v1beta1

type AlertManagerConfig struct {
	// DownScaleLimit the limit for auto-downscaling the Kafka cluster.
	// Once the size of the cluster (number of brokers) reaches or falls below this limit the auto-downscaling triggered by alerts is disabled until the cluster size exceeds this limit.
	// This limit is not enforced if this field is omitted or is <= 0.
	DownScaleLimit int `json:"downScaleLimit,omitempty"`
	// UpScaleLimit the limit for auto-upscaling the Kafka cluster.
	// Once the size of the cluster (number of brokers) reaches or exceeds this limit the auto-upscaling triggered by alerts is disabled until the cluster size falls below this limit.
	// This limit is not enforced if this field is omitted or is <= 0.
	UpScaleLimit int `json:"upScaleLimit,omitempty"`
}

type Broker struct {
	// +kubebuilder:validation:Minimum=0
	// +kubebuilder:validation:Maximum=65535
	// +kubebuilder:validation:ExclusiveMaximum=true
	Id                int32         `json:"id"`
	BrokerConfigGroup string        `json:"brokerConfigGroup,omitempty"`
	ReadOnlyConfig    string        `json:"readOnlyConfig,omitempty"`
	BrokerConfig      *BrokerConfig `json:"brokerConfig,omitempty"`
}

type BrokerConfig struct {
	Image                string                        `json:"image,omitempty"`
	MetricsReporterImage string                        `json:"metricsReporterImage,omitempty"`
	Config               string                        `json:"config,omitempty"`
	StorageConfigs       []StorageConfig               `json:"storageConfigs,omitempty"`
	ServiceAccountName   string                        `json:"serviceAccountName,omitempty"`
	Resources            *corev1.ResourceRequirements  `json:"resourceRequirements,omitempty"`
	ImagePullSecrets     []corev1.LocalObjectReference `json:"imagePullSecrets,omitempty"`
	NodeSelector         map[string]string             `json:"nodeSelector,omitempty"`
	Tolerations          []corev1.Toleration           `json:"tolerations,omitempty"`
	KafkaHeapOpts        string                        `json:"kafkaHeapOpts,omitempty"`
	KafkaJVMPerfOpts     string                        `json:"kafkaJvmPerfOpts,omitempty"`
	// Override for the default log4j configuration
	Log4jConfig string `json:"log4jConfig,omitempty"`
	// Custom annotations for the broker pods - e.g.: Prometheus scraping annotations:
	// prometheus.io/scrape: "true"
	// prometheus.io/port: "9020"
	BrokerAnnotations map[string]string `json:"brokerAnnotations,omitempty"`
	// Custom labels for the broker pods, example use case: for Prometheus monitoring to capture the group for each broker as a label, e.g.:
	// kafka_broker_group: "default_group"
	// these labels will not override the reserved labels that the operator relies on, for example, "app", "brokerId", and "kafka_cr"
	// +optional
	BrokerLabels map[string]string `json:"brokerLabels,omitempty"`
	// Network throughput information in kB/s used by Cruise Control to determine broker network capacity.
	// By default it is set to `125000` which means 1Gbit/s in network throughput.
	NetworkConfig *NetworkConfig `json:"networkConfig,omitempty"`
	// External listeners that use NodePort type service to expose the broker outside the Kubernetes clusterT and their
	// external IP to advertise Kafka broker external listener. The external IP value is ignored in case of external listeners that use LoadBalancer
	// type service to expose the broker outside the Kubernetes cluster. Also, when "hostnameOverride" field of the external listener is set
	// it will override the broker's external listener advertise address according to the description of the "hostnameOverride" field.
	NodePortExternalIP map[string]string `json:"nodePortExternalIP,omitempty"`
	// When "hostNameOverride" and brokerConfig.nodePortExternalIP are empty and NodePort access method is selected for an external listener
	// the NodePortNodeAdddressType defines the Kafka broker's Kubernetes node's address type that shall be used in the advertised.listeners property.
	// https://kubernetes.io/docs/concepts/architecture/nodes/#addresses
	// The NodePortNodeAddressType's possible values can be Hostname, ExternalIP, InternalIP, InternalDNS,ExternalDNS
	// +kubebuilder:validation:Enum=Hostname;ExternalIP;InternalIP;InternalDNS;ExternalDNS
	// +optional
	NodePortNodeAddressType corev1.NodeAddressType `json:"nodePortNodeAddressType,omitempty"`
	// Any definition received through this field will override the default behaviour of OneBrokerPerNode flag
	// and the operator supposes that the user is aware of how scheduling is done by kubernetes
	// Affinity could be set through brokerConfigGroups definitions and can be set for individual brokers as well
	// where letter setting will override the group setting
	Affinity           *corev1.Affinity           `json:"affinity,omitempty"`
	PodSecurityContext *corev1.PodSecurityContext `json:"podSecurityContext,omitempty"`
	// SecurityContext allows to set security context for the kafka container
	SecurityContext *corev1.SecurityContext `json:"securityContext,omitempty"`
	// BrokerIngressMapping allows to set specific ingress to a specific broker mappings.
	// If left empty, all broker will inherit the default one specified under external listeners config
	// Only used when ExternalListeners.Config is populated
	BrokerIngressMapping []string `json:"brokerIngressMapping,omitempty"`
	// InitContainers add extra initContainers to the Kafka broker pod
	InitContainers []corev1.Container `json:"initContainers,omitempty"`
	// Containers add extra Containers to the Kafka broker pod
	Containers []corev1.Container `json:"containers,omitempty"`
	// Volumes define some extra Kubernetes Volumes for the Kafka broker Pods.
	Volumes []corev1.Volume `json:"volumes,omitempty"`
	// VolumeMounts define some extra Kubernetes VolumeMounts for the Kafka broker Pods.
	VolumeMounts []corev1.VolumeMount `json:"volumeMounts,omitempty"`
	// Envs defines environment variables for Kafka broker Pods.
	// Adding the "+" prefix to the name prepends the value to that environment variable instead of overwriting it.
	// Add the "+" suffix to append.
	Envs []corev1.EnvVar `json:"envs,omitempty"`
	// TerminationGracePeriod defines the pod termination grace period
	// +kubebuilder:default=120
	// +optional
	TerminationGracePeriod *int64 `json:"terminationGracePeriodSeconds,omitempty"`
	// PriorityClassName specifies the priority class name for a broker pod(s).
	// If specified, the PriorityClass resource with this PriorityClassName must be created beforehand.
	// If not specified, the broker pods' priority is default to zero.
	// +optional
	PriorityClassName string `json:"priorityClassName,omitempty"`
}

type BrokerState struct {
	// RackAwarenessState holds info about rack awareness status
	RackAwarenessState RackAwarenessState `json:"rackAwarenessState"`
	// GracefulActionState holds info about cc action status
	GracefulActionState GracefulActionState `json:"gracefulActionState"`
	// ConfigurationState holds info about the config
	ConfigurationState ConfigurationState `json:"configurationState"`
	// PerBrokerConfigurationState holds info about the per-broker (dynamically updatable) config
	PerBrokerConfigurationState PerBrokerConfigurationState `json:"perBrokerConfigurationState"`
	// ExternalListenerConfigNames holds info about what listener config is in use with the broker
	ExternalListenerConfigNames ExternalListenerConfigNames `json:"externalListenerConfigNames,omitempty"`
	// Version holds the current version of the broker in semver format
	Version string `json:"version,omitempty"`
	// Image specifies the current docker image of the broker
	Image string `json:"image,omitempty"`
	// Compressed data from broker configuration to restore broker pod in specific cases
	ConfigurationBackup string `json:"configurationBackup,omitempty"`
}

type ClusterState string

type CommonListenerSpec struct {
	// +kubebuilder:validation:Enum=ssl;plaintext;sasl_ssl;sasl_plaintext
	Type SecurityProtocol `json:"type"`
	// ServerSSLCertSecret is a reference to the Kubernetes secret that contains the server certificate for the listener to be used for SSL communication.
	// The secret must contain the keystore, truststore jks files and the password for them in base64 encoded format under the keystore.jks, truststore.jks, password data fields.
	// If this field is omitted koperator will auto-create a self-signed server certificate using the configuration provided in 'sslSecrets' field.
	ServerSSLCertSecret *corev1.LocalObjectReference `json:"serverSSLCertSecret,omitempty"`
	// SSLClientAuth specifies whether client authentication is required, requested, or not required.
	// This field defaults to "required" if it is omitted
	// +kubebuilder:validation:Enum=required;requested;none
	SSLClientAuth SSLClientAuthentication `json:"sslClientAuth,omitempty"`
	// +kubebuilder:validation:Pattern=^[a-z0-9\-]+
	Name string `json:"name"`
	// +kubebuilder:validation:Minimum=0
	// +kubebuilder:validation:ExclusiveMinimum=true
	// +kubebuilder:validation:Maximum=65535
	ContainerPort int32 `json:"containerPort"`
}

type Config struct {
	DefaultIngressConfig string                   `json:"defaultIngressConfig"`
	IngressConfig        map[string]IngressConfig `json:"ingressConfig,omitempty"`
}

type ConfigurationState string

type CruiseControlConfig struct {
	CruiseControlTaskSpec      CruiseControlTaskSpec         `json:"cruiseControlTaskSpec,omitempty"`
	CruiseControlOperationSpec *CruiseControlOperationSpec   `json:"cruiseControlOperationSpec,omitempty"`
	CruiseControlEndpoint      string                        `json:"cruiseControlEndpoint,omitempty"`
	Resources                  *corev1.ResourceRequirements  `json:"resourceRequirements,omitempty"`
	ServiceAccountName         string                        `json:"serviceAccountName,omitempty"`
	ImagePullSecrets           []corev1.LocalObjectReference `json:"imagePullSecrets,omitempty"`
	NodeSelector               map[string]string             `json:"nodeSelector,omitempty"`
	Tolerations                []corev1.Toleration           `json:"tolerations,omitempty"`
	Config                     string                        `json:"config,omitempty"`
	CapacityConfig             string                        `json:"capacityConfig,omitempty"`
	ClusterConfig              string                        `json:"clusterConfig,omitempty"`
	Log4jConfig                string                        `json:"log4jConfig,omitempty"`
	Image                      string                        `json:"image,omitempty"`
	TopicConfig                *TopicConfig                  `json:"topicConfig,omitempty"`
	Affinity                   *corev1.Affinity              `json:"affinity,omitempty"`
	//  Annotations to be applied to CruiseControl pod
	// +optional
	CruiseControlAnnotations map[string]string `json:"cruiseControlAnnotations,omitempty"`
	// InitContainers add extra initContainers to CruiseControl pod
	InitContainers []corev1.Container `json:"initContainers,omitempty"`
	// Volumes define some extra Kubernetes Volumes for the CruiseControl Pods.
	Volumes []corev1.Volume `json:"volumes,omitempty"`
	// VolumeMounts define some extra Kubernetes Volume mounts for the CruiseControl Pods.
	VolumeMounts       []corev1.VolumeMount       `json:"volumeMounts,omitempty"`
	PodSecurityContext *corev1.PodSecurityContext `json:"podSecurityContext,omitempty"`
	// SecurityContext allows to set security context for the CruiseControl container
	SecurityContext *corev1.SecurityContext `json:"securityContext,omitempty"`
	// PriorityClassName specifies the priority class name for the CruiseControl pod.
	// If specified, the PriorityClass resource with this PriorityClassName must be created beforehand.
	// If not specified, the CruiseControl pod's priority is default to zero.
	// +optional
	PriorityClassName string `json:"priorityClassName,omitempty"`
}

type CruiseControlOperationSpec struct {
	// When TTLSecondsAfterFinished is specified, the created and finished (completed successfully or completedWithError and errorPolicy: ignore)
	// cruiseControlOperation custom resource will be deleted after the given time elapsed.
	// When it is 0 then the resource is going to be deleted instantly after the operation is finished.
	// When it is not specified the resource is not going to be removed.
	// Value can be only zero and positive integers.
	// +kubebuilder:validation:Minimum=0
	TTLSecondsAfterFinished *int `json:"ttlSecondsAfterFinished,omitempty"`
}

type CruiseControlState string

type CruiseControlTaskSpec struct {
	// RetryDurationMinutes describes the amount of time the Operator waits for the task
	RetryDurationMinutes int `json:"RetryDurationMinutes"`
}

type CruiseControlTopicStatus string

type CruiseControlUserTaskState string

type CruiseControlVolumeState string

type DisruptionBudget struct {
	// If set to true, will create a podDisruptionBudget
	// +optional
	Create bool `json:"create,omitempty"`
	// The budget to set for the PDB, can either be static number or a percentage
	// +kubebuilder:validation:Pattern:="^[0-9]+$|^[0-9]{1,2}%$|^100%$"
	Budget string `json:"budget,omitempty"`
}

type DisruptionBudgetWithStrategy struct {
	// PodDisruptionBudget default settings
	DisruptionBudget `json:",inline"`
	// The strategy to be used, either minAvailable or maxUnavailable
	// +kubebuilder:validation:Enum=minAvailable;maxUnavailable
	Stategy string `json:"strategy,omitempty"`
}

type EnvoyCommandLineArgs struct {
	// Envoy --concurrency command line argument.
	// See https://www.envoyproxy.io/docs/envoy/latest/operations/cli#cmdoption-concurrency
	// +optional
	// +kubebuilder:validation:Minimum=1
	Concurrency int32 `json:"concurrency,omitempty"`
}

type EnvoyConfig struct {
	Image     string                       `json:"image,omitempty"`
	Resources *corev1.ResourceRequirements `json:"resourceRequirements,omitempty"`
	// +kubebuilder:validation:Minimum=1
	Replicas int32 `json:"replicas,omitempty"`
	// ServiceAccountName is the name of service account
	ServiceAccountName string `json:"serviceAccountName,omitempty"`
	// ImagePullSecrets for the envoy image pull
	ImagePullSecrets          []corev1.LocalObjectReference     `json:"imagePullSecrets,omitempty"`
	Affinity                  *corev1.Affinity                  `json:"affinity,omitempty"`
	TopologySpreadConstraints []corev1.TopologySpreadConstraint `json:"topologySpreadConstraints,omitempty"`
	// NodeSelector is the node selector expression for envoy pods
	NodeSelector map[string]string   `json:"nodeSelector,omitempty"`
	Tolerations  []corev1.Toleration `json:"tolerations,omitempty"`
	// Annotations defines the annotations placed on the envoy ingress controller deployment
	Annotations map[string]string `json:"annotations,omitempty"`
	// If specified and supported by the platform, traffic through the
	// cloud-provider load-balancer will be restricted to the specified client
	// IPs. This field will be ignored if the
	// cloud-provider does not support the feature.
	// More info: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/
	LoadBalancerSourceRanges []string `json:"loadBalancerSourceRanges,omitempty"`
	// LoadBalancerIP can be used to specify an exact IP for the LoadBalancer service
	LoadBalancerIP string `json:"loadBalancerIP,omitempty"`
	// Envoy admin port
	AdminPort *int32 `json:"adminPort,omitempty"`
	// Envoy health-check port
	HealthCheckPort *int32 `json:"healthCheckPort,omitempty"`
	// DisruptionBudget is the pod disruption budget attached to Envoy Deployment(s)
	DisruptionBudget *DisruptionBudgetWithStrategy `json:"disruptionBudget,omitempty"`
	// Envoy command line arguments
	// +optional
	// +kubebuilder:pruning:PreserveUnknownFields
	CommandLineArgs *EnvoyCommandLineArgs `json:"envoyCommandLineArgs,omitempty"`
	// PriorityClassName specifies the priority class name for the Envoy pod(s)
	// If specified, the PriorityClass resource with this PriorityClassName must be created beforehand
	// If not specified, the Envoy pods' priority is default to zero
	// +optional
	PriorityClassName string `json:"priorityClassName,omitempty"`
	// EnableHealthCheckHttp10 is a toggle for adding HTTP1.0 support to Envoy health-check, default false
	// +optional
	EnableHealthCheckHttp10 bool `json:"enableHealthCheckHttp10,omitempty"`

	// PodSecurityContext holds pod-level security attributes and common container
	// settings for the Envoy pods.
	PodSecurityContext *corev1.PodSecurityContext `json:"podSecurityContext,omitempty"`
}

type ExternalListenerConfig struct {
	CommonListenerSpec     `json:",inline"`
	IngressServiceSettings `json:",inline"`
	// +kubebuilder:validation:Minimum=0
	// +kubebuilder:validation:Maximum=65535
	// externalStartingPort is added to each broker ID to get the port number that will be used for external access to the broker.
	// The choice of broker ID and externalStartingPort must satisfy 0 < broker ID + externalStartingPort <= 65535
	// If accessMethod is Nodeport and externalStartingPort is set to 0 then the broker IDs are not added and the Nodeport port numbers will be chosen automatically by the K8s Service controller
	ExternalStartingPort int32 `json:"externalStartingPort"`
	// configuring AnyCastPort allows kafka cluster access without specifying the exact broker
	// If not defined, 29092 will be used for external clients to reach the kafka cluster
	AnyCastPort *int32 `json:"anyCastPort,omitempty"`
	// +kubebuilder:validation:Minimum=1024
	// +kubebuilder:validation:Maximum=65535
	// +optional
	// IngressControllerTargetPort defines the container port that the ingress controller uses for handling external traffic.
	// If not defined, 29092 will be used as the default IngressControllerTargetPort value.
	IngressControllerTargetPort *int32 `json:"ingressControllerTargetPort,omitempty"`
	// +kubebuilder:validation:Enum=LoadBalancer;NodePort
	// accessMethod defines the method which the external listener is exposed through.
	// Two types are supported LoadBalancer and NodePort.
	// The recommended and default is the LoadBalancer.
	// NodePort should be used in Kubernetes environments with no support for provisioning Load Balancers.
	// +optional
	AccessMethod corev1.ServiceType `json:"accessMethod,omitempty"`
	// Config allows to specify ingress controller configuration per external listener
	// if set, it overrides the default `KafkaClusterSpec.IstioIngressConfig` or `KafkaClusterSpec.EnvoyConfig` for this external listener.
	// +optional
	Config *Config `json:"config,omitempty"`
}

type ExternalListenerConfigNames []string

type GracefulActionState struct {
	// CruiseControlState holds the information about graceful action state
	CruiseControlState CruiseControlState `json:"cruiseControlState"`
	// CruiseControlOperationReference refers to the created CruiseControlOperation to execute a CC task
	CruiseControlOperationReference *corev1.LocalObjectReference `json:"cruiseControlOperationReference,omitempty"`
	// VolumeStates holds the information about the CC disk rebalance states and CruiseControlOperation reference
	VolumeStates map[string]VolumeState `json:"volumeStates,omitempty"`
}

type IngressConfig struct {
	IngressServiceSettings `json:",inline"`
	IstioIngressConfig     *IstioIngressConfig `json:"istioIngressConfig,omitempty"`
	EnvoyConfig            *EnvoyConfig        `json:"envoyConfig,omitempty"`
}

type IngressServiceSettings struct {
	// In case of external listeners using LoadBalancer access method the value of this field is used to advertise the
	// Kafka broker external listener instead of the public IP of the provisioned LoadBalancer service (e.g. can be used to
	// advertise the listener using a URL recorded in DNS instead of public IP).
	// In case of external listeners using NodePort access method the broker instead of node public IP (see "brokerConfig.nodePortExternalIP")
	// is advertised on the address having the following format: <kafka-cluster-name>-<broker-id>.<namespace><value-specified-in-hostnameOverride-field>
	HostnameOverride string `json:"hostnameOverride,omitempty"`
	// ServiceAnnotations defines annotations which will
	// be placed to the service or services created for the external listener
	ServiceAnnotations map[string]string `json:"serviceAnnotations,omitempty"`
	// externalTrafficPolicy denotes if this Service desires to route external
	// traffic to node-local or cluster-wide endpoints. "Local" preserves the
	// client source IP and avoids a second hop for LoadBalancer and Nodeport
	// type services, but risks potentially imbalanced traffic spreading.
	// "Cluster" obscures the client source IP and may cause a second hop to
	// another node, but should have good overall load-spreading.
	// +optional
	ExternalTrafficPolicy corev1.ServiceExternalTrafficPolicyType `json:"externalTrafficPolicy,omitempty"`
	// Service Type string describes ingress methods for a service
	// Only "NodePort" and "LoadBalancer" is supported.
	// Default value is LoadBalancer
	ServiceType corev1.ServiceType `json:"serviceType,omitempty"`
}

type InternalListenerConfig struct {
	CommonListenerSpec              `json:",inline"`
	UsedForInnerBrokerCommunication bool `json:"usedForInnerBrokerCommunication"`
	UsedForControllerCommunication  bool `json:"usedForControllerCommunication,omitempty"`
}

type IstioControlPlaneReference struct {
	Name      string `json:"name"`
	Namespace string `json:"namespace"`
}

type IstioIngressConfig struct {
	Resources *corev1.ResourceRequirements `json:"resourceRequirements,omitempty"`
	// +kubebuilder:validation:Minimum=1
	Replicas     int32                `json:"replicas,omitempty"`
	NodeSelector map[string]string    `json:"nodeSelector,omitempty"`
	Tolerations  []*corev1.Toleration `json:"tolerations,omitempty"`
	// Annotations defines the annotations placed on the istio ingress controller deployment
	Annotations               map[string]string   `json:"annotations,omitempty"`
	TLSOptions                *v1beta1.TLSOptions `json:"gatewayConfig,omitempty"`
	VirtualServiceAnnotations map[string]string   `json:"virtualServiceAnnotations,omitempty"`
	// Envs allows to add additional env vars to the istio meshgateway resource
	Envs []*corev1.EnvVar `json:"envs,omitempty"`
	// If specified and supported by the platform, traffic through the
	// cloud-provider load-balancer will be restricted to the specified client
	// IPs. This field will be ignored if the
	// cloud-provider does not support the feature."
	// More info: https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/
	// +optional
	LoadBalancerSourceRanges []string `json:"loadBalancerSourceRanges,omitempty"`
}

type KafkaCluster struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   KafkaClusterSpec   `json:"spec,omitempty"`
	Status KafkaClusterStatus `json:"status,omitempty"`
}

type KafkaClusterList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []KafkaCluster `json:"items"`
}

type KafkaClusterSpec struct {
	HeadlessServiceEnabled bool            `json:"headlessServiceEnabled"`
	ListenersConfig        ListenersConfig `json:"listenersConfig"`
	// Custom ports to expose in the container. Example use case: a custom kafka distribution, that includes an integrated metrics api endpoint
	AdditionalPorts []corev1.ContainerPort `json:"additionalPorts,omitempty"`
	// ZKAddresses specifies the ZooKeeper connection string
	// in the form hostname:port where host and port are the host and port of a ZooKeeper server.
	ZKAddresses []string `json:"zkAddresses"`
	// ZKPath specifies the ZooKeeper chroot path as part
	// of its ZooKeeper connection string which puts its data under some path in the global ZooKeeper namespace.
	ZKPath                      string                  `json:"zkPath,omitempty"`
	RackAwareness               *RackAwareness          `json:"rackAwareness,omitempty"`
	ClusterImage                string                  `json:"clusterImage,omitempty"`
	ClusterMetricsReporterImage string                  `json:"clusterMetricsReporterImage,omitempty"`
	ReadOnlyConfig              string                  `json:"readOnlyConfig,omitempty"`
	ClusterWideConfig           string                  `json:"clusterWideConfig,omitempty"`
	BrokerConfigGroups          map[string]BrokerConfig `json:"brokerConfigGroups,omitempty"`
	Brokers                     []Broker                `json:"brokers"`
	DisruptionBudget            DisruptionBudget        `json:"disruptionBudget,omitempty"`
	RollingUpgradeConfig        RollingUpgradeConfig    `json:"rollingUpgradeConfig"`
	// +kubebuilder:validation:Enum=envoy;istioingress
	// IngressController specifies the type of the ingress controller to be used for external listeners. The `istioingress` ingress controller type requires the `spec.istioControlPlane` field to be populated as well.
	IngressController string `json:"ingressController,omitempty"`
	// IstioControlPlane is a reference to the IstioControlPlane resource for envoy configuration. It must be specified if istio ingress is used.
	IstioControlPlane *IstioControlPlaneReference `json:"istioControlPlane,omitempty"`
	// If true OneBrokerPerNode ensures that each kafka broker will be placed on a different node unless a custom
	// Affinity definition overrides this behavior
	OneBrokerPerNode bool `json:"oneBrokerPerNode"`
	// RemoveUnusedIngressResources when true, the unnecessary resources from the previous ingress state will be removed.
	// when false, they will be kept so the Kafka cluster remains available for those Kafka clients which are still using the previous ingress setting.
	// +kubebuilder:default=false
	// +optional
	RemoveUnusedIngressResources bool                `json:"removeUnusedIngressResources,omitempty"`
	PropagateLabels              bool                `json:"propagateLabels,omitempty"`
	CruiseControlConfig          CruiseControlConfig `json:"cruiseControlConfig"`
	EnvoyConfig                  EnvoyConfig         `json:"envoyConfig,omitempty"`
	MonitoringConfig             MonitoringConfig    `json:"monitoringConfig,omitempty"`
	AlertManagerConfig           *AlertManagerConfig `json:"alertManagerConfig,omitempty"`
	IstioIngressConfig           IstioIngressConfig  `json:"istioIngressConfig,omitempty"`
	// Envs defines environment variables for Kafka broker Pods.
	// Adding the "+" prefix to the name prepends the value to that environment variable instead of overwriting it.
	// Add the "+" suffix to append.
	Envs                    []corev1.EnvVar `json:"envs,omitempty"`
	KubernetesClusterDomain string          `json:"kubernetesClusterDomain,omitempty"`
	// ClientSSLCertSecret is a reference to the Kubernetes secret where custom client SSL certificate can be provided.
	// It will be used by the koperator, cruise control, cruise control metrics reporter
	// to communicate on SSL with that internal listener which is used for interbroker communication.
	// The client certificate must share the same chain of trust as the server certificate used by the corresponding internal listener.
	// The secret must contain the keystore, truststore jks files and the password for them in base64 encoded format
	// under the keystore.jks, truststore.jks, password data fields.
	ClientSSLCertSecret *corev1.LocalObjectReference `json:"clientSSLCertSecret,omitempty"`
}

type KafkaClusterStatus struct {
	BrokersState             map[string]BrokerState   `json:"brokersState,omitempty"`
	CruiseControlTopicStatus CruiseControlTopicStatus `json:"cruiseControlTopicStatus,omitempty"`
	State                    ClusterState             `json:"state"`
	RollingUpgrade           RollingUpgradeStatus     `json:"rollingUpgradeStatus,omitempty"`
	AlertCount               int                      `json:"alertCount"`
	ListenerStatuses         ListenerStatuses         `json:"listenerStatuses,omitempty"`
}

type KafkaVersion struct {
	// Version holds the current version of the broker in semver format
	Version string `json:"version,omitempty"`
	// Image specifies the current docker image of the broker
	Image string `json:"image,omitempty"`
}

type ListenerStatus struct {
	Name    string `json:"name"`
	Address string `json:"address"`
}

type ListenerStatusList []ListenerStatus

type ListenerStatuses struct {
	InternalListeners map[string]ListenerStatusList `json:"internalListeners,omitempty"`
	ExternalListeners map[string]ListenerStatusList `json:"externalListeners,omitempty"`
}

type ListenersConfig struct {
	ExternalListeners  []ExternalListenerConfig `json:"externalListeners,omitempty"`
	InternalListeners  []InternalListenerConfig `json:"internalListeners"`
	SSLSecrets         *SSLSecrets              `json:"sslSecrets,omitempty"`
	ServiceAnnotations map[string]string        `json:"serviceAnnotations,omitempty"`
}

type MonitoringConfig struct {
	JmxImage               string `json:"jmxImage,omitempty"`
	PathToJar              string `json:"pathToJar,omitempty"`
	KafkaJMXExporterConfig string `json:"kafkaJMXExporterConfig,omitempty"`
	CCJMXExporterConfig    string `json:"cCJMXExporterConfig,omitempty"`
}

type NetworkConfig struct {
	IncomingNetworkThroughPut string `json:"incomingNetworkThroughPut,omitempty"`
	OutgoingNetworkThroughPut string `json:"outgoingNetworkThroughPut,omitempty"`
}

type PKIBackend string

type PerBrokerConfigurationState string

type RackAwareness struct {
	Labels []string `json:"labels"`
}

type RackAwarenessState string

type RollingUpgradeConfig struct {
	// FailureThreshold controls how many failures the cluster can tolerate during a rolling upgrade. Once the number of
	// failures reaches this threshold a rolling upgrade flow stops. The number of failures is computed as the sum of
	// distinct broker replicas with either offline replicas or out of sync replicas and the number of alerts triggered by
	// alerts with 'rollingupgrade'
	FailureThreshold int `json:"failureThreshold"`

	// ConcurrentBrokerRestartCountPerRack controls how many brokers can be restarted in parallel during a rolling upgrade. If
	// it is set to a value greater than 1, the operator will restart up to that amount of brokers in parallel, if the
	// brokers are within the same rack (as specified by "broker.rack" in broker read-only configs). Since using Kafka broker
	// racks spreads out the replicas, we know that restarting multiple brokers in the same rack will not cause more than
	// 1/Nth of the replicas of a topic-partition to be unavailable at the same time, where N is the number of racks used.
	// This is a safe way to speed up the rolling upgrade. Note that for the rack distribution explained above, Cruise Control
	// requires `com.linkedin.kafka.cruisecontrol.analyzer.goals.RackAwareDistributionGoal` to be configured. Default value is 1.
	// +kubebuilder:validation:Minimum=1
	// +kubebuilder:default=1
	// +optional
	ConcurrentBrokerRestartCountPerRack int `json:"concurrentBrokerRestartCountPerRack,omitempty"`
}

type RollingUpgradeStatus struct {
	LastSuccess string `json:"lastSuccess"`
	// ErrorCount keeps track the number of errors reported by alerts labeled with 'rollingupgrade'.
	// It's reset once these alerts stop firing.
	ErrorCount int `json:"errorCount"`
}

type SSLClientAuthentication string

type SSLSecrets struct {
	TLSSecretName   string                  `json:"tlsSecretName"`
	JKSPasswordName string                  `json:"jksPasswordName,omitempty"`
	Create          bool                    `json:"create,omitempty"`
	IssuerRef       *cmmeta.ObjectReference `json:"issuerRef,omitempty"`
	// +kubebuilder:validation:Enum={"cert-manager"}
	PKIBackend PKIBackend `json:"pkiBackend,omitempty"`
}

type SecurityProtocol string

type StorageConfig struct {
	MountPath string `json:"mountPath"`

	// If set https://kubernetes.io/docs/concepts/storage/volumes/#persistentvolumeclaim is used
	// as storage for Kafka broker log dirs. Either `pvcSpec` or `emptyDir` has to be set.
	// When both `pvcSpec` and `emptyDir` fields are set
	// the `pvcSpec` is used by default.
	// +optional
	PvcSpec *corev1.PersistentVolumeClaimSpec `json:"pvcSpec,omitempty"`

	// If set https://kubernetes.io/docs/concepts/storage/volumes#emptydir is used
	// as storage for Kafka broker log dirs. The use of empty dir as Kafka broker storage is useful in development
	// environments where data loss is not a concern as data stored on emptydir backed storage is lost at pod restarts.
	// Either `pvcSpec` or `emptyDir` has to be set.
	// When both `pvcSpec` and `emptyDir` fields are set
	// the `pvcSpec` is used by default.
	// +optional
	EmptyDir *corev1.EmptyDirVolumeSource `json:"emptyDir,omitempty"`
}

type TopicConfig struct {
	Partitions int32 `json:"partitions"`
	// +kubebuilder:validation:Minimum=2
	ReplicationFactor int32 `json:"replicationFactor"`
}

type VolumeState struct {
	// CruiseControlVolumeState holds the information about CC disk rebalance state
	CruiseControlVolumeState CruiseControlVolumeState `json:"cruiseControlVolumeState"`
	// CruiseControlOperationReference refers to the created CruiseControlOperation to execute a CC task
	CruiseControlOperationReference *corev1.LocalObjectReference `json:"cruiseControlOperationReference,omitempty"`
}