v1beta1

type ActiveDoc struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ActiveDocSpec   `json:"spec,omitempty"`
	Status ActiveDocStatus `json:"status,omitempty"`
}

type ActiveDocList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ActiveDoc `json:"items"`
}

type ActiveDocOpenAPIRefSpec struct {
	// SecretRef refers to the secret object that contains the OpenAPI Document
	// +optional
	SecretRef *corev1.ObjectReference `json:"secretRef,omitempty"`

	// URL Remote URL from where to fetch the OpenAPI Document
	// +kubebuilder:validation:Pattern=`^https?:\/\/.*$`
	// +optional
	URL *string `json:"url,omitempty"`
}

type ActiveDocSpec struct {

	// ProviderAccountRef references account provider credentials
	// +optional
	ProviderAccountRef *corev1.LocalObjectReference `json:"providerAccountRef,omitempty"`

	// Name is human readable name for the activedoc
	Name string `json:"name"`

	// SystemName identifies uniquely the activedoc within the account provider
	// Default value will be sanitized Name
	// +kubebuilder:validation:Pattern=`^[a-z0-9]+$`
	// +optional
	SystemName *string `json:"systemName,omitempty"`

	// Description is a human readable text of the activedoc
	// +optional
	Description *string `json:"description,omitempty"`

	// ActiveDocOpenAPIRef Reference to the OpenAPI Specification
	ActiveDocOpenAPIRef ActiveDocOpenAPIRefSpec `json:"activeDocOpenAPIRef"`

	// ProductSystemName identifies uniquely the product
	// +optional
	ProductSystemName *string `json:"productSystemName,omitempty"`

	// Published switch to publish the activedoc
	// +optional
	Published *bool `json:"published,omitempty"`

	// SkipSwaggerValidations switch to skip OpenAPI validation
	// +optional
	SkipSwaggerValidations *bool `json:"skipSwaggerValidations,omitempty"`
}

type ActiveDocStatus struct {

	// +optional
	ID *int64 `json:"activeDocId,omitempty"`

	// ProviderAccountHost contains the 3scale account's provider URL
	// +optional
	ProviderAccountHost string `json:"providerAccountHost,omitempty"`

	// ProductResourceName references the managed 3scale product
	// +optional
	ProductResourceName *corev1.LocalObjectReference `json:"productResourceName,omitempty"`

	// ObservedGeneration reflects the generation of the most recently observed Backend Spec.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

	// Current state of the activedoc resource.
	// Conditions represent the latest available observations of an object's state
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	Conditions common.Conditions `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type" protobuf:"bytes,2,rep,name=conditions"`
}

type ApicastHostedSpec struct {
	// +optional
	Authentication *AuthenticationSpec `json:"authentication,omitempty"`
}

type ApicastSelfManagedSpec struct {
	// +optional
	Authentication *AuthenticationSpec `json:"authentication,omitempty"`
	// +optional
	// +kubebuilder:validation:Pattern=`^https?:\/\/.*$`
	StagingPublicBaseURL *string `json:"stagingPublicBaseURL,omitempty"`
	// +optional
	// +kubebuilder:validation:Pattern=`^https?:\/\/.*$`
	ProductionPublicBaseURL *string `json:"productionPublicBaseURL,omitempty"`
}

type AppKeyAppIDAuthenticationSpec struct {
	// AppID is the name of the parameter that acts of behalf of app id
	// +optional
	AppID *string `json:"appID,omitempty"`

	// AppKey is the name of the parameter that acts of behalf of app key
	// +optional
	AppKey *string `json:"appKey,omitempty"`

	// CredentialsLoc available options:
	// headers: As HTTP Headers
	// query: As query parameters (GET) or body parameters (POST/PUT/DELETE)
	// authorization: As HTTP Basic Authentication
	// +optional
	// +kubebuilder:validation:Enum=headers;query;authorization
	CredentialsLoc *string `json:"credentials,omitempty"`

	// +optional
	Security *SecuritySpec `json:"security,omitempty"`

	// +optional
	GatewayResponse *GatewayResponseSpec `json:"gatewayResponse,omitempty"`
}

type Application struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ApplicationSpec   `json:"spec,omitempty"`
	Status ApplicationStatus `json:"status,omitempty"`
}

type ApplicationList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Application `json:"items"`
}

type ApplicationPlanSpec struct {
	// +optional
	Name *string `json:"name,omitempty"`

	// Set whether or not applications can be created on demand
	// or if approval is required from you before they are activated.
	// +optional
	AppsRequireApproval *bool `json:"appsRequireApproval,omitempty"`

	// Trial Period (days)
	// +kubebuilder:validation:Minimum=0
	// +optional
	TrialPeriod *int `json:"trialPeriod,omitempty"`

	// Setup fee (USD)
	// +kubebuilder:validation:Pattern=`^\d+(\.\d{2})?$`
	// +optional
	SetupFee *string `json:"setupFee,omitempty"`

	// Cost per Month (USD)
	// +kubebuilder:validation:Pattern=`^\d+(\.\d{2})?$`
	// +optional
	CostMonth *string `json:"costMonth,omitempty"`

	// Pricing Rules
	// +optional
	PricingRules []PricingRuleSpec `json:"pricingRules,omitempty"`

	// Limits
	// +optional
	Limits []LimitSpec `json:"limits,omitempty"`

	// Controls whether the application plan is published. If not specified it is
	// hidden by default
	// +optional
	Published *bool `json:"published,omitempty"`
}

type ApplicationSpec struct {

	//AccountCRName name of account custom resource under which the application will be created
	AccountCR *corev1.LocalObjectReference `json:"accountCR"`

	//ProductCRName of product custom resource from which the application plan will be used
	ProductCR *corev1.LocalObjectReference `json:"productCR"`

	//ApplicationPlanName name of application plan that the application will use
	ApplicationPlanName string `json:"applicationPlanName"`

	//Name identifies the application uniquely within the account
	Name string `json:"name"`

	//Description human-readable text of the application
	Description string `json:"description"`

	//Suspend application if true suspends application, if false resumes application.
	//+optional
	Suspend bool `json:"suspend,omitempty"`
}

type ApplicationStatus struct {

	// +optional
	ID *int64 `json:"applicationID,omitempty"`

	// 3scale control plane host
	// +optional
	ProviderAccountHost string `json:"providerAccountHost,omitempty"`

	// +optional
	State string `json:"state,omitempty"`

	// ObservedGeneration reflects the generation of the most recently observed Application Spec.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

	// Current state of the 3scale application.
	// Conditions represent the latest available observations of an object's state
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	Conditions common.Conditions `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type" protobuf:"bytes,2,rep,name=conditions"`
}

type AuthenticationSpec struct {
	// +optional
	UserKeyAuthentication *UserKeyAuthenticationSpec `json:"userkey,omitempty"`

	// +optional
	AppKeyAppIDAuthentication *AppKeyAppIDAuthenticationSpec `json:"appKeyAppID,omitempty"`

	// +optional
	OIDC *OIDCSpec `json:"oidc,omitempty"`
}

type Backend struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   BackendSpec   `json:"spec,omitempty"`
	Status BackendStatus `json:"status,omitempty"`
}

type BackendList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Backend `json:"items"`
}

type BackendSpec struct {

	// Name is human readable name for the backend
	Name string `json:"name"`

	// SystemName identifies uniquely the backend within the account provider
	// Default value will be sanitized Name
	// +optional
	SystemName string `json:"systemName,omitempty"`

	// PrivateBaseURL Private Base URL of the API
	// +kubebuilder:validation:Pattern=`^https?:\/\/.*$`
	PrivateBaseURL string `json:"privateBaseURL"`

	// Description is a human readable text of the backend
	// +optional
	Description string `json:"description,omitempty"`

	// +optional
	MappingRules []MappingRuleSpec `json:"mappingRules,omitempty"`

	// Metrics
	// Map: system_name -> MetricSpec
	// system_name attr is unique for all metrics AND methods
	// In other words, if metric's system_name is A, there is no metric or method with system_name A.
	// +optional
	Metrics map[string]MetricSpec `json:"metrics,omitempty"`

	// Methods
	// Map: system_name -> MethodSpec
	// system_name attr is unique for all metrics AND methods
	// In other words, if metric's system_name is A, there is no metric or method with system_name A.
	// +optional
	Methods map[string]MethodSpec `json:"methods,omitempty"`

	// ProviderAccountRef references account provider credentials
	// +optional
	ProviderAccountRef *corev1.LocalObjectReference `json:"providerAccountRef,omitempty"`
}

type BackendStatus struct {

	// +optional
	ID *int64 `json:"backendId,omitempty"`

	// 3scale control plane host
	// +optional
	ProviderAccountHost string `json:"providerAccountHost,omitempty"`

	// ObservedGeneration reflects the generation of the most recently observed Backend Spec.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

	// Current state of the 3scale backend.
	// Conditions represent the latest available observations of an object's state
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	Conditions common.Conditions `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type" protobuf:"bytes,2,rep,name=conditions"`
}

type BackendStatusError string

type BackendUsageSpec struct {
	Path string `json:"path"`
}

type CustomPolicyDefinition struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   CustomPolicyDefinitionSpec   `json:"spec,omitempty"`
	Status CustomPolicyDefinitionStatus `json:"status,omitempty"`
}

type CustomPolicyDefinitionList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []CustomPolicyDefinition `json:"items"`
}

type CustomPolicyDefinitionSpec struct {

	// ProviderAccountRef references account provider credentials
	// +optional
	ProviderAccountRef *corev1.LocalObjectReference `json:"providerAccountRef,omitempty"`

	// Name is the name of the custom policy
	Name string `json:"name"`

	// Version is the version of the custom policy
	Version string `json:"version"`

	// Schema is the schema of the custom policy
	Schema CustomPolicySchemaSpec `json:"schema"`
}

type CustomPolicyDefinitionStatus struct {

	// +optional
	// ID of the custom policy
	ID *int64 `json:"policyID,omitempty"`

	// ProviderAccountHost contains the 3scale account's provider URL
	// +optional
	ProviderAccountHost string `json:"providerAccountHost,omitempty"`

	// ObservedGeneration reflects the generation of the most recently observed Backend Spec.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

	// Current state of the custom policy resource.
	// Conditions represent the latest available observations of an object's state
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	Conditions common.Conditions `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type" protobuf:"bytes,2,rep,name=conditions"`
}

type CustomPolicySchemaSpec struct {
	// Name is the name of the custom policy schema
	Name string `json:"name"`

	// Version is the version of the custom policy schema
	Version string `json:"version"`

	// Summary is the summary of the custom policy schema
	Summary string `json:"summary"`

	// Description is an array of description messages for the custom policy schema
	Description *[]string `json:"description,omitempty"`

	// Schema the $schema keyword is used to declare that this is a JSON Schema.
	Schema string `json:"$schema"`

	// Configuration defines the structural schema for the policy
	// +kubebuilder:pruning:PreserveUnknownFields
	Configuration runtime.RawExtension `json:"configuration"`
}

type DeveloperAccount struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   DeveloperAccountSpec   `json:"spec,omitempty"`
	Status DeveloperAccountStatus `json:"status,omitempty"`
}

type DeveloperAccountList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []DeveloperAccount `json:"items"`
}

type DeveloperAccountSpec struct {
	// OrgName is the organization name
	OrgName string `json:"orgName"`

	// MonthlyBillingEnabled sets the billing status. Defaults to "true", ie., active
	// +optional
	MonthlyBillingEnabled *bool `json:"monthlyBillingEnabled,omitempty"`

	// MonthlyChargingEnabled Defaults to "true"
	// +optional
	MonthlyChargingEnabled *bool `json:"monthlyChargingEnabled,omitempty"`

	// ProviderAccountRef references account provider credentials
	// +optional
	ProviderAccountRef *corev1.LocalObjectReference `json:"providerAccountRef,omitempty"`
}

type DeveloperAccountStatus struct {
	// +optional
	ID *int64 `json:"accountID,omitempty"`

	// +optional
	AccountState *string `json:"accountState,omitempty"`

	// +optional
	CreditCardStored *bool `json:"creditCardStored,omitempty"`

	// ProviderAccountHost contains the 3scale account's provider URL
	// +optional
	ProviderAccountHost string `json:"providerAccountHost,omitempty"`

	// ObservedGeneration reflects the generation of the most recently observed Backend Spec.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

	// Current state of the policy resource.
	// Conditions represent the latest available observations of an object's state
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	Conditions common.Conditions `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type" protobuf:"bytes,2,rep,name=conditions"`
}

type DeveloperUser struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   DeveloperUserSpec   `json:"spec,omitempty"`
	Status DeveloperUserStatus `json:"status,omitempty"`
}

type DeveloperUserList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []DeveloperUser `json:"items"`
}

type DeveloperUserSpec struct {

	// Username
	Username string `json:"username"`

	// Email
	Email string `json:"email"`

	// Password
	PasswordCredentialsRef corev1.SecretReference `json:"passwordCredentialsRef"`

	// DeveloperAccountRef is the reference to the parent developer account
	DeveloperAccountRef corev1.LocalObjectReference `json:"developerAccountRef"`

	// State defines the desired state. Defaults to "false", ie, active
	// +optional
	Suspended bool `json:"suspended,omitempty"`

	// Role defines the desired 3scale role. Defaults to "member"
	// +kubebuilder:validation:Enum=admin;member
	// +optional
	Role *string `json:"role,omitempty"`

	// ProviderAccountRef references account provider credentials
	// +optional
	ProviderAccountRef *corev1.LocalObjectReference `json:"providerAccountRef,omitempty"`
}

type DeveloperUserStatus struct {
	// +optional
	ID *int64 `json:"developerUserID,omitempty"`

	// +optional
	AccountID *int64 `json:"accoundID,omitempty"`

	// +optional
	DeveloperUserState *string `json:"developerUserState,omitempty"`

	// 3scale control plane host
	// +optional
	ProviderAccountHost string `json:"providerAccountHost,omitempty"`

	// ObservedGeneration reflects the generation of the most recently observed Backend Spec.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

	// Current state of the 3scale backend.
	// Conditions represent the latest available observations of an object's state
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	Conditions common.Conditions `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type" protobuf:"bytes,2,rep,name=conditions"`
}

type GatewayResponseSpec struct {
	// ErrorStatusAuthFailed specifies the response code when authentication fails
	// +optional
	ErrorStatusAuthFailed *int32 `json:"errorStatusAuthFailed,omitempty"`

	// ErrorHeadersAuthFailed specifies the Content-Type header when authentication fails
	// +optional
	ErrorHeadersAuthFailed *string `json:"errorHeadersAuthFailed,omitempty"`

	// ErrorAuthFailed specifies the response body when authentication fails
	// +optional
	ErrorAuthFailed *string `json:"errorAuthFailed,omitempty"`

	// ErrorStatusAuthMissing specifies the response code when authentication is missing
	// +optional
	ErrorStatusAuthMissing *int32 `json:"errorStatusAuthMissing,omitempty"`

	// ErrorHeadersAuthMissing specifies the Content-Type header when authentication is missing
	// +optional
	ErrorHeadersAuthMissing *string `json:"errorHeadersAuthMissing,omitempty"`

	// ErrorAuthMissing specifies the response body when authentication is missing
	// +optional
	ErrorAuthMissing *string `json:"errorAuthMissing,omitempty"`

	// ErrorStatusNoMatch specifies the response code when no match error
	// +optional
	ErrorStatusNoMatch *int32 `json:"errorStatusNoMatch,omitempty"`

	// ErrorHeadersNoMatch specifies the Content-Type header when no match error
	// +optional
	ErrorHeadersNoMatch *string `json:"errorHeadersNoMatch,omitempty"`

	// ErrorNoMatch specifies the response body when no match error
	// +optional
	ErrorNoMatch *string `json:"errorNoMatch,omitempty"`

	// ErrorStatusLimitsExceeded specifies the response code when usage limit exceeded
	// +optional
	ErrorStatusLimitsExceeded *int32 `json:"errorStatusLimitsExceeded,omitempty"`

	// ErrorHeadersLimitsExceeded specifies the Content-Type header when usage limit exceeded
	// +optional
	ErrorHeadersLimitsExceeded *string `json:"errorHeadersLimitsExceeded,omitempty"`

	// ErrorLimitsExceeded specifies the response body when usage limit exceeded
	// +optional
	ErrorLimitsExceeded *string `json:"errorLimitsExceeded,omitempty"`
}

type LimitSpec struct {
	// Limit Period
	// +kubebuilder:validation:Enum=eternity;year;month;week;day;hour;minute
	Period string `json:"period"`

	// Limit Value
	Value int `json:"value"`

	// Metric or Method Reference
	MetricMethodRef MetricMethodRefSpec `json:"metricMethodRef"`
}

type MappingRuleSpec struct {
	// +kubebuilder:validation:Enum=GET;HEAD;POST;PUT;DELETE;OPTIONS;TRACE;PATCH;CONNECT
	HTTPMethod      string `json:"httpMethod"`
	Pattern         string `json:"pattern"`
	MetricMethodRef string `json:"metricMethodRef"`
	Increment       int    `json:"increment"`
	// +optional
	Last *bool `json:"last,omitempty"`
}

type MethodSpec struct {
	Name string `json:"friendlyName"`
	// +optional
	Description string `json:"description,omitempty"`
}

type MetricMethodRefSpec struct {
	// SystemName identifies uniquely the metric or methods
	SystemName string `json:"systemName"`

	// BackendSystemName identifies uniquely the backend
	// Backend reference must be used by the product
	// +optional
	BackendSystemName *string `json:"backend,omitempty"`
}

type MetricSpec struct {
	Name string `json:"friendlyName"`
	Unit string `json:"unit"`
	// +optional
	Description string `json:"description,omitempty"`
}

type OIDCAuthenticationFlowSpec struct {
	// OIDCIssuer is the OIDC issuer
	StandardFlowEnabled       bool `json:"standardFlowEnabled"`
	ImplicitFlowEnabled       bool `json:"implicitFlowEnabled"`
	ServiceAccountsEnabled    bool `json:"serviceAccountsEnabled"`
	DirectAccessGrantsEnabled bool `json:"directAccessGrantsEnabled"`
}

type OIDCSpec struct {
	// IssuerType is the type of the OIDC issuer
	// +kubebuilder:validation:Enum=keycloak;rest
	IssuerType string `json:"issuerType"`

	// Issuer is the OIDC issuer
	// +optional
	IssuerEndpoint string `json:"issuerEndpoint,omitempty"`

	// IssuerEndpointRef  is the reference to OIDC issuer Secret that contains IssuerEndpoint
	// +optional
	IssuerEndpointRef *corev1.SecretReference `json:"issuerEndpointRef,omitempty"`

	// AuthenticationFlow specifies OAuth2.0 authorization grant type
	// +optional
	AuthenticationFlow *OIDCAuthenticationFlowSpec `json:"authenticationFlow,omitempty"`

	// JwtClaimWithClientID is the JSON Web Token (JWT) Claim with ClientID that contains the clientID. Defaults to 'azp'.
	// +optional
	JwtClaimWithClientID *string `json:"jwtClaimWithClientID,omitempty"`

	// JwtClaimWithClientIDType sets to process the ClientID Token Claim value as a string or as a liquid template.
	// +kubebuilder:validation:Enum=plain;liquid
	// +optional
	JwtClaimWithClientIDType *string `json:"jwtClaimWithClientIDType,omitempty"`

	// Credentials Location available options:
	// headers: As HTTP Headers
	// query: As query parameters (GET) or body parameters (POST/PUT/DELETE)
	// authorization: As HTTP Basic Authentication
	// +optional
	// +kubebuilder:validation:Enum=headers;query;authorization
	CredentialsLoc *string `json:"credentials,omitempty"`

	// +optional
	Security *SecuritySpec `json:"security,omitempty"`

	// +optional
	GatewayResponse *GatewayResponseSpec `json:"gatewayResponse,omitempty"`
}

type OpenAPI struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   OpenAPISpec   `json:"spec,omitempty"`
	Status OpenAPIStatus `json:"status,omitempty"`
}

type OpenAPIList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []OpenAPI `json:"items"`
}

type OpenAPIRefSpec struct {
	// SecretRef refers to the secret object that contains the OpenAPI Document
	// +optional
	SecretRef *corev1.ObjectReference `json:"secretRef,omitempty"`

	// URL Remote URL from where to fetch the OpenAPI Document
	// +kubebuilder:validation:Pattern=`^https?:\/\/.*$`
	// +optional
	URL *string `json:"url,omitempty"`
}

type OpenAPISpec struct {

	// OpenAPIRef Reference to the OpenAPI Specification
	OpenAPIRef OpenAPIRefSpec `json:"openapiRef"`

	// ProviderAccountRef references account provider credentials
	// +optional
	ProviderAccountRef *corev1.LocalObjectReference `json:"providerAccountRef,omitempty"`

	// ProductionPublicBaseURL Custom public production URL
	// +kubebuilder:validation:Pattern=`^https?:\/\/.*$`
	// +optional
	ProductionPublicBaseURL *string `json:"productionPublicBaseURL,omitempty"`

	// StagingPublicBaseURL Custom public staging URL
	// +kubebuilder:validation:Pattern=`^https?:\/\/.*$`
	// +optional
	StagingPublicBaseURL *string `json:"stagingPublicBaseURL,omitempty"`

	// ProductSystemName 3scale product system name
	// +optional
	ProductSystemName *string `json:"productSystemName,omitempty"`

	// PrivateBaseURL Custom private base URL
	// +optional
	PrivateBaseURL *string `json:"privateBaseURL,omitempty"`

	// PrefixMatching Use prefix matching instead of strict matching on mapping rules derived from openapi operations
	// +optional
	PrefixMatching *bool `json:"prefixMatching,omitempty"`

	// PrivateAPIHostHeader Custom host header sent by the API gateway to the private API
	// +optional
	PrivateAPIHostHeader *string `json:"privateAPIHostHeader,omitempty"`

	// PrivateAPISecretToken Custom secret token sent by the API gateway to the private API
	// +optional
	PrivateAPISecretToken *string `json:"privateAPISecretToken,omitempty"`

	// +optional
	OIDC *OIDCSpec `json:"oidc,omitempty"`
}

type OpenAPIStatus struct {

	// ProviderAccountHost contains the 3scale account's provider URL
	// +optional
	ProviderAccountHost string `json:"providerAccountHost,omitempty"`

	// ProductResourceName references the managed 3scale product
	// +optional
	ProductResourceName *corev1.LocalObjectReference `json:"productResourceName,omitempty"`

	// BackendResourceNames contains a list of references to the managed 3scale backends
	// +optional
	BackendResourceNames []corev1.LocalObjectReference `json:"backendResourceNames,omitempty"`

	// ObservedGeneration reflects the generation of the most recently observed Backend Spec.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

	// Current state of the openapi resource.
	// Conditions represent the latest available observations of an object's state
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	Conditions common.Conditions `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type" protobuf:"bytes,2,rep,name=conditions"`
}

type PolicyConfig struct {
	// Name defines the policy unique name
	Name string `json:"name"`

	// Version defines the policy version
	Version string `json:"version"`

	// Configuration defines the policy configuration
	// +kubebuilder:pruning:PreserveUnknownFields
	// +optional
	Configuration runtime.RawExtension `json:"configuration,omitempty"`

	// ConfigurationRef Secret reference containing policy configuration
	// +optional
	ConfigurationRef corev1.SecretReference `json:"configurationRef,omitempty"`

	// Enabled defines activation state
	Enabled bool `json:"enabled"`
}

type PricingRuleSpec struct {
	// Range From
	From int `json:"from"`

	// Range To
	To int `json:"to"`

	// Metric or Method Reference
	MetricMethodRef MetricMethodRefSpec `json:"metricMethodRef"`

	// Price per unit (USD)
	// +kubebuilder:validation:Pattern=`^\d+(\.\d{2})?$`
	PricePerUnit string `json:"pricePerUnit"`
}

type Product struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ProductSpec   `json:"spec,omitempty"`
	Status ProductStatus `json:"status,omitempty"`
}

type ProductDeploymentSpec struct {
	// +optional
	ApicastHosted *ApicastHostedSpec `json:"apicastHosted,omitempty"`
	// +optional
	ApicastSelfManaged *ApicastSelfManagedSpec `json:"apicastSelfManaged,omitempty"`
}

type ProductList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Product `json:"items"`
}

type ProductSpec struct {

	// Name is human readable name for the product
	Name string `json:"name"`

	// SystemName identifies uniquely the product within the account provider
	// Default value will be sanitized Name
	// +optional
	SystemName string `json:"systemName,omitempty"`

	// Description is a human readable text of the product
	// +optional
	Description string `json:"description,omitempty"`

	// Deployment defined 3scale product deployment mode
	// +optional
	Deployment *ProductDeploymentSpec `json:"deployment,omitempty"`

	// Mapping Rules
	// Array: MappingRule Spec
	// +optional
	MappingRules []MappingRuleSpec `json:"mappingRules,omitempty"`

	// Backend usage will be a map of
	// Map: system_name -> BackendUsageSpec
	// Having system_name as the index, the structure ensures one backend is not used multiple times.
	// +optional
	BackendUsages map[string]BackendUsageSpec `json:"backendUsages,omitempty"`

	// Metrics
	// Map: system_name -> MetricSpec
	// system_name attr is unique for all metrics AND methods
	// In other words, if metric's system_name is A, there is no metric or method with system_name A.
	// +optional
	Metrics map[string]MetricSpec `json:"metrics,omitempty"`

	// Methods
	// Map: system_name -> MethodSpec
	// system_name attr is unique for all metrics AND methods
	// In other words, if metric's system_name is A, there is no metric or method with system_name A.
	// +optional
	Methods map[string]MethodSpec `json:"methods,omitempty"`

	// Application Plans
	// Map: system_name -> Application Plan Spec
	// +optional
	ApplicationPlans map[string]ApplicationPlanSpec `json:"applicationPlans,omitempty"`

	// ProviderAccountRef references account provider credentials
	// +optional
	ProviderAccountRef *corev1.LocalObjectReference `json:"providerAccountRef,omitempty"`

	// Policies holds the product's policy chain
	// +optional
	Policies []PolicyConfig `json:"policies,omitempty"`
}

type ProductStatus struct {

	// +optional
	ID *int64 `json:"productId,omitempty"`
	// +optional
	State *string `json:"state,omitempty"`

	// 3scale control plane host
	// +optional
	ProviderAccountHost string `json:"providerAccountHost,omitempty"`

	// ObservedGeneration reflects the generation of the most recently observed Product Spec.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

	// Current state of the 3scale product.
	// Conditions represent the latest available observations of an object's state
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	Conditions common.Conditions `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type" protobuf:"bytes,2,rep,name=conditions"`
}

type ProxyConfigPromote struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ProxyConfigPromoteSpec   `json:"spec,omitempty"`
	Status ProxyConfigPromoteStatus `json:"status,omitempty"`
}

type ProxyConfigPromoteList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ProxyConfigPromote `json:"items"`
}

type ProxyConfigPromoteSpec struct {

	// product CR metadata.name
	ProductCRName string `json:"productCRName"`

	// Environment you wish to promote to, if not present defaults to staging and if set to true promotes to production
	// +optional
	Production *bool `json:"production,omitempty"`

	// deleteCR  deletes this CR when it has successfully completed the promotion
	// +optional
	DeleteCR *bool `json:"deleteCR,omitempty"`
}

type ProxyConfigPromoteStatus struct {

	// The id of the product that has been promoted
	//+optional
	ProductId string `json:"productId,omitempty"`

	// The latest Version in production
	//+optional
	LatestProductionVersion int `json:"latestProductionVersion,omitempty"`
	// The latest Version in staging
	//+optional
	LatestStagingVersion int `json:"latestStagingVersion,omitempty"`

	// Current state of the activedoc resource.
	// Conditions represent the latest available observations of an object's state
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	Conditions common.Conditions `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type" protobuf:"bytes,2,rep,name=conditions"`
}

type SecuritySpec struct {
	// HostHeader Lets you define a custom Host request header. This is needed if your API backend only accepts traffic from a specific host.
	// +optional
	HostHeader *string `json:"hostHeader,omitempty"`

	// SecretToken Enables you to block any direct developer requests to your API backend;
	// each 3scale API gateway call to your API backend contains a request header called X-3scale-proxy-secret-token.
	// The value of this header can be set by you here. It's up to you ensure your backend only allows calls with this secret header.
	// +optional
	SecretToken *string `json:"secretToken,omitempty"`
}

type UserKeyAuthenticationSpec struct {
	// +optional
	Key *string `json:"authUserKey,omitempty"`

	// Credentials Location available options:
	// headers: As HTTP Headers
	// query: As query parameters (GET) or body parameters (POST/PUT/DELETE)
	// authorization: As HTTP Basic Authentication
	// +optional
	// +kubebuilder:validation:Enum=headers;query;authorization
	CredentialsLoc *string `json:"credentials,omitempty"`

	// +optional
	Security *SecuritySpec `json:"security,omitempty"`

	// +optional
	GatewayResponse *GatewayResponseSpec `json:"gatewayResponse,omitempty"`
}