v1beta1

type ArchivalProvider struct {
	// +optional
	Filestore *FilestoreArchiver `json:"filestore,omitempty"`
	// +optional
	S3 *S3Archiver `json:"s3,omitempty"`
	// +optional
	GCS *GCSArchiver `json:"gcs,omitempty"`
}

type ArchivalProviderKind string

type ArchivalSpec struct {
	// Enabled defines if the archival is enabled by default for all namespaces
	// or for a particular namespace (depends if it's for a TemporalCluster or a TemporalNamespace).
	// +kubebuilder:default:=false
	// +optional
	Enabled bool `json:"enabled"`
	// Paused defines if the archival is paused.
	// +kubebuilder:default:=false
	Paused bool `json:"paused"`
	// EnableRead allows temporal to read from the archived Event History.
	// +kubebuilder:default:=false
	EnableRead bool `json:"enableRead"`
	// Path is ...
	// +kubebuilder:validation:Required
	Path string `json:"path"`
}

type AuthorizationSpec struct {
	// JWTKeyProvider specifies the signing key provider used for validating JWT tokens.
	// +optional
	JWTKeyProvider AuthorizationSpecJWTKeyProvider `json:"jwtKeyProvider"`

	// PermissionsClaimName is the name of the claim within the JWT token that contains the user's permissions.
	// +optional
	PermissionsClaimName string `json:"permissionsClaimName"`

	// Authorizer defines the authorization mechanism to be used. It can be left as an empty string to
	// use a no-operation authorizer (noopAuthorizer), or set to "default" to use the temporal's default
	// authorizer (defaultAuthorizer).
	// +optional
	Authorizer string `json:"authorizer"`

	// ClaimMapper specifies the claim mapping mechanism used for handling JWT claims. Similar to the Authorizer,
	// it can be left as an empty string to use a no-operation claim mapper (noopClaimMapper), or set to "default"
	// to use the default JWT claim mapper (defaultJWTClaimMapper).
	// +optional
	ClaimMapper string `json:"claimMapper"`
}

type AuthorizationSpecJWTKeyProvider struct {
	// KeySourceURIs is a list of URIs where the JWT signing keys can be obtained. These URIs are used by the
	// authorization system to fetch the public keys necessary for validating JWT tokens.
	// +optional
	KeySourceURIs []string `json:"keySourceURIs"`

	// RefreshInterval defines the time interval at which temporal should refresh the JWT signing keys from
	// the specified URIs.
	// +optional
	RefreshInterval *metav1.Duration `json:"refreshInterval"`
}

type CassandraConsistencySpec struct {
	// Consistency sets the default consistency level.
	// Values identical to gocql Consistency values. (defaults to LOCAL_QUORUM if not set).
	// +kubebuilder:validation:Enum=ANY;ONE;TWO;THREE;QUORUM;ALL;LOCAL_QUORUM;EACH_QUORUM;LOCAL_ONE
	// +optional
	Consistency *gocql.Consistency `json:"consistency"`
	// SerialConsistency sets the consistency for the serial prtion of queries. Values identical to gocql SerialConsistency values.
	// (defaults to LOCAL_SERIAL if not set)
	// +kubebuilder:validation:Enum=SERIAL;LOCAL_SERIAL
	// +optional
	SerialConsistency *gocql.SerialConsistency `json:"serialConsistency"`
}

type CassandraSpec struct {
	// Hosts is a list of cassandra endpoints.
	Hosts []string `json:"hosts"`
	// Port is the cassandra port used for connection by gocql client.
	Port int `json:"port"`
	// User is the cassandra user used for authentication by gocql client.
	User string `json:"user"`
	// Keyspace is the cassandra keyspace.
	Keyspace string `json:"keyspace"`
	// Datacenter is the data center filter arg for cassandra.
	// +optional
	Datacenter string `json:"datacenter"`
	// MaxConns is the max number of connections to this datastore for a single keyspace.
	// +optional
	MaxConns int `json:"maxConns"`
	// ConnectTimeout is a timeout for initial dial to cassandra server.
	// +optional
	ConnectTimeout *metav1.Duration `json:"connectTimeout"`
	// Consistency configuration.
	// +optional
	Consistency *CassandraConsistencySpec `json:"consistency,omitempty"`
	// DisableInitialHostLookup instructs the gocql client to connect only using the supplied hosts.
	// +optional
	DisableInitialHostLookup bool `json:"disableInitialHostLookup"`
}

type CertificatesDurationSpec struct {
	// RootCACertificate is the 'duration' (i.e. lifetime) of the Root CA Certificate.
	// It defaults to 10 years.
	// +optional
	RootCACertificate *metav1.Duration `json:"rootCACertificate"` //nolint:tagliatelle
	// IntermediateCACertificates is the 'duration' (i.e. lifetime) of the intermediate CAs Certificates.
	// It defaults to 5 years.
	// +optional
	IntermediateCAsCertificates *metav1.Duration `json:"intermediateCAsCertificates"`
	// ClientCertificates is the 'duration' (i.e. lifetime) of the client certificates.
	// It defaults to 1 year.
	// +optional
	ClientCertificates *metav1.Duration `json:"clientCertificates"`
	// FrontendCertificate is the 'duration' (i.e. lifetime) of the frontend certificate.
	// It defaults to 1 year.
	// +optional
	FrontendCertificate *metav1.Duration `json:"frontendCertificate"`
	// InternodeCertificate is the 'duration' (i.e. lifetime) of the internode certificate.
	// It defaults to 1 year.
	// +optional
	InternodeCertificate *metav1.Duration `json:"internodeCertificate"`
}

type ClusterArchivalSpec struct {
	// Enabled defines if the archival is enabled for the cluster.
	// +kubebuilder:default:=false
	// +optional
	Enabled bool `json:"enabled"`
	// Provider defines the archival provider for the cluster.
	// The same provider is used for both history and visibility,
	// but some config can be changed using spec.archival.[history|visibility].config.
	// +optional
	Provider *ArchivalProvider `json:"provider,omitempty"`
	// History is the default config for the history archival.
	// +optional
	History *ArchivalSpec `json:"history,omitempty"`
	// Visibility is the default config for visibility archival.
	// +optional
	Visibility *ArchivalSpec `json:"visibility,omitempty"`
}

type ConstrainedValue struct {
	// Constraints describe under what conditions a ConstrainedValue should be used.
	// +optional
	Constraints Constraints `json:"constraints"`
	// Value is the value for the configuration key.
	// The type of the Value field depends on the key.
	// Acceptable types will be one of: int, float64, bool, string, map[string]any, time.Duration
	Value *apiextensionsv1.JSON `json:"value"`
}

type Constraints struct {
	// +optional
	Namespace string `json:"namespace"`
	// +optional
	NamespaceID string `json:"namespaceId"`
	// +optional
	TaskQueueName string `json:"taskQueueName"`
	// +optional
	TaskQueueType string `json:"taskQueueType"`
	// +optional
	ShardID int32 `json:"shardId"`
	// +optional
	TaskType string `json:"taskType"`
}

type ContainerRegistryConfig struct {
	// Repository is the fqdn to the image repo.
	// +required
	Repository string `json:"repository"`
	// Username is the username for the container repo.
	// +required
	Username string `json:"username"`
	// PasswordSecret is the reference to the secret holding the docker repo password.
	// +required
	PasswordSecretRef SecretKeyReference `json:"passwordSecretRef"`
}

type DatastoreSpec struct {
	// Name is the name of the datastore.
	// It should be unique and will be referenced within the persistence spec.
	// Defaults to "default" for default sore, "visibility" for visibility store,
	// "secondaryVisibility" for secondary visibility store and
	// "advancedVisibility" for advanced visibility store.
	// +optional
	Name string `json:"name"`
	// SQL holds all connection parameters for SQL datastores.
	// +optional
	SQL *SQLSpec `json:"sql,omitempty"`
	// Elasticsearch holds all connection parameters for Elasticsearch datastores.
	// +optional
	Elasticsearch *ElasticsearchSpec `json:"elasticsearch,omitempty"`
	// Cassandra holds all connection parameters for Cassandra datastore.
	// Note that cassandra is now deprecated for visibility store.
	// +optional
	Cassandra *CassandraSpec `json:"cassandra,omitempty"`
	// PasswordSecret is the reference to the secret holding the password.
	// +optional
	PasswordSecretRef *SecretKeyReference `json:"passwordSecretRef,omitempty"`
	// TLS is an optional option to connect to the datastore using TLS.
	// +optional
	TLS *DatastoreTLSSpec `json:"tls,omitempty"`
	// SkipCreate instructs the operator to skip creating the database for SQL datastores or to skip creating keyspace for Cassandra. Use this option if your database or keyspace has already been provisioned by an administrator.
	// +optional
	SkipCreate bool `json:"skipCreate"`
}

type DatastoreStatus struct {
	// Created indicates if the database or keyspace has been created.
	Created bool `json:"created"`
	// Setup indicates if tables have been set up.
	Setup bool `json:"setup"`
	// Type indicates the datastore type.
	// +optional
	Type DatastoreType `json:"type"`
	// SchemaVersion report the current schema version.
	// +optional
	SchemaVersion *version.Version `json:"schemaVersion,omitempty"`
}

type DatastoreTLSSpec struct {
	// Enabled defines if the cluster should use a TLS connection to connect to the datastore.
	Enabled bool `json:"enabled"`
	// CertFileRef is a reference to a secret containing the cert file.
	// +optional
	CertFileRef *SecretKeyReference `json:"certFileRef,omitempty"`
	// KeyFileRef is a reference to a secret containing the key file.
	// +optional
	KeyFileRef *SecretKeyReference `json:"keyFileRef,omitempty"`
	// CaFileRef is a reference to a secret containing the ca file.
	// +optional
	CaFileRef *SecretKeyReference `json:"caFileRef,omitempty"`
	// EnableHostVerification defines if the hostname should be verified when connecting to the datastore.
	EnableHostVerification bool `json:"enableHostVerification"`
	// ServerName the datastore should present.
	// +optional
	ServerName string `json:"serverName"`
}

type DatastoreType string

type DeploymentOverride struct {
	*ObjectMetaOverride `json:"metadata,omitempty"`
	// Specification of the desired behavior of the Deployment.
	// +optional
	Spec *DeploymentOverrideSpec `json:"spec,omitempty"`
}

type DeploymentOverrideSpec struct {
	// Template describes the pods that will be created.
	// +optional
	Template *PodTemplateSpecOverride `json:"template,omitempty"`
}

type DynamicConfigSpec struct {
	// PollInterval defines how often the config should be updated by checking provided values.
	// Defaults to 10s.
	// +optional
	PollInterval *metav1.Duration `json:"pollInterval"`
	// Values contains all dynamic config keys and their constrained values.
	Values map[string][]ConstrainedValue `json:"values"`
}

type ElasticsearchIndices struct {
	// Visibility defines visibility's index name.
	// +kubebuilder:default=temporal_visibility_v1
	Visibility string `json:"visibility"`
	// SecondaryVisibility defines secondary visibility's index name.
	// +optional
	SecondaryVisibility string `json:"secondaryVisibility"`
}

type ElasticsearchSpec struct {
	// Version defines the elasticsearch version.
	// +kubebuilder:default=v7
	// +kubebuilder:validation:Pattern=`^v(6|7|8)$`
	Version string `json:"version"`
	// URL is the connection url to connect to the instance.
	// +kubebuilder:validation:Pattern=`^https?:\/\/.+$`
	URL string `json:"url"`
	// Username is the username to be used for the connection.
	Username string `json:"username"`
	// Indices holds visibility index names.
	Indices ElasticsearchIndices `json:"indices"`
	// LogLevel defines the temporal cluster's es client logger level.
	// +optional
	LogLevel string `json:"logLevel"`
	// CloseIdleConnectionsInterval is the max duration a connection stay open while idle.
	// +optional
	CloseIdleConnectionsInterval metav1.Duration `json:"closeIdleConnectionsInterval"`
	// EnableSniff enables or disables sniffer on the temporal cluster's es client.
	// +optional
	EnableSniff bool `json:"enableSniff"`
	// EnableHealthcheck enables or disables healthcheck on the temporal cluster's es client.
	// +optional
	EnableHealthcheck bool `json:"enableHealthcheck"`
}

type FilestoreArchiver struct {
	// FilePermissions sets the file permissions of the archived files.
	// It's recommend to leave it empty and use the default value of "0666" to avoid read/write issues.
	// +kubebuilder:default:="0666"
	FilePermissions string `json:"filePermissions"`
	// DirPermissions sets the directory permissions of the archive directory.
	// It's recommend to leave it empty and use the default value of "0766" to avoid read/write issues.
	// +kubebuilder:default:="0766"
	DirPermissions string `json:"dirPermissions"`
}

type FrontendMTLSSpec struct {
	// Enabled defines if the operator should enable mTLS for cluster's public endpoints.
	// +optional
	Enabled bool `json:"enabled"`
}

type GCSArchiver struct {
	// SecretAccessKeyRef is the secret key selector containing Google Cloud Storage credentials file.
	// +kubebuilder:validation:Required
	CredentialsRef *corev1.SecretKeySelector `json:"credentialsRef"`
}

type GitRepositoryRef struct {
	// Branch to check out, defaults to 'main' if no other field is defined.
	// +optional
	Branch string `json:"branch,omitempty"`
}

type GitRepositorySpec struct {
	// URL specifies the Git repository URL, it can be an HTTP/S or SSH address.
	// +kubebuilder:validation:Pattern="^(http|https|ssh)://.*$"
	// +required
	URL string `json:"url"`
	// Reference specifies the Git reference to resolve and monitor for
	// changes, defaults to the 'master' branch.
	// +optional
	Reference *GitRepositoryRef `json:"reference,omitempty"`
}

type InternalFrontendServiceSpec struct {
	ServiceSpec `json:",inline"`
	// Enabled defines if we want to spawn the internal frontend service.
	// +optional
	// +kubebuilder:default:=false
	Enabled bool `json:"enabled,omitempty"`
}

type InternodeMTLSSpec struct {
	// Enabled defines if the operator should enable mTLS for network between cluster nodes.
	// +optional
	Enabled bool `json:"enabled"`
}

type LogSpec struct {
	// Stdout is true if the output needs to goto standard out; default is stderr.
	// +optional
	// +kubebuilder:default=true
	Stdout *bool `json:"stdout"`
	// Level is the desired log level; see colocated zap_logger.go::parseZapLevel()
	// +optional
	// +kubebuilder:validation:Enum=debug;info;warn;error;dpanic;panic;fatal
	// +kubebuilder:default=info
	Level string `json:"level"`
	// OutputFile is the path to the log output file.
	// +optional
	OutputFile string `json:"outputFile"`
	// Format determines the format of each log file printed to the output.
	// Use "console" if you want stack traces to appear on multiple lines.
	// +kubebuilder:validation:Enum=json;console
	// +kubebuilder:default=json
	// +optional
	Format string `json:"format"`
	// Development determines whether the logger is run in Development (== Test) or in
	// Production mode.  Default is Production.  Production-stage disables panics from
	// DPanic logging.
	// +kubebuilder:default=false
	// +optional
	Development bool `json:"development"`
}

type MTLSProvider string

type MTLSSpec struct {
	// Provider defines the tool used to manage mTLS certificates.
	// +kubebuilder:default=cert-manager
	// +kubebuilder:validation:Enum=cert-manager;linkerd;istio
	// +optional
	Provider MTLSProvider `json:"provider"`
	// Internode allows configuration of the internode traffic encryption.
	// Useless if mTLS provider is not cert-manager.
	// +optional
	Internode *InternodeMTLSSpec `json:"internode,omitempty"`
	// Frontend allows configuration of the frontend's public endpoint traffic encryption.
	// Useless if mTLS provider is not cert-manager.
	// +optional
	Frontend *FrontendMTLSSpec `json:"frontend,omitempty"`
	// CertificatesDuration allows configuration of maximum certificates lifetime.
	// Useless if mTLS provider is not cert-manager.
	// +optional
	CertificatesDuration *CertificatesDurationSpec `json:"certificatesDuration,omitempty"`
	// RefreshInterval defines interval between refreshes of certificates in the cluster components.
	// Defaults to 1 hour.
	// Useless if mTLS provider is not cert-manager.
	// +optional
	RefreshInterval *metav1.Duration `json:"refreshInterval"`
	// RenewBefore is defines how long before the currently issued certificate's expiry
	// cert-manager should renew the certificate. The default is 2/3 of the
	// issued certificate's duration. Minimum accepted value is 5 minutes.
	// Useless if mTLS provider is not cert-manager.
	// +optional
	RenewBefore *metav1.Duration `json:"renewBefore,omitempty"`
}

type MetricsSpec struct {
	// Enabled defines if the operator should enable metrics exposition on temporal components.
	Enabled bool `json:"enabled"`
	// PerUnitHistogramBoundaries defines the default histogram bucket boundaries.
	// Configuration of histogram boundaries for given metric unit.
	//
	// Supported values:
	// - "dimensionless"
	// - "milliseconds"
	// - "bytes"
	// +optional
	PerUnitHistogramBoundaries map[string][]string `json:"perUnitHistogramBoundaries,omitempty"`
	// Prometheus reporter configuration.
	// +optional
	Prometheus *PrometheusSpec `json:"prometheus,omitempty"`
}

type ObjectMetaOverride struct {
	// Map of string keys and values that can be used to organize and categorize
	// (scope and select) objects.
	// +optional
	Labels map[string]string `json:"labels,omitempty"`

	// Annotations is an unstructured key value map stored with a resource that may be
	// set by external tools to store and retrieve arbitrary metadata.
	// +optional
	Annotations map[string]string `json:"annotations,omitempty"`
}

type PodTemplateSpecOverride struct {
	*ObjectMetaOverride `json:"metadata,omitempty"`

	// Specification of the desired behavior of the pod.
	// +optional
	Spec *corev1.PodSpec `json:"spec,omitempty"`
}

type PrometheusScrapeConfig struct {
	// Annotations defines if the operator should add prometheus scrape annotations to the services pods.
	// +optional
	Annotations bool `json:"annotations"`
	// +optional
	ServiceMonitor *PrometheusScrapeConfigServiceMonitor `json:"serviceMonitor,omitempty"`
}

type PrometheusScrapeConfigServiceMonitor struct {
	// Enabled defines if the operator should create a ServiceMonitor for each services.
	// +optional
	Enabled bool `json:"enabled"`
	// Labels adds extra labels to the ServiceMonitor.
	// +optional
	Labels map[string]string `json:"labels,omitempty"`
	// Override allows customization of the created ServiceMonitor.
	// All fields can be overwritten except "endpoints", "selector" and "namespaceSelector".
	// +optional
	Override *monitoringv1.ServiceMonitorSpec `json:"override,omitempty"`
	// MetricRelabelConfigs to apply to samples before ingestion.
	// +optional
	MetricRelabelConfigs []*monitoringv1.RelabelConfig `json:"metricRelabelings,omitempty"`
}

type PrometheusSpec struct {
	// Deprecated. Address for prometheus to serve metrics from.
	// +optional
	// +deprecated
	ListenAddress string `json:"listenAddress"`
	// ListenPort for prometheus to serve metrics from.
	// +optional
	ListenPort *int32 `json:"listenPort,omitempty"`
	// ScrapeConfig is the prometheus scrape configuration.
	// +optional
	ScrapeConfig *PrometheusScrapeConfig `json:"scrapeConfig,omitempty"`
}

type S3Archiver struct {
	// Region is the aws s3 region.
	// +kubebuilder:validation:Required
	Region string `json:"region"`
	// Use Endpoint if you want to use s3-compatible object storage.
	// +optional
	Endpoint *string `json:"endpoint,omitempty"`
	// Use RoleName if you want the temporal service account
	// to assume an AWS Identity and Access Management (IAM) role.
	// +optional
	RoleName *string `json:"roleName,omitempty"`
	// Use credentials if you want to use aws credentials from secret.
	// +optional
	Credentials *S3Credentials `json:"credentials,omitempty"`
	// Use s3ForcePathStyle if you want to use s3 path style.
	// +optional
	S3ForcePathStyle bool `json:"s3ForcePathStyle"`
}

type S3Credentials struct {
	// AccessKeyIDRef is the secret key selector containing AWS access key ID.
	// +kubebuilder:validation:Required
	AccessKeyIDRef *corev1.SecretKeySelector `json:"accessKeyIdRef"`
	// SecretAccessKeyRef is the secret key selector containing AWS secret access key.
	// +kubebuilder:validation:Required
	SecretAccessKeyRef *corev1.SecretKeySelector `json:"secretKeyRef"`
}

type SQLSpec struct {
	// User is the username to be used for the connection.
	User string `json:"user"`
	// PluginName is the name of SQL plugin.
	// +kubebuilder:validation:Enum=postgres;postgres12;mysql;mysql8
	PluginName string `json:"pluginName"`
	// DatabaseName is the name of SQL database to connect to.
	DatabaseName string `json:"databaseName"`
	// ConnectAddr is the remote addr of the database.
	ConnectAddr string `json:"connectAddr"`
	// ConnectProtocol is the protocol that goes with the ConnectAddr.
	// +optional
	ConnectProtocol string `json:"connectProtocol"`
	// ConnectAttributes is a set of key-value attributes to be sent as part of connect data_source_name url
	// +optional
	ConnectAttributes map[string]string `json:"connectAttributes,omitempty"`
	// MaxConns the max number of connections to this datastore.
	// +optional
	MaxConns int `json:"maxConns"`
	// MaxIdleConns is the max number of idle connections to this datastore.
	// +optional
	MaxIdleConns int `json:"maxIdleConns"`
	// MaxConnLifetime is the maximum time a connection can be alive
	// +optional
	MaxConnLifetime metav1.Duration `json:"maxConnLifetime"`
	// TaskScanPartitions is the number of partitions to sequentially scan during ListTaskQueue operations.
	// +optional
	TaskScanPartitions int `json:"taskScanPartitions"`
	// GCPServiceAccount is the service account to use to authenticate with GCP CloudSQL.
	// +optional
	GCPServiceAccount *string `json:"gcpServiceAccount,omitempty"`
}

type SecretKeyReference struct {
	// Name of the Secret.
	// +required
	Name string `json:"name"`
	// Key in the Secret.
	// +optional
	Key string `json:"key,omitempty"`
}

type ServiceSpec struct {
	// Port defines a custom gRPC port for the service.
	// Default values are:
	// 7233 for Frontend service
	// 7234 for History service
	// 7235 for Matching service
	// 7239 for Worker service
	// +optional
	Port *int `json:"port"`
	// MembershipPort defines a custom membership port for the service.
	// Default values are:
	// 6933 for Frontend service
	// 6934 for History service
	// 6935 for Matching service
	// 6939 for Worker service
	// +optional
	MembershipPort *int `json:"membershipPort"`
	// HTTPPort defines a custom http port for the service.
	// Default values are:
	// 7243 for Frontend service
	// +optional
	HTTPPort *int `json:"httpPort"`
	// Number of desired replicas for the service. Default to 1.
	// +kubebuilder:validation:Minimum=1
	// +optional
	Replicas *int32 `json:"replicas"`
	// Compute Resources required by this service.
	// More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
	// +optional
	Resources corev1.ResourceRequirements `json:"resources,omitempty"`
	// Overrides adds some overrides to the resources deployed for the service.
	// Those overrides takes precedence over spec.services.overrides.
	// +optional
	Overrides *ServiceSpecOverride `json:"overrides,omitempty"`
	// InitContainers adds a list of init containers to the service's deployment.
	// +optional
	InitContainers []corev1.Container `json:"initContainers,omitempty"`
}

type ServiceSpecOverride struct {
	// Override configuration for the temporal service Deployment.
	Deployment *DeploymentOverride `json:"deployment,omitempty"`
}

type ServiceStatus struct {
	// Name of the temporal service.
	Name string `json:"name"`
	// Current observed version of the service.
	Version string `json:"version"`
	// Ready defines if the service is ready.
	Ready bool `json:"ready"`
}

type ServicesSpec struct {
	// Frontend service custom specifications.
	// +optional
	Frontend *ServiceSpec `json:"frontend,omitempty"`
	// Internal Frontend service custom specifications.
	// Only compatible with temporal >= 1.20.0
	// +optional
	InternalFrontend *InternalFrontendServiceSpec `json:"internalFrontend,omitempty"`
	// History service custom specifications.
	// +optional
	History *ServiceSpec `json:"history,omitempty"`
	// Matching service custom specifications.
	// +optional
	Matching *ServiceSpec `json:"matching,omitempty"`
	// Worker service custom specifications.
	// +optional
	Worker *ServiceSpec `json:"worker,omitempty"`
	// Overrides adds some overrides to the resources deployed for all temporal services services.
	// Those overrides can be customized per service using spec.services.<serviceName>.overrides.
	// +optional
	Overrides *ServiceSpecOverride `json:"overrides,omitempty"`
}

type TemporalAdminToolsSpec struct {
	// Enabled defines if the operator should deploy the admin tools alongside the cluster.
	// +optional
	Enabled bool `json:"enabled"`
	// Image defines the temporal admin tools docker image the instance should run.
	// +optional
	Image string `json:"image"`
	// Compute Resources required by the ui.
	// More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
	// +optional
	Resources corev1.ResourceRequirements `json:"resources,omitempty"`
	// Overrides adds some overrides to the resources deployed for the ui.
	// +optional
	Overrides *ServiceSpecOverride `json:"overrides,omitempty"`
}

type TemporalCluster struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired behavior of the Temporal cluster.
	Spec TemporalClusterSpec `json:"spec,omitempty"`
	// Most recent observed status of the Temporal cluster.
	Status TemporalClusterStatus `json:"status,omitempty"`
}

type TemporalClusterClient struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   TemporalClusterClientSpec   `json:"spec,omitempty"`
	Status TemporalClusterClientStatus `json:"status,omitempty"`
}

type TemporalClusterClientList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []TemporalClusterClient `json:"items"`
}

type TemporalClusterClientSpec struct {
	// Reference to the temporal cluster the client will get access to.
	ClusterRef TemporalClusterReference `json:"clusterRef"`
}

type TemporalClusterClientStatus struct {
	// ServerName is the hostname returned by the certificate.
	ServerName string `json:"serverName"`
	// Reference to the Kubernetes Secret containing the certificate for the client.
	SecretRef *corev1.LocalObjectReference `json:"secretRef,omitempty"`
}

type TemporalClusterList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []TemporalCluster `json:"items"`
}

type TemporalClusterReference struct {
	// The name of the TemporalCluster to reference.
	Name string `json:"name,omitempty"`
	// The namespace of the TemporalCluster to reference.
	// Defaults to the namespace of the requested resource if omitted.
	// +kubebuilder:validation:Optional
	Namespace string `json:"namespace,omitempty"`
}

type TemporalClusterSpec struct {
	// Image defines the temporal server docker image the cluster should use for each services.
	// +optional
	Image string `json:"image"`
	// Version defines the temporal version the cluster to be deployed.
	// This version impacts the underlying persistence schemas versions.
	// +optional
	Version *version.Version `json:"version"`
	// Log defines temporal cluster's logger configuration.
	// +optional
	Log *LogSpec `json:"log,omitempty"`
	// JobTTLSecondsAfterFinished is amount of time to keep job pods after jobs are completed.
	// Defaults to 300 seconds.
	// +optional
	//+kubebuilder:default:=300
	//+kubebuilder:validation:Minimum=1
	JobTTLSecondsAfterFinished *int32 `json:"jobTtlSecondsAfterFinished"`
	// JobResources allows set resources for setup/update jobs.
	// +optional
	JobResources corev1.ResourceRequirements `json:"jobResources,omitempty"`
	// JobInitContainers adds a list of init containers to the setup's jobs.
	// +optional
	JobInitContainers []corev1.Container `json:"jobInitContainers,omitempty"`
	// NumHistoryShards is the desired number of history shards.
	// This field is immutable.
	//+kubebuilder:validation:Minimum=1
	NumHistoryShards int32 `json:"numHistoryShards"`
	// Services allows customizations for each temporal services deployment.
	// +optional
	Services *ServicesSpec `json:"services,omitempty"`
	// Persistence defines temporal persistence configuration.
	Persistence TemporalPersistenceSpec `json:"persistence"`
	// An optional list of references to secrets in the same namespace
	// to use for pulling temporal images from registries.
	// +optional
	ImagePullSecrets []corev1.LocalObjectReference `json:"imagePullSecrets,omitempty"`
	// UI allows configuration of the optional temporal web ui deployed alongside the cluster.
	// +optional
	UI *TemporalUISpec `json:"ui,omitempty"`
	// AdminTools allows configuration of the optional admin tool pod deployed alongside the cluster.
	// +optional
	AdminTools *TemporalAdminToolsSpec `json:"admintools,omitempty"`
	// MTLS allows configuration of the network traffic encryption for the cluster.
	// +optional
	MTLS *MTLSSpec `json:"mTLS,omitempty"` //nolint:tagliatelle
	// Metrics allows configuration of scraping endpoints for stats. prometheus or m3.
	// +optional
	Metrics *MetricsSpec `json:"metrics,omitempty"`
	// DynamicConfig allows advanced configuration for the temporal cluster.
	// +optional
	DynamicConfig *DynamicConfigSpec `json:"dynamicConfig,omitempty"`
	// Archival allows Workflow Execution Event Histories and Visibility data backups for the temporal cluster.
	// +optional
	Archival *ClusterArchivalSpec `json:"archival,omitempty"`
	// Authorization allows authorization configuration for the temporal cluster.
	// +optional
	Authorization *AuthorizationSpec `json:"authorization,omitempty"`
}

type TemporalClusterStatus struct {
	// Version holds the current temporal version.
	Version string `json:"version,omitempty"`
	// Services holds all services statuses.
	Services []ServiceStatus `json:"services,omitempty"`
	// Persistence holds all datastores statuses.
	Persistence *TemporalPersistenceStatus `json:"persistence,omitempty"`
	// Conditions represent the latest available observations of the Cluster state.
	Conditions []metav1.Condition `json:"conditions"`
}

type TemporalNamespace struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   TemporalNamespaceSpec   `json:"spec,omitempty"`
	Status TemporalNamespaceStatus `json:"status,omitempty"`
}

type TemporalNamespaceArchivalSpec struct {
	// History is the config for this namespace history archival.
	// +optional
	History *ArchivalSpec `json:"history,omitempty"`
	// Visibility is the config for this namespace visibility archival.
	// +optional
	Visibility *ArchivalSpec `json:"visibility,omitempty"`
}

type TemporalNamespaceList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []TemporalNamespace `json:"items"`
}

type TemporalNamespaceSpec struct {
	// Reference to the temporal cluster the namespace will be created.
	ClusterRef TemporalClusterReference `json:"clusterRef"`
	// Namespace description.
	// +optional
	Description string `json:"description,omitempty"`
	// Namespace owner email.
	// +optional
	OwnerEmail string `json:"ownerEmail,omitempty"`
	// RetentionPeriod to apply on closed workflow executions.
	RetentionPeriod *metav1.Duration `json:"retentionPeriod"`
	// Data is a key-value map for any customized purpose.
	// +optional
	Data map[string]string `json:"data,omitempty"`
	// +optional
	SecurityToken string `json:"securityToken,omitempty"`
	// IsGlobalNamespace defines whether the namespace is a global namespace.
	// +optional
	IsGlobalNamespace bool `json:"isGlobalNamespace,omitempty"`
	// List of clusters names to which the namespace can fail over.
	// Only applicable if the namespace is a global namespace.
	// +optional
	Clusters []string `json:"clusters,omitempty"`
	// The name of active Temporal Cluster.
	// Only applicable if the namespace is a global namespace.
	// +optional
	ActiveClusterName string `json:"activeClusterName,omitempty"`
	// AllowDeletion makes the controller delete the Temporal namespace if the
	// CRD is deleted.
	// +optional
	AllowDeletion bool `json:"allowDeletion,omitempty"`
	// Archival is a per-namespace archival configuration.
	// If not set, the default cluster configuration is used.
	// +optional
	Archival *TemporalNamespaceArchivalSpec `json:"archival,omitempty"`
}

type TemporalNamespaceStatus struct {
	// Conditions represent the latest available observations of the Namespace state.
	Conditions []metav1.Condition `json:"conditions"`
}

type TemporalPersistenceSpec struct {
	// DefaultStore holds the default datastore specs.
	DefaultStore *DatastoreSpec `json:"defaultStore"`
	// VisibilityStore holds the visibility datastore specs.
	VisibilityStore *DatastoreSpec `json:"visibilityStore"`
	// SecondaryVisibilityStore holds the secondary visibility datastore specs.
	// Feature only available for clusters >= 1.21.0.
	// +optional
	SecondaryVisibilityStore *DatastoreSpec `json:"secondaryVisibilityStore,omitempty"`
	// AdvancedVisibilityStore holds the advanced visibility datastore specs.
	// +optional
	AdvancedVisibilityStore *DatastoreSpec `json:"advancedVisibilityStore,omitempty"`
}

type TemporalPersistenceStatus struct {
	// DefaultStore holds the default datastore status.
	DefaultStore *DatastoreStatus `json:"defaultStore"`
	// VisibilityStore holds the visibility datastore status.
	VisibilityStore *DatastoreStatus `json:"visibilityStore"`
	// SecondaryVisibilityStore holds the secondary visibility datastore status.
	// +optional
	SecondaryVisibilityStore *DatastoreStatus `json:"secondaryVisibilityStore"`
	// AdvancedVisibilityStore holds the advanced visibility datastore status.
	// +optional
	AdvancedVisibilityStore *DatastoreStatus `json:"advancedVisibilityStore,omitempty"`
}

type TemporalUIIngressSpec struct {
	// Annotations allows custom annotations on the ingress resource.
	Annotations map[string]string `json:"annotations,omitempty"`
	// IngressClassName is the name of the IngressClass the deployed ingress resource should use.
	IngressClassName *string `json:"ingressClassName,omitempty"`
	// Host is the list of host the ingress should use.
	Hosts []string `json:"hosts"`
	// TLS configuration.
	TLS []networkingv1.IngressTLS `json:"tls,omitempty" protobuf:"bytes,2,rep,name=tls"`
}

type TemporalUISpec struct {
	// Enabled defines if the operator should deploy the web ui alongside the cluster.
	// +optional
	Enabled bool `json:"enabled"`
	// Version defines the temporal ui version the instance should run.
	// +optional
	Version string `json:"version"`
	// Image defines the temporal ui docker image the instance should run.
	// +optional
	Image string `json:"image"`
	// Number of desired replicas for the ui. Default to 1.
	// +kubebuilder:validation:Minimum=1
	// +optional
	Replicas *int32 `json:"replicas"`
	// Compute Resources required by the ui.
	// More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
	// +optional
	Resources corev1.ResourceRequirements `json:"resources,omitempty"`
	// Overrides adds some overrides to the resources deployed for the ui.
	// +optional
	Overrides *ServiceSpecOverride `json:"overrides,omitempty"`
	// Ingress is an optional ingress configuration for the UI.
	// If lived empty, no ingress configuration will be created and the UI will only by available trough ClusterIP service.
	// +optional
	Ingress *TemporalUIIngressSpec `json:"ingress,omitempty"`
	// Service is an optional service resource configuration for the UI.
	// +optional
	Service *ObjectMetaOverride `json:"service,omitempty"`
}

type TemporalWorkerProcess struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   TemporalWorkerProcessSpec   `json:"spec,omitempty"`
	Status TemporalWorkerProcessStatus `json:"status,omitempty"`
}

type TemporalWorkerProcessBuilder struct {
	// Enabled defines if the operator should build the temporal worker process.
	// +required
	Enabled bool `json:"enabled"`
	// Version is the version of the image that will be used to build worker image.
	Version string `json:"version,omitempty"`
	// BuildAttempt is the build attempt number of a given version
	BuildAttempt *int32 `json:"attempt,omitempty"`
	// Image is the image that will be used to build worker image.
	Image string `json:"image,omitempty"`
	// BuildDir is the location of where the sources will be built.
	BuildDir string `json:"buildDir,omitempty"`
	// GitRepository specifies how to connect to Git source control.
	GitRepository *GitRepositorySpec `json:"gitRepository,omitempty"`
	// BuildRegistry specifies how to connect to container registry.
	BuildRegistry *ContainerRegistryConfig `json:"buildRegistry,omitempty"`
}

type TemporalWorkerProcessList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []TemporalWorkerProcess `json:"items"`
}

type TemporalWorkerProcessSpec struct {
	// Reference to the temporal cluster the worker will connect to.
	ClusterRef *TemporalClusterReference `json:"clusterRef"`
	// Version defines the worker process version.
	// +optional
	Version string `json:"version"`
	// Image defines the temporal worker docker image the instance should run.
	Image string `json:"image"`
	// JobTTLSecondsAfterFinished is amount of time to keep job pods after jobs are completed.
	// Defaults to 300 seconds.
	// +optional
	//+kubebuilder:default:=300
	//+kubebuilder:validation:Minimum=1
	JobTTLSecondsAfterFinished *int32 `json:"jobTtlSecondsAfterFinished"`
	// Number of desired replicas. Default to 1.
	// +kubebuilder:validation:Minimum=1
	// +optional
	Replicas *int32 `json:"replicas"`
	// Image pull policy for determining how to pull worker process images.
	PullPolicy corev1.PullPolicy `json:"pullPolicy,omitempty"`
	// An optional list of references to secrets in the same namespace
	// to use for pulling temporal images from registries.
	// +optional
	ImagePullSecrets []corev1.LocalObjectReference `json:"imagePullSecrets,omitempty"`
	// TemporalNamespace that worker will poll.
	TemporalNamespace string `json:"temporalNamespace"`
	// Builder is the configuration for building a TemporalWorkerProcess.
	// THIS FEATURE IS HIGHLY EXPERIMENTAL.
	Builder *TemporalWorkerProcessBuilder `json:"builder,omitempty"`
}

type TemporalWorkerProcessStatus struct {
	// Created indicates if the worker process image was created.
	// +optional
	Created bool `json:"created"`
	// Ready defines if the worker process is ready.
	// +optional
	Ready bool `json:"ready"`
	// Version is the version of the image that will be used to build worker image.
	// +optional
	Version string `json:"version"`
	// BuildAttempt is the build attempt number of a given version
	// +optional
	BuildAttempt *int32 `json:"attempt"`
	// Conditions represent the latest available observations of the worker process state.
	Conditions []metav1.Condition `json:"conditions"`
}