key.
	// +optional
	PrivateKey string `json:"privateKey,omitempty"`

	// CaCertificates is the path to a file containing certificate authority
	// certificates to use in verifying a presented client side certificate.
	// +optional
	CaCertificates string `json:"caCertificates,omitempty"`

	// CredentialName is the name of the secret holding the server-side TLS
	// certificate to use.
	// +optional
	CredentialName string `json:"credentialName,omitempty"`

	// SubjectAltNames is a list of alternate names to verify the subject
	// identity in the certificate presented by the client.
	// +optional
	SubjectAltNames []string `json:"subjectAltNames,omitempty"`

	// VerifyCertificateSpki is an optional list of base64-encoded SHA-256
	// hashes of the SPKIs of authorized client certificates.
	// +optional
	VerifyCertificateSpki []string `json:"verifyCertificateSpki,omitempty"`

	// VerifyCertificateHash is an optional list of hex-encoded SHA-256 hashes
	// of the authorized client certificates.
	// +optional
	VerifyCertificateHash []string `json:"verifyCertificateHash,omitempty"`

	// MinProtocolVersion is the minimum TLS protocol version.
	// +optional
	MinProtocolVersion int32 `json:"minProtocolVersion,omitempty"`

	// MaxProtocolVersion is the maximum TLS protocol version.
	// +optional
	MaxProtocolVersion int32 `json:"maxProtocolVersion,omitempty"`

	// CipherSuites is an optional list of cipher suites to be used when
	// negotiating TLS.
	// +optional
	CipherSuites []string `json:"cipherSuites,omitempty"`
}

type KComponent interface {
	metav1.Object
	schema.ObjectKind

	// GetSpec returns the common spec for all known types.
	GetSpec() KComponentSpec
	// GetStatus returns the common status of all known types.
	GetStatus() KComponentStatus
}

type KComponentSpec interface {
	// GetConfig returns means to override entries in upstream configmaps.
	GetConfig() ConfigMapData
	// GetRegistry returns means to override deployment images.
	GetRegistry() *Registry
	// GetResources returns a list of container resource overrides.
	GetResources() []ResourceRequirementsOverride
	// GetVersion gets the version to be installed
	GetVersion() string
	// GetManifests gets the list of manifests, which should ultimately be installed
	GetManifests() []Manifest
	// GetAdditionalManifests gets the list of additional manifests, which should be installed
	GetAdditionalManifests() []Manifest

	// GetNamespaceConfiguration gets the labels and annotations for the namespace
	GetNamespaceConfiguration() *NamespaceConfiguration

	// GetHighAvailability returns means to set the number of desired replicas
	GetHighAvailability() *HighAvailability

	// GetWorkloadOverrides gets the component configurations to override.
	GetWorkloadOverrides() []WorkloadOverride

	// GetServiceOverride gets the service configurations to override.
	GetServiceOverride() []ServiceOverride

	// GetPodDisruptionBudgetOverride gets the PodDisruptionBudget configurations to override.
	GetPodDisruptionBudgetOverride() []PodDisruptionBudgetOverride

	// GetClusterProfileRef gets the reference to a ClusterProfile for multi-cluster deployment.
	GetClusterProfileRef() *ClusterProfileReference
}

type KComponentStatus interface {
	// MarkInstallSucceeded marks the InstallationSucceeded status as true.
	MarkInstallSucceeded()
	// MarkInstallFailed marks the InstallationSucceeded status as false with the given
	// message.
	MarkInstallFailed(msg string)

	// MarkDeploymentsAvailable marks the DeploymentsAvailable status as true.
	MarkDeploymentsAvailable()
	// MarkDeploymentsNotReady marks the DeploymentsAvailable status as false and calls out
	// it's waiting for deployments.
	MarkDeploymentsNotReady([]string)

	// MarkVersionMigrationEligible marks the VersionMigrationEligible status as true.
	MarkVersionMigrationEligible()
	// MarkVersionMigrationNotEligible marks the VersionMigrationEligible status as false with
	// the given message.
	MarkVersionMigrationNotEligible(msg string)

	// MarkDependenciesInstalled marks the DependenciesInstalled status as true.
	MarkDependenciesInstalled()
	// MarkDependencyInstalling marks the DependenciesInstalled status as false with the
	// given message.
	MarkDependencyInstalling(msg string)
	// MarkDependencyMissing marks the DependenciesInstalled status as false with the
	// given message.
	MarkDependencyMissing(msg string)

	// GetVersion gets the currently installed version of the component.
	GetVersion() string
	// SetVersion sets the currently installed version of the component.
	SetVersion(version string)

	// GetManifests gets the url links of the manifests
	GetManifests() []string
	// SetManifests sets the url links of the manifests
	SetManifests(manifests []string)

	// MarkTargetClusterResolved marks the TargetClusterResolved status as true.
	MarkTargetClusterResolved()
	// MarkTargetClusterNotResolved marks the TargetClusterResolved status as false with the given reason and message.
	MarkTargetClusterNotResolved(reason, msg string)

	// IsReady return true if all conditions are satisfied
	IsReady() bool
}

type KafkaSourceConfiguration struct {
	Enabled bool `json:"enabled"`
}

type KourierIngressConfiguration struct {
	// +optional
	Enabled bool `json:"enabled,omitempty"`

	// ServiceType specifies the service type for kourier gateway.
	ServiceType v1.ServiceType `json:"service-type,omitempty"`

	// ServiceLoadBalancerIP specifies the service load balancer IP.
	ServiceLoadBalancerIP string `json:"service-load-balancer-ip,omitempty"`

	// HTTPPort specifies the port used in case of ServiceType = "NodePort" for http traffic
	HTTPPort int32 `json:"http-port,omitempty"`

	// HTTPSPort specifies the port used in case of ServiceType = "NodePort" for https (encrypted) traffic
	HTTPSPort int32 `json:"https-port,omitempty"`

	// BootstrapConfigmapName specifies the ConfigMap name which contains envoy bootstrap.
	BootstrapConfigmapName string `json:"bootstrap-configmap,omitempty"`
}

type Manifest struct {
	// The link of the manifest URL
	Url string `json:"URL"`
}

type NamespaceConfiguration struct {
	// Labels overrides labels for the namespace and its template.
	// +optional
	Labels map[string]string `json:"labels,omitempty"`

	// Annotations overrides labels for the namespace and its template.
	// +optional
	Annotations map[string]string `json:"annotations,omitempty"`
}

type NatssSourceConfiguration struct {
	Enabled bool `json:"enabled"`
}

type PodDisruptionBudgetOverride struct {
	// Name is the name of the podDisruptionBudget to override.
	Name string `json:"name"`
	// The desired PodDisruptionBudgetSpec
	policyv1.PodDisruptionBudgetSpec `json:",inline"`
}

type ProbesRequirementsOverride struct {
	// The container name
	Container string `json:"container"`
	// Number of seconds after the container has started before liveness probes are initiated.
	// More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
	// +optional
	InitialDelaySeconds int32 `json:"initialDelaySeconds,omitempty" protobuf:"varint,2,opt,name=initialDelaySeconds"`
	// Number of seconds after which the probe times out.
	// Defaults to 1 second. Minimum value is 1.
	// More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
	// +optional
	TimeoutSeconds int32 `json:"timeoutSeconds,omitempty" protobuf:"varint,3,opt,name=timeoutSeconds"`
	// How often (in seconds) to perform the probe.
	// Default to 10 seconds. Minimum value is 1.
	// +optional
	PeriodSeconds int32 `json:"periodSeconds,omitempty" protobuf:"varint,4,opt,name=periodSeconds"`
	// Minimum consecutive successes for the probe to be considered successful after having failed.
	// Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
	// +optional
	SuccessThreshold int32 `json:"successThreshold,omitempty" protobuf:"varint,5,opt,name=successThreshold"`
	// Minimum consecutive failures for the probe to be considered failed after having succeeded.
	// Defaults to 3. Minimum value is 1.
	// +optional
	FailureThreshold int32 `json:"failureThreshold,omitempty" protobuf:"varint,6,opt,name=failureThreshold"`
	// Optional duration in seconds the pod needs to terminate gracefully upon probe failure.
	// The grace period is the duration in seconds after the processes running in the pod are sent
	// a termination signal and the time when the processes are forcibly halted with a kill signal.
	// Set this value longer than the expected cleanup time for your process.
	// If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
	// value overrides the value provided by the pod spec.
	// Value must be non-negative integer. The value zero indicates stop immediately via
	// the kill signal (no opportunity to shut down).
	// This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.
	// Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
	// +optional
	TerminationGracePeriodSeconds *int64 `json:"terminationGracePeriodSeconds,omitempty" protobuf:"varint,7,opt,name=terminationGracePeriodSeconds"`
}

type PrometheusSourceConfiguration struct {
	Enabled bool `json:"enabled"`
}

type RabbitmqSourceConfiguration struct {
	Enabled bool `json:"enabled"`
}

type RedisSourceConfiguration struct {
	Enabled bool `json:"enabled"`
}

type Registry struct {
	// The default image reference template to use for all knative images.
	// It takes the form of example-registry.io/custom/path/${NAME}:custom-tag
	// ${NAME} will be replaced by the deployment container name, or caching.internal.knative.dev/v1alpha1/Image name.
	// +optional
	Default string `json:"default,omitempty"`

	// A map of a container name or image name to the full image location of the individual knative image.
	// +optional
	Override map[string]string `json:"override,omitempty"`

	// A list of secrets to be used when pulling the knative images. The secret must be created in the
	// same namespace as the knative-serving deployments, and not the namespace of this resource.
	// +optional
	ImagePullSecrets []corev1.LocalObjectReference `json:"imagePullSecrets,omitempty"`
}

type ResourceRequirementsOverride struct {
	// The container name
	Container string `json:"container"`
	// The desired ResourceRequirements
	corev1.ResourceRequirements `json:",inline"`
}

type SecurityGuardConfiguration struct {
	Enabled bool `json:"enabled"`
}

type ServiceOverride struct {
	// Name is the name of the service to override.
	Name string `json:"name"`

	// Labels overrides labels for the service and its template.
	// +optional
	Labels map[string]string `json:"labels,omitempty"`

	// Annotations overrides labels for the service and its template.
	// +optional
	Annotations map[string]string `json:"annotations,omitempty"`

	// Selector overrides the selector for the service
	// +optional
	Selector map[string]string `json:"selector,omitempty"`
}

type WorkloadOverride struct {
	// Name is the name of the deployment to override.
	Name string `json:"name"`

	// Labels overrides labels for the deployment and its template.
	// +optional
	Labels map[string]string `json:"labels,omitempty"`

	// Annotations overrides labels for the deployment and its template.
	// +optional
	Annotations map[string]string `json:"annotations,omitempty"`

	// Replicas is the number of replicas that HA parts of the control plane
	// will be scaled to.
	// +optional
	Replicas *int32 `json:"replicas,omitempty"`

	// NodeSelector overrides nodeSelector for the deployment.
	// +optional
	NodeSelector map[string]string `json:"nodeSelector,omitempty"`

	// TopologySpreadConstraints overrides topologySpreadConstraints for the deployment.
	// +optional
	TopologySpreadConstraints []corev1.TopologySpreadConstraint `json:"topologySpreadConstraints,omitempty"`

	// Tolerations overrides tolerations for the deployment.
	// +optional
	Tolerations []corev1.Toleration `json:"tolerations,omitempty"`

	// Affinities overrides affinity for the deployment.
	// +optional
	Affinity *corev1.Affinity `json:"affinity,omitempty"`

	// Resources overrides resources for the containers.
	// +optional
	Resources []ResourceRequirementsOverride `json:"resources,omitempty"`

	// Env overrides env vars for the containers.
	// +optional
	Env []EnvRequirementsOverride `json:"env,omitempty"`

	// ReadinessProbes overrides readiness probes for the containers.
	// +optional
	ReadinessProbes []ProbesRequirementsOverride `json:"readinessProbes,omitempty"`

	// LivenessProbes overrides liveness probes for the containers.
	// +optional
	LivenessProbes []ProbesRequirementsOverride `json:"livenessProbes,omitempty"`

	// HostNetwork overrides hostNetwork for the containers.
	// When hostNetwork is enabled, this will set dnsPolicy to ClusterFirstWithHostNet automatically for the containers.
	// +optional
	HostNetwork *bool `json:"hostNetwork,omitempty"`

	// Version is retained for CRD backward compatibility and has no effect.
	// Deprecated: will be removed in a future release.
	// +optional
	Version string `json:"version,omitempty"`

	// VolumeMounts is retained for CRD backward compatibility and has no effect.
	// Deprecated: will be removed in a future release.
	// +optional
	VolumeMounts []corev1.VolumeMount `json:"volumeMounts,omitempty"`
}