v1alpha1

type AuthConfig struct {
	// Represents the configured identity provider
	// +optional
	Idp *string `json:"idp,omitempty"`
}

type AutomaticApprovalConfig struct {
	// Defines if the automatic approval is enabled or not
	// +optional
	Enabled *bool `json:"enabled,omitempty"`

	// Comma-separated email domains to consider for auto-approval.
	// For example: "domain.com,anotherdomain.org"
	// If domains is not set and enabled is true, it will default to auto approving all authenticated emails.
	// If domains is set and enabled is true, it will allow auto approving only for authenticated emails under
	// the domains entered. If enabled is false domains will be ignored.
	// +optional
	Domains *string `json:"domains,omitempty"`
}

type AutoscalerConfig struct {
	// Defines the flag that determines whether to deploy the autoscaler buffer
	// +optional
	Deploy *bool `json:"deploy,omitempty"`

	// Represents how much memory should be required by the autoscaler buffer
	// +optional
	BufferMemory *string `json:"bufferMemory,omitempty"`

	// Represents the number of autoscaler buffer replicas to request
	// +optional
	BufferReplicas *int `json:"bufferReplicas,omitempty"`
}

type BannedUser struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec BannedUserSpec `json:"spec,omitempty"`
}

type BannedUserList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []BannedUser `json:"items"`
}

type BannedUserSpec struct {

	// The e-mail address of the account that has been banned
	Email string `json:"email"`
}

type Binding struct {
	// MasterUserRecord is the name of the user that has access to the workspace.
	// This field is immutable via a validating webhook.
	MasterUserRecord string `json:"masterUserRecord,omitempty"`

	// Role is the role of the user in the current workspace. For example "admin" for the user that has all permissions on the current workspace.
	Role string `json:"role,omitempty"`

	// AvailableActions is a list of actions that can be performed on the binding.
	// Available values:
	// - "update" when the role in the current binding can be changed
	// - "delete" when the current binding can be deleted
	// - "override" when the current binding is inherited from a parent workspace, it cannot be updated, but it can be overridden by creating a new binding containing the same MasterUserRecord but different role in the subworkspace.
	// +listType=atomic
	// +optional
	AvailableActions []string `json:"availableActions,omitempty"`

	// BindingRequest provides the name and namespace of the SpaceBindingRequest that generated the SpaceBinding resource.
	// It's available only if the binding was generated using the SpaceBindingRequest mechanism.
	// +optional
	BindingRequest *BindingRequest `json:"bindingRequest,omitempty"`
}

type BindingRequest struct {
	// Name of the SpaceBindingRequest that generated the SpaceBinding resource.
	Name string `json:"name"`
	// Namespace of the SpaceBindingRequest that generated the SpaceBinding resource.
	Namespace string `json:"namespace"`
}

type CaptchaConfig struct {
	// Enabled specifies whether the captcha verification feature is enabled or not
	// +optional
	Enabled *bool `json:"enabled,omitempty"`

	// ScoreThreshold defines the captcha assessment score threshold. A score equal to or above the threshold means the user is most likely human and
	// can proceed signing up but a score below the threshold means the score is suspicious and further verification may be required.
	// +optional
	ScoreThreshold *string `json:"scoreThreshold,omitempty"`

	// RequiredScore defines the lowest captcha score, below this score the user cannot proceed with the signup process at all.
	// Users with captcha score lower than the required one can still be approved manually.
	// +optional
	RequiredScore *string `json:"requiredScore,omitempty"`

	// AllowLowScoreReactivation specifies whether the reactivation for users with low captcha score (below the RequiredScore) is enabled without the need for manual approval.
	// +optional
	AllowLowScoreReactivation *bool `json:"allowLowScoreReactivation,omitempty"`

	// SiteKey defines the recaptcha site key to use when making recaptcha requests. There can be different ones for different environments. eg. dev, stage, prod
	// +optional
	SiteKey *string `json:"siteKey,omitempty"`

	// ProjectID defines the GCP project ID that has the recaptcha service enabled.
	// +optional
	ProjectID *string `json:"projectID,omitempty"`
}

type CheConfig struct {
	// Defines the Che/CRW Keycloak route name
	// +optional
	KeycloakRouteName *string `json:"keycloakRouteName,omitempty"`

	// Defines the Che/CRW route name
	// +optional
	RouteName *string `json:"routeName,omitempty"`

	// Defines the Che/CRW operator namespace
	// +optional
	Namespace *string `json:"namespace,omitempty"`

	// Defines a flag that indicates whether the Che/CRW operator is required to be installed on the cluster. May be used in monitoring.
	// +optional
	Required *bool `json:"required,omitempty"`

	// Defines a flag to turn the Che user deletion logic on/off
	// +optional
	UserDeletionEnabled *bool `json:"userDeletionEnabled,omitempty"`

	// Defines all secrets related to Che configuration
	// +optional
	Secret CheSecret `json:"secret,omitempty"`
}

type CheSecret struct {
	// The reference to the secret that is expected to contain the keys below
	// +optional
	ToolchainSecret `json:",inline"`

	// The key for the Che admin username in the secret values map
	// +optional
	CheAdminUsernameKey *string `json:"cheAdminUsernameKey,omitempty"`

	// The key for the Che admin password in the secret values map
	// +optional
	CheAdminPasswordKey *string `json:"cheAdminPasswordKey,omitempty"`
}

type CheStatus struct {
	// Conditions is an array of current Che status conditions
	// Supported condition types: ConditionReady
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`
}

type Cluster struct {
	// Name is the name of the corresponding ToolchainCluster resource
	Name string `json:"name"`
}

type Condition struct {
	// Type of condition
	Type ConditionType `json:"type"`
	// Status of the condition, one of True, False, Unknown.
	Status corev1.ConditionStatus `json:"status"`
	// Last time the condition transit from one status to another.
	// +optional
	LastTransitionTime metav1.Time `json:"lastTransitionTime,omitempty"`
	// (brief) reason for the condition's last transition.
	// +optional
	Reason string `json:"reason,omitempty"`
	// Human readable message indicating details about last transition.
	// +optional
	Message string `json:"message,omitempty"`
	// Last time the condition was updated
	// +optional
	LastUpdatedTime *metav1.Time `json:"lastUpdatedTime,omitempty"`
}

type ConditionType string

type ConsoleConfig struct {
	// Defines the console route namespace
	// +optional
	Namespace *string `json:"namespace,omitempty"`

	// Defines the console route name
	// +optional
	RouteName *string `json:"routeName,omitempty"`
}

type DeactivationConfig struct {
	// DeactivatingNotificationDays is the number of days after a pre-deactivating notification is sent that actual
	// deactivation occurs.  If this parameter is set to zero, then there will be no delay
	// +optional
	DeactivatingNotificationDays *int `json:"deactivatingNotificationDays,omitempty"`

	// DeactivationDomainsExcluded is a string of comma-separated domains that should be excluded from automatic user deactivation
	// For example: "@redhat.com,@ibm.com"
	// +optional
	DeactivationDomainsExcluded *string `json:"deactivationDomainsExcluded,omitempty"`

	// UserSignupDeactivatedRetentionDays is used to configure how many days we should keep deactivated UserSignup
	// resources before deleting them.  This parameter value should reflect an extended period of time sufficient for
	// gathering user metrics before removing the resources from the cluster.
	// +optional
	UserSignupDeactivatedRetentionDays *int `json:"userSignupDeactivatedRetentionDays,omitempty"`

	// UserSignupUnverifiedRetentionDays is used to configure how many days we should keep unverified (i.e. the user
	// hasn't completed the user verification process via the registration service) UserSignup resources before deleting
	// them.  It is intended for this parameter to define an aggressive cleanup schedule for unverified user signups,
	// and the default configuration value for this parameter reflects this.
	// +optional
	UserSignupUnverifiedRetentionDays *int `json:"userSignupUnverifiedRetentionDays,omitempty"`
}

type DevSpaces struct {
	// SegmentWriteKey specifies the segment write key
	// +optional
	SegmentWriteKey *string `json:"segmentWriteKey,omitempty"`
}

type GitHubSecret struct {
	// The reference to the secret that is expected to contain the keys below
	// +optional
	ToolchainSecret `json:",inline"`

	// The key for the GitHub Access token in the secret values map
	// +optional
	AccessTokenKey *string `json:"accessTokenKey,omitempty"`
}

type HostConfig struct {
	// Environment specifies the host-operator environment such as prod, stage, unit-tests, e2e-tests, dev, etc
	// +optional
	Environment *string `json:"environment,omitempty"`

	// Keeps parameters necessary for automatic approval
	// +optional
	AutomaticApproval AutomaticApprovalConfig `json:"automaticApproval,omitempty"`

	// Keeps parameters concerned with user deactivation
	// +optional
	Deactivation DeactivationConfig `json:"deactivation,omitempty"`

	// Keeps parameters concerned with metrics
	// +optional
	Metrics MetricsConfig `json:"metrics,omitempty"`

	// Keeps parameters concerned with notifications
	// +optional
	Notifications NotificationsConfig `json:"notifications,omitempty"`

	// Keeps parameters necessary for the registration service
	// +optional
	RegistrationService RegistrationServiceConfig `json:"registrationService,omitempty"`

	// Keeps parameters concerned with tiers
	// +optional
	Tiers TiersConfig `json:"tiers,omitempty"`

	// Keeps parameters concerned with the toolchainstatus
	// +optional
	ToolchainStatus ToolchainStatusConfig `json:"toolchainStatus,omitempty"`

	// Keeps parameters concerned with user management
	// +optional
	Users UsersConfig `json:"users,omitempty"`

	// Keeps parameters necessary for configuring Space provisioning functionality
	// +optional
	SpaceConfig SpaceConfig `json:"spaceConfig,omitempty"`
}

type HostOperatorStatus struct {

	// The version of the operator
	Version string `json:"version"`

	// The commit id from the host-operator repository used to build the operator
	Revision string `json:"revision"`

	// The timestamp of the host operator build
	BuildTimestamp string `json:"buildTimestamp"`

	// The status of the host operator's deployment
	DeploymentName string `json:"deploymentName"`

	// Conditions is an array of current host operator status conditions
	// Supported condition types: ConditionReady
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`

	// The status of the revision check for host operator's deployment
	// +optional
	RevisionCheck RevisionCheck `json:"revisionCheck"`
}

type HostRegistrationServiceStatus struct {

	// Deployment is the status of the registration service's deployment
	Deployment RegistrationServiceDeploymentStatus `json:"deployment"`

	// RegistrationServiceResources is the status for resources created for the registration service
	RegistrationServiceResources RegistrationServiceResourcesStatus `json:"registrationServiceResources"`

	// Health provides health status of the registration service
	Health RegistrationServiceHealth `json:"health"`

	// The status of the revision check for registration service
	// +optional
	RevisionCheck RevisionCheck `json:"revisionCheck"`
}

type HostRoutes struct {
	// ProxyURL is the Proxy URL of the cluster
	// +optional
	ProxyURL string `json:"proxyURL,omitempty"`

	// Conditions is an array of current member operator status conditions
	// Supported condition types: ConditionReady
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`
}

type HostStatus struct {

	// Conditions is an array of current member operator status conditions
	// Supported condition types: ConditionReady
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`
}

type IdentityClaimsEmbedded struct {

	// PropagatedClaims
	PropagatedClaims `json:",inline"`

	// PreferredUsername contains the user's username
	PreferredUsername string `json:"preferredUsername"`

	// GivenName contains the value of the 'given_name' claim
	// +optional
	GivenName string `json:"givenName,omitempty"`

	// FamilyName contains the value of the 'family_name' claim
	// +optional
	FamilyName string `json:"familyName,omitempty"`

	// Company contains the value of the 'company' claim
	// +optional
	Company string `json:"company,omitempty"`
}

type Idler struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   IdlerSpec   `json:"spec,omitempty"`
	Status IdlerStatus `json:"status,omitempty"`
}

type IdlerList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Idler `json:"items"`
}

type IdlerSpec struct {

	// TimeoutSeconds is the number of seconds before the running pods will be deleted
	TimeoutSeconds int32 `json:"timeoutSeconds"`
}

type IdlerStatus struct {

	// Pods is an array of tracked pods
	// +optional
	// +patchMergeKey=name
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=name
	Pods []Pod `json:"pods,omitempty" patchStrategy:"merge" patchMergeKey:"name"`

	// Conditions is an array of current Idler conditions
	// Supported condition types: ConditionReady
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`
}

type LocalSecretReference struct {
	// Name of a secret within the enclosing
	// namespace
	Name string `json:"name"`
}

type MasterUserRecord struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   MasterUserRecordSpec   `json:"spec,omitempty"`
	Status MasterUserRecordStatus `json:"status,omitempty"`
}

type MasterUserRecordList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []MasterUserRecord `json:"items"`
}

type MasterUserRecordSpec struct {

	// If set to true then the corresponding user should not be able to login (but the underlying UserAccounts still exists)
	// "false" is assumed by default
	// +optional
	Disabled bool `json:"disabled,omitempty"`

	// The list of user accounts in the member clusters which belong to this MasterUserRecord
	// +listType=map
	// +listMapKey=targetCluster
	UserAccounts []UserAccountEmbedded `json:"userAccounts,omitempty"`

	// TierName is an optional property introduced to retain the name of the tier
	// for which the Dev Sandbox user is provisioned, so we can still deal with deactivation
	// once the NSTemplateSet field has been removed from `[]spec.UserAccounts`
	// temporarily marked as optional until the migration took place (CRT-1321)
	// +optional
	TierName string `json:"tierName,omitempty"`

	// PropagatedClaims contains a selection of claim values from the SSO Identity Provider which are intended to
	// be "propagated" down the resource dependency chain
	// +optional
	PropagatedClaims PropagatedClaims `json:"propagatedClaims,omitempty"`
}

type MasterUserRecordStatus struct {

	// Conditions is an array of current Master User Record conditions
	// Supported condition types:
	// Provisioning, UserAccountNotReady and Ready
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`

	// The status of user accounts in the member clusters which belong to this MasterUserRecord
	// +listType=atomic
	UserAccounts []UserAccountStatusEmbedded `json:"userAccounts,omitempty"`

	// The timestamp when the user was provisioned
	// +optional
	ProvisionedTime *metav1.Time `json:"provisionedTime,omitempty"`
}

type Member struct {
	// APIEndpoint is the server API URL of the cluster
	// +optional
	APIEndpoint string `json:"apiEndpoint,omitempty"`

	// The cluster identifier
	ClusterName string `json:"clusterName"`

	// Number of Spaces created within the member cluster
	// +optional
	SpaceCount int `json:"spaceCount,omitempty"`

	// The array of member status objects
	MemberStatus MemberStatusStatus `json:"memberStatus"`
}

type MemberOperatorConfig struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   MemberOperatorConfigSpec   `json:"spec,omitempty"`
	Status MemberOperatorConfigStatus `json:"status,omitempty"`
}

type MemberOperatorConfigList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []MemberOperatorConfig `json:"items"`
}

type MemberOperatorConfigSpec struct {
	// Keeps parameters concerned with authentication
	// +optional
	Auth AuthConfig `json:"auth,omitempty"`

	// Keeps parameters concerned with the autoscaler
	// +optional
	Autoscaler AutoscalerConfig `json:"autoscaler,omitempty"`

	// Keeps parameters concerned with Che/CRW
	// +optional
	Che CheConfig `json:"che,omitempty"`

	// Keeps parameters concerned with the console
	// +optional
	Console ConsoleConfig `json:"console,omitempty"`

	// Environment specifies the member-operator environment such as prod, stage, unit-tests, e2e-tests, dev, etc
	// +optional
	Environment *string `json:"environment,omitempty"`

	// Defines the flag that determines whether User and Identity resources should be created for a UserAccount
	// +optional
	SkipUserCreation *bool `json:"skipUserCreation,omitempty"`

	// Keeps parameters concerned with member status
	// +optional
	MemberStatus MemberStatusConfig `json:"memberStatus,omitempty"`

	// Keeps parameters concerned with the toolchaincluster
	// +optional
	ToolchainCluster ToolchainClusterConfig `json:"toolchainCluster,omitempty"`

	// Keeps parameters concerned with the webhook
	// +optional
	Webhook WebhookConfig `json:"webhook,omitempty"`

	// WebConsolePlugin is used to configure the Web Console Plugin parameters
	// +optional
	WebConsolePlugin WebConsolePlugin `json:"webConsolePlugin,omitempty"`
}

type MemberOperatorConfigStatus struct {
}

type MemberOperatorStatus struct {

	// The version of the operator
	Version string `json:"version"`

	// The commit id from the member-operator repository used to build the operator
	Revision string `json:"revision"`

	// The timestamp of the member operator build
	BuildTimestamp string `json:"buildTimestamp"`

	// The status of the member operator's deployment
	DeploymentName string `json:"deploymentName"`

	// Conditions is an array of current member operator status conditions
	// Supported condition types: ConditionReady
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`

	// The status of the revision check for member operator's deployment
	// +optional
	RevisionCheck RevisionCheck `json:"revisionCheck"`
}

type MemberStatus struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   MemberStatusSpec   `json:"spec,omitempty"`
	Status MemberStatusStatus `json:"status,omitempty"`
}

type MemberStatusConfig struct {
	// Defines the period between refreshes of the member status
	// +optional
	RefreshPeriod *string `json:"refreshPeriod,omitempty"`

	// Defines all secrets related to GitHub authentication/integration
	// +optional
	GitHubSecret GitHubSecret `json:"gitHubSecret,omitempty"`
}

type MemberStatusList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []MemberStatus `json:"items"`
}

type MemberStatusSpec struct {
}

type MemberStatusStatus struct {

	// Che is the status of Che/CRW, such as installed and whether the member configuration is correct
	// +optional
	Che *CheStatus `json:"che,omitempty"`

	// MemberOperator is the status of a toolchain member operator
	// +optional
	MemberOperator *MemberOperatorStatus `json:"memberOperator,omitempty"`

	// HostConnection is the status of the connection with the host cluster
	// +optional
	HostConnection *ToolchainClusterStatus `json:"hostConnection,omitempty"`

	// Host is the status of the connection with the host cluster
	// +optional
	Host *HostStatus `json:"host,omitempty"`

	// Conditions is an array of current toolchain status conditions
	// Supported condition types: ConditionReady
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`

	// Resource usage of the cluster
	// +optional
	ResourceUsage ResourceUsage `json:"resourceUsage,omitempty"`

	// Routes/URLs of the cluster, such as Console and Che Dashboard URLs
	// +optional
	Routes *Routes `json:"routes,omitempty"`
}

type Members struct {
	// Defines default configuration to be applied to all member clusters
	// +optional
	Default MemberOperatorConfigSpec `json:"default,omitempty"`

	// A map of cluster-specific member operator configurations indexed by member toolchaincluster name
	// +optional
	// +mapType=atomic
	SpecificPerMemberCluster map[string]MemberOperatorConfigSpec `json:"specificPerMemberCluster,omitempty"`
}

type Metric map[string]int

type MetricsConfig struct {
	// ForceSynchronization is a flag used to trigger synchronization of the metrics
	// based on the resources rather than on the content of `ToolchainStatus.status.metrics`
	// +optional
	ForceSynchronization *bool `json:"forceSynchronization,omitempty"`
}

type NSTemplateSet struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   NSTemplateSetSpec   `json:"spec,omitempty"`
	Status NSTemplateSetStatus `json:"status,omitempty"`
}

type NSTemplateSetClusterResources struct {

	// TemplateRef The name of the TierTemplate resource which exists in the host cluster and which contains the template to use
	TemplateRef string `json:"templateRef"`
}

type NSTemplateSetList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []NSTemplateSet `json:"items"`
}

type NSTemplateSetNamespace struct {

	// TemplateRef The name of the TierTemplate resource which exists in the host cluster and which contains the template to use
	TemplateRef string `json:"templateRef"`
}

type NSTemplateSetSpaceRole struct {

	// TemplateRef The name of the TierTemplate resource which exists in the host cluster and which contains the template to use
	TemplateRef string `json:"templateRef"`

	// Usernames the usernames to which the template applies
	// +listType=atomic
	Usernames []string `json:"usernames"`
}

type NSTemplateSetSpec struct {

	// The name of the tier represented by this template set
	TierName string `json:"tierName"`

	// The namespace templates
	// +listType=atomic
	Namespaces []NSTemplateSetNamespace `json:"namespaces"`

	// the cluster resources template (for cluster-wide quotas, etc.)
	// +optional
	ClusterResources *NSTemplateSetClusterResources `json:"clusterResources,omitempty"`

	// the role template and the users to whom the templates should be applied to
	// +optional
	// +listType=atomic
	SpaceRoles []NSTemplateSetSpaceRole `json:"spaceRoles,omitempty"`
}

type NSTemplateSetStatus struct {
	// ProvisionedNamespaces is a list of Namespaces that were provisioned by the NSTemplateSet.
	// +optional
	// +listType=atomic
	ProvisionedNamespaces []SpaceNamespace `json:"provisionedNamespaces,omitempty"`

	// Conditions is an array of current NSTemplateSet conditions
	// Supported condition types: ConditionReady
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`
}

type NSTemplateTier struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   NSTemplateTierSpec   `json:"spec,omitempty"`
	Status NSTemplateTierStatus `json:"status,omitempty"`
}

type NSTemplateTierClusterResources struct {
	// TemplateRef The name of the TierTemplate resource which exists in the host cluster and which contains the template to use
	TemplateRef string `json:"templateRef"`
}

type NSTemplateTierHistory struct {
	// StartTime is the time when the NSTemplateTier was updated
	StartTime metav1.Time `json:"startTime"`
	// Hash the hash matching on the templateRefs in the resource spec
	Hash string `json:"hash"`
	// CompletionTime is the time when the last MasterUserRecord was updated
	// +optional
	CompletionTime *metav1.Time `json:"completionTime,omitempty"`
	// Failures is the number of MasterUserRecords which failed to be updated
	Failures int `json:"failures"`
	// FailedAccounts
	// +optional
	FailedAccounts []string `json:"failedAccounts,omitempty"`
}

type NSTemplateTierList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []NSTemplateTier `json:"items"`
}

type NSTemplateTierNamespace struct {
	// TemplateRef The name of the TierTemplate resource which exists in the host cluster and which contains the template to use
	TemplateRef string `json:"templateRef"`
}

type NSTemplateTierSpaceRole struct {
	// TemplateRef The name of the TierTemplate resource which exists in the host cluster and which contains the template to use
	TemplateRef string `json:"templateRef"`
}

type NSTemplateTierSpec struct {

	// The namespace templates
	// +listType=atomic
	Namespaces []NSTemplateTierNamespace `json:"namespaces"`

	// the cluster resources template (for cluster-wide quotas, etc.)
	// +optional
	ClusterResources *NSTemplateTierClusterResources `json:"clusterResources,omitempty"`

	// the templates to set the spaces roles, indexed by role
	// +optional
	// +mapType=atomic
	SpaceRoles map[string]NSTemplateTierSpaceRole `json:"spaceRoles,omitempty"`

	// SpaceRequestConfig stores all the configuration related to the Space Request feature
	// +optional
	SpaceRequestConfig *SpaceRequestConfig `json:"spaceRequestConfig,omitempty"`
}

type NSTemplateTierStatus struct {

	// Conditions is an array of current NSTemplateTier conditions
	// Supported condition types: ConditionReady
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`

	// Updates is an array of all NSTemplateTier updates
	// +optional
	// +patchMergeKey=startTime
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=startTime
	Updates []NSTemplateTierHistory `json:"updates,omitempty" patchStrategy:"merge" patchMergeKey:"startTime"`
}

type NamespaceAccess struct {
	// Name is the corresponding name of the provisioned namespace
	Name string `json:"name"`
	// SecretRef is the name of the secret with a SA token that has admin-like
	// (or whatever we set in the tier template) permissions in the namespace
	SecretRef string `json:"secretRef"`
}

type Notification struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   NotificationSpec   `json:"spec,omitempty"`
	Status NotificationStatus `json:"status,omitempty"`
}

type NotificationList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Notification `json:"items"`
}

type NotificationSecret struct {
	// The reference to the secret that is expected to contain the keys below
	// +optional
	ToolchainSecret `json:",inline"`

	// The key for the host operator mailgun domain used for creating an instance of mailgun
	// +optional
	MailgunDomain *string `json:"mailgunDomain,omitempty"`

	// The key for the host operator mailgun api key used for creating an instance of mailgun
	// +optional
	MailgunAPIKey *string `json:"mailgunAPIKey,omitempty"`

	// The key for the host operator mailgun senders email
	// +optional
	MailgunSenderEmail *string `json:"mailgunSenderEmail,omitempty"`

	// The key for the reply-to email address that will be set in sent notifications
	// +optional
	MailgunReplyToEmail *string `json:"mailgunReplyToEmail,omitempty"`
}

type NotificationSpec struct {

	// UserID is the user ID from RHD Identity Provider token (“sub” claim).  The UserID is used by
	// the notification service (i.e. the NotificationController) to lookup the UserSignup resource for the user,
	// and extract from it the values required to generate the notification content and to deliver the notification
	// Deprecated: replaced by Context
	// +optional
	UserID string `json:"userID,omitempty"`

	// Recipient is used to specify the email address where the notification will be delivered.  It must comply with
	// section 3.4.1 of RFC2822, and should be formatted to include the user's first and last names,
	// e.g. "John Smith <jsmith@example.com>"
	Recipient string `json:"recipient,omitempty"`

	// Context is used to set a number of arbitrary values to be passed to the notification content text formatter,
	// for inclusion in the body of the notification.
	// +optional
	Context map[string]string `json:"context,omitempty"`

	// Template is the name of the NotificationTemplate resource that will be used to generate the notification
	Template string `json:"template,omitempty"`

	// Subject is used when no template value is specified, in cases where the complete notification subject is
	// specified at notification creation time
	Subject string `json:"subject,omitempty"`

	// Content is used when no template value is specified, in cases where the complete notification content is
	// specified at notification creation time
	Content string `json:"content,omitempty"`
}

type NotificationStatus struct {

	// Conditions is an array of current Notification conditions
	// Supported condition types:
	// Sent
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`
}

type NotificationsConfig struct {
	// NotificationDeliveryService is notification delivery service to use for notifications
	// +optional
	NotificationDeliveryService *string `json:"notificationDeliveryService,omitempty"`

	// DurationBeforeNotificationDeletion is notification delivery service to use for notifications
	// +optional
	DurationBeforeNotificationDeletion *string `json:"durationBeforeNotificationDeletion,omitempty"`

	// The administrator email address for system notifications
	// +optional
	AdminEmail *string `json:"adminEmail,omitempty"`

	// TemplateSetName defines the set of notification templates. Different Sandbox instances can use different notification templates. For example Dev Sandbox and AppStudio instances use different templates. By default, the "sandbox" template set name is used.
	// +optional
	TemplateSetName *string `json:"templateSetName,omitempty"`

	// Defines all secrets related to notification configuration
	// +optional
	Secret NotificationSecret `json:"secret,omitempty"`
}

type OpenShiftRouteTarget struct {
	Namespace string `json:"namespace"`
	Name      string `json:"name"`
}

type Pod struct {
	Name      string      `json:"name"`
	StartTime metav1.Time `json:"startTime"`
}

type PropagatedClaims struct {
	// Sub contains the value of the 'sub' claim
	Sub string `json:"sub"`

	// UserID contains the value of the 'user_id' claim
	// +optional
	UserID string `json:"userID,omitempty"`

	// AccountID contains the value of the 'account_id' claim
	// +optional
	AccountID string `json:"accountID,omitempty"`

	// OriginalSub is an optional property temporarily introduced for the purpose of migrating the users to
	// a new IdP provider client, and contains the user's "original-sub" claim
	// +optional
	OriginalSub string `json:"originalSub,omitempty"`

	// Email contains the user's email address
	Email string `json:"email"`
}

type ProxyPlugin struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ProxyPluginSpec   `json:"spec,omitempty"`
	Status ProxyPluginStatus `json:"status,omitempty"`
}

type ProxyPluginList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ProxyPlugin `json:"items"`
}

type ProxyPluginSpec struct {

	// OpenShiftRouteTargetEndpoint is an optional field that represents the look up information for an OpenShift Route
	// as the endpoint for the registration service to proxy requests to that have the https://<proxy-host>/plugins/<ProxyPlugin.ObjectMeta.Name>
	// in its incoming URL.  As we add more types besides OpenShift Routes, we will add more optional fields to this spec
	// object
	// +optional
	OpenShiftRouteTargetEndpoint *OpenShiftRouteTarget `json:"openShiftRouteTargetEndpoint,omitempty"`
}

type ProxyPluginStatus struct {

	// Conditions is an array of current Proxy Plugin conditions
	// Supported condition types: ConditionReady
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`
}

type RegistrationServiceAnalyticsConfig struct {
	// DevSpaces contains the analytics configuration parameters for devspaces
	// +optional
	DevSpaces DevSpaces `json:"devSpaces,omitempty"`

	// SegmentWriteKey specifies the segment write key for sandbox
	// +optional
	SegmentWriteKey *string `json:"segmentWriteKey,omitempty"`
}

type RegistrationServiceAuthConfig struct {
	// AuthClientLibraryURL specifies the auth library location
	// +optional
	AuthClientLibraryURL *string `json:"authClientLibraryURL,omitempty"`

	// AuthClientConfigContentType specifies the auth config content type
	// +optional
	AuthClientConfigContentType *string `json:"authClientConfigContentType,omitempty"`

	// AuthClientConfigRaw specifies the URL used to access the registration service
	// +optional
	AuthClientConfigRaw *string `json:"authClientConfigRaw,omitempty"`

	// AuthClientPublicKeysURL specifies the public keys URL
	// +optional
	AuthClientPublicKeysURL *string `json:"authClientPublicKeysURL,omitempty"`

	// SSOBaseURL specifies the SSO base URL such as https://sso.redhat.com
	// +optional
	SSOBaseURL *string `json:"ssoBaseURL,omitempty"`

	// SSORealm specifies the SSO realm name
	// +optional
	SSORealm *string `json:"ssoRealm,omitempty"`
}

type RegistrationServiceConfig struct {
	// Keeps parameters necessary for the registration service analytics config
	// +optional
	Analytics RegistrationServiceAnalyticsConfig `json:"analytics,omitempty"`

	// Keeps parameters necessary for the registration service authentication config
	// +optional
	Auth RegistrationServiceAuthConfig `json:"auth,omitempty"`

	// Environment specifies the environment such as prod, stage, unit-tests, e2e-tests, dev, etc
	// +optional
	Environment *string `json:"environment,omitempty"`

	// LogLevel specifies the logging level
	// +optional
	LogLevel *string `json:"logLevel,omitempty"`

	// Namespace specifies the namespace in which the registration service and host operator is running
	// Consumed by host operator and set as env var on registration-service deployment
	// +optional
	Namespace *string `json:"namespace,omitempty"`

	// RegistrationServiceURL is the URL used to a ccess the registration service
	// +optional
	RegistrationServiceURL *string `json:"registrationServiceURL,omitempty"`

	// Replicas specifies the number of replicas to use for the registration service deployment
	// +optional
	Replicas *int32 `json:"replicas,omitempty"`

	// Keeps parameters necessary for the registration service verification config
	// +optional
	Verification RegistrationServiceVerificationConfig `json:"verification,omitempty"`
}

type RegistrationServiceDeploymentStatus struct {
	// The host operator deployment name
	Name string `json:"name"`

	// Conditions is an array of current deployment status conditions for a host operator
	// Supported condition types: Available, Progressing
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`
}

type RegistrationServiceHealth struct {
	Alive       string `json:"alive"`
	BuildTime   string `json:"buildTime"`
	Environment string `json:"environment"`
	Revision    string `json:"revision"`
	StartTime   string `json:"startTime"`

	// Conditions is an array of status conditions for the health of the registration service
	// Supported condition types: ConditionReady
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`
}

type RegistrationServiceResourcesStatus struct {
	// Conditions is an array of current registration service resource status conditions
	// Supported condition types: Deployed, Deploying, DeployingFailed
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`
}

type RegistrationServiceVerificationConfig struct {
	// Defines all secrets related to the registration service verification configuration
	// +optional
	Secret RegistrationServiceVerificationSecret `json:"secret,omitempty"`

	// VerificationEnabled specifies whether verification is enabled or not
	// Verification enablement works in the following way:
	//   1. verification.enabled == false
	//      No verification during the signup process at all. (no phone, no captcha)
	//   2. verification.enabled == true && verification.captcha.enabled == true
	//      Captcha is enabled and will bypass phone verification if the score is above the threshold but if the score is
	//      below the threshold then phone verification kicks in.
	//   3. verification.enabled == true && verification.captcha.enabled == false
	//      Only phone verification is effect.
	// +optional
	Enabled *bool `json:"enabled,omitempty"`

	// Captcha defines any configuration related to captcha verification
	// +optional
	Captcha CaptchaConfig `json:"captcha,omitempty"`

	// VerificationDailyLimit specifies the number of times a user may initiate a phone verification request within a
	// 24 hour period
	// +optional
	DailyLimit *int `json:"dailyLimit,omitempty"`

	// VerificationAttemptsAllowed specifies the number of times a user may attempt to correctly enter a verification code,
	// if they fail then they must request another code
	// +optional
	AttemptsAllowed *int `json:"attemptsAllowed,omitempty"`

	// VerificationMessageTemplate specifies the message template used to generate the content sent to users via SMS for
	// phone verification
	// +optional
	MessageTemplate *string `json:"messageTemplate,omitempty"`

	// VerificationExcludedEmailDomains specifies the list of email address domains for which phone verification
	// is not required
	// +optional
	ExcludedEmailDomains *string `json:"excludedEmailDomains,omitempty"`

	// VerificationCodeExpiresInMin specifies an int representing the number of minutes before a verification code should
	// be expired
	// +optional
	CodeExpiresInMin *int `json:"codeExpiresInMin,omitempty"`

	// NotificationSender is used to specify which service should be used to send verification notifications. Allowed
	// values are "twilio", "aws".  If not specified, the Twilio sender will be used.
	// +optional
	NotificationSender *string `json:"notificationSender,omitempty"`

	// AWSRegion to use when sending notification SMS
	// +optional
	AWSRegion *string `json:"awsRegion,omitempty"`

	// AWSSenderID the Alphanumeric Sender ID to use, e.g. "DevSandbox"
	// +optional
	AWSSenderID *string `json:"awsSenderID,omitempty"`

	// AWSSMSType is the type of SMS message to send, either `Promotional` or `Transactional`
	// See https://docs.aws.amazon.com/sns/latest/dg/sms_publish-to-phone.html for details
	// +optional
	AWSSMSType *string `json:"awsSMSType,omitempty"`

	// TwilioSenderConfigs is an array of TwilioSenderConfig objects
	// +optional
	// +listType=atomic
	TwilioSenderConfigs []TwilioSenderConfig `json:"twilioSenderConfigs,omitempty"`
}

type RegistrationServiceVerificationSecret struct {
	// The reference to the secret that is expected to contain the keys below
	// +optional
	ToolchainSecret `json:",inline"`

	// TwilioAccountSID specifies the Twilio account identifier, used for sending phone verification messages
	// +optional
	TwilioAccountSID *string `json:"twilioAccountSID,omitempty"`

	// TwilioAuthToken specifies the Twilio authentication token, used for sending phone verification messages
	// +optional
	TwilioAuthToken *string `json:"twilioAuthToken,omitempty"`

	// TwilioFromNumber specifies the phone number or alphanumeric "Sender ID" for sending phone verification messages
	// +optional
	TwilioFromNumber *string `json:"twilioFromNumber,omitempty"`

	// AWSAccessKeyId is the AWS Access Key used to authenticate in order to access AWS services
	// +optional
	AWSAccessKeyID *string `json:"awsAccessKeyID,omitempty"`

	// AWSSecretAccessKey is the AWS credential used to authenticate in order to access AWS services
	// +optional
	AWSSecretAccessKey *string `json:"awsSecretAccessKey,omitempty"`

	// RecaptchaServiceAccountFile is the GCP service account file contents encoded in base64, it is
	// to be used with the recaptcha client for authentication
	// +optional
	RecaptchaServiceAccountFile *string `json:"recaptchaServiceAccountFile,omitempty"`
}

type ResourceUsage struct {
	// How many percent of the available memory is used per node role (eg. worker, master)
	// +optional
	MemoryUsagePerNodeRole map[string]int `json:"memoryUsagePerNodeRole,omitempty"`
}

type RevisionCheck struct {
	// Conditions is an array of status conditions for the health of the registration service
	// Supported condition types: ConditionReady
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`
}

type Routes struct {
	// ConsoleURL is the web console URL of the cluster
	// +optional
	ConsoleURL string `json:"consoleURL,omitempty"`

	// CheDashboardURL is the Che Dashboard URL of the cluster if Che is installed
	// +optional
	CheDashboardURL string `json:"cheDashboardURL,omitempty"`

	// Conditions is an array of current member operator status conditions
	// Supported condition types: ConditionReady
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`
}

type SocialEvent struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   SocialEventSpec   `json:"spec,omitempty"`
	Status SocialEventStatus `json:"status,omitempty"`
}

type SocialEventList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []SocialEvent `json:"items"`
}

type SocialEventSpec struct {

	// The timestamp from which users may register via this event's activation code
	StartTime metav1.Time `json:"startTime"`

	// The timestamp after which users may no longer register via this event's activation code
	EndTime metav1.Time `json:"endTime"`

	// An optional description that may be provided describing the purpose of the event
	// +optional
	Description string `json:"description,omitempty"`

	// The maximum number of attendees
	MaxAttendees int `json:"maxAttendees"`

	// The tier to assign to users registering for the event.
	// This must be the valid name of an nstemplatetier resource.
	UserTier string `json:"userTier"`

	// The tier to assign to spaces created for users who registered for the event.
	// This must be the valid name of an nstemplatetier resource.
	SpaceTier string `json:"spaceTier"`

	// If true, best effort is made to provision all attendees of the event on the same cluster
	// +optional
	PreferSameCluster bool `json:"preferSameCluster,omitempty"`

	// If true, the user will also be required to complete standard phone verification
	// +optional
	VerificationRequired bool `json:"verificationRequired,omitempty"`
}

type SocialEventStatus struct {

	// Conditions is an array of current SocialEventStatus conditions
	// Supported condition types:
	// Ready
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`

	ActivationCount int `json:"activationCount"`
}

type Space struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   SpaceSpec   `json:"spec,omitempty"`
	Status SpaceStatus `json:"status,omitempty"`
}

type SpaceBinding struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   SpaceBindingSpec   `json:"spec,omitempty"`
	Status SpaceBindingStatus `json:"status,omitempty"`
}

type SpaceBindingList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []SpaceBinding `json:"items"`
}

type SpaceBindingRequest struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   SpaceBindingRequestSpec   `json:"spec,omitempty"`
	Status SpaceBindingRequestStatus `json:"status,omitempty"`
}

type SpaceBindingRequestList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []SpaceBindingRequest `json:"items"`
}

type SpaceBindingRequestSpec struct {
	// MasterUserRecord is a required property introduced to retain the name of the MUR
	// for which this SpaceBinding is provisioned.
	MasterUserRecord string `json:"masterUserRecord"`

	// SpaceRole is a required property which defines the role that will be granted to the MUR in the current Space by the SpaceBinding resource.
	SpaceRole string `json:"spaceRole"`
}

type SpaceBindingRequestStatus struct {
	// Conditions is an array of SpaceBindingRequest conditions
	// Supported condition types:
	// Provisioning, SpaceBindingNotReady and Ready
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`
}

type SpaceBindingSpec struct {

	// The MasterUserRecord is a name of the MasterUserRecord this SpaceBinding belongs to.
	MasterUserRecord string `json:"masterUserRecord"`

	// The Space is a name of the Space this SpaceBinding is bound to.
	Space string `json:"space"`

	// The SpaceRole is a name of the SpaceRole that is granted to the user for the Space. For example: admin, view, ...
	SpaceRole string `json:"spaceRole"`
}

type SpaceBindingStatus struct {
}

type SpaceConfig struct {
	// SpaceRequestEnabled specifies whether the SpaceRequest controller should start or not.
	// This is specifically useful in order to enable/disable this functionality from configuration (e.g. disabled by default in Sandbox and enabled only for AppStudio stage/prod ...).
	// +optional
	SpaceRequestEnabled *bool `json:"spaceRequestEnabled,omitempty"`

	// SpaceBindingRequestEnabled specifies whether the SpaceBindingRequest controller should start or not.
	// This is specifically useful in order to enable/disable this functionality from configuration (e.g. disabled by default in Sandbox and enabled only for AppStudio stage/prod ...).
	// +optional
	SpaceBindingRequestEnabled *bool `json:"spaceBindingRequestEnabled,omitempty"`
}

type SpaceList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Space `json:"items"`
}

type SpaceNamespace struct {

	// Name the name of the namespace.
	// +optional
	Name string `json:"name,omitempty"`

	// Type the type of the namespace. eg. default
	// +optional
	Type string `json:"type,omitempty"`
}

type SpaceProvisionerCapacityThresholds struct {
	// MaxNumberOfSpaces is the maximum number of spaces that can be provisioned to the referenced cluster.
	//
	// 0 or undefined value means no limit.
	//
	// +kubebuilder:validation:Minimum=0
	// +optional
	MaxNumberOfSpaces uint `json:"maxNumberOfSpaces,omitempty"`
	// MaxMemoryUtilizationPercent is the maximum memory utilization of the cluster to permit provisioning
	// new spaces to it.
	//
	// 0 or undefined value means no limit.
	//
	// +kubebuilder:validation:Minimum=0
	// +kubebuilder:validation:Maximum=100
	// +optional
	MaxMemoryUtilizationPercent uint `json:"maxMemoryUtilizationPercent,omitempty"`
}

type SpaceProvisionerConfig struct {
	Spec              SpaceProvisionerConfigSpec   `json:"spec,omitempty"`
	Status            SpaceProvisionerConfigStatus `json:"status,omitempty"`
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
}

type SpaceProvisionerConfigList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []SpaceProvisionerConfig `json:"items"`
}

type SpaceProvisionerConfigSpec struct {
	// PlacementRoles is the list of roles, or flavors, that the provisioner possesses that influence
	// the space scheduling decisions.
	// +optional
	// +listType=set
	PlacementRoles []string `json:"placementRoles,omitempty"`

	// ToolchainCluster is the name of the ToolchainCluster CR of the member cluster that this config is for.
	ToolchainCluster string `json:"toolchainCluster"`

	// Enabled specifies whether the member cluster is enabled (and therefore can hold spaces) or not.
	// +optional
	// +kubebuilder:default=false
	Enabled bool `json:"enabled"`

	// CapacityThresholds specifies the max capacities allowed in this provisioner
	// +optional
	CapacityThresholds SpaceProvisionerCapacityThresholds `json:"capacityThresholds"`
}

type SpaceProvisionerConfigStatus struct {
	// Conditions describes the state of the configuration (its validity).
	// The only known condition type is "Ready".
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`
}

type SpaceRequest struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   SpaceRequestSpec   `json:"spec,omitempty"`
	Status SpaceRequestStatus `json:"status,omitempty"`
}

type SpaceRequestConfig struct {
	// Provides the name of the Service Account whose token is to be copied
	// +optional
	ServiceAccountName string `json:"serviceAccountName,omitempty"`
}

type SpaceRequestList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []SpaceRequest `json:"items"`
}

type SpaceRequestSpec struct {
	// TierName is a required property introduced to retain the name of the tier
	// for which this Space is provisioned.
	TierName string `json:"tierName"`

	// TargetClusterRoles one or more label keys that define a set of clusters
	// where the Space can be provisioned.
	// The target cluster has to match ALL the roles defined in this field in order for the space to be provisioned there.
	// +optional
	// +listType=atomic
	TargetClusterRoles []string `json:"targetClusterRoles,omitempty"`

	// DisableInheritance indicates whether or not SpaceBindings from the parent-spaces are
	// automatically inherited to all sub-spaces in the tree.
	//
	// Set to True to disable SpaceBinding inheritance from the parent-spaces.
	// Default is False.
	// +optional
	DisableInheritance bool `json:"disableInheritance,omitempty"`
}

type SpaceRequestStatus struct {

	// TargetClusterURL The API URL of the cluster where Space is currently provisioned
	// Can be empty if provisioning did not start or failed
	// The URL is just for informative purposes for developers and controllers that are placed in member clusters.
	// +optional
	TargetClusterURL string `json:"targetClusterURL,omitempty"`

	// NamespaceAccess is the list with the provisioned namespace and secret to access it
	// +listType=atomic
	// +optional
	NamespaceAccess []NamespaceAccess `json:"namespaceAccess,omitempty"`

	// Conditions is an array of SpaceRequest conditions
	// Supported condition types:
	// Provisioning, SpaceNotReady and Ready
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`
}

type SpaceSpec struct {

	// TargetCluster The cluster in which this Space is going to be provisioned
	// If not set then the target cluster will be picked automatically
	// +optional
	TargetCluster string `json:"targetCluster,omitempty"`

	// TargetClusterRoles one or more label keys that define a set of clusters
	// where the Space can be provisioned.
	// The target cluster has to match ALL the roles defined in this field in order for the space to be provisioned there.
	// It can be used as an alternative to targetCluster field, which has precedence in case both roles and name are provided.
	// +optional
	// +listType=atomic
	TargetClusterRoles []string `json:"targetClusterRoles,omitempty"`

	// TierName is introduced to retain the name of the tier
	// for which this Space is provisioned
	// If not set then the tier name will be set automatically
	// +optional
	TierName string `json:"tierName,omitempty"`

	// ParentSpace holds the name of the context (Space) from which this space was created (requested),
	// enabling hierarchy relationships between different Spaces.
	//
	// Keeping this association brings two main benefits:
	// 1. SpaceBindings are inherited from the parent Space
	// 2. Ability to easily monitor quota for the requested sub-spaces
	// +optional
	ParentSpace string `json:"parentSpace,omitempty"`

	// DisableInheritance indicates whether or not SpaceBindings from the parent-spaces are
	// automatically inherited to all sub-spaces in the tree.
	//
	// Set to True to disable SpaceBinding inheritance from the parent-spaces.
	// Default is False.
	// +optional
	DisableInheritance bool `json:"disableInheritance,omitempty"`
}

type SpaceStatus struct {

	// TargetCluster The cluster in which this Space is currently provisioned
	// Can be empty if provisioning did not start or failed
	// To be used to de-provision the NSTemplateSet if the Spec.TargetCluster is either changed or removed
	// +optional
	TargetCluster string `json:"targetCluster,omitempty"`

	// ProvisionedNamespaces is a list of Namespaces that were provisioned for the Space.
	// +optional
	// +listType=atomic
	ProvisionedNamespaces []SpaceNamespace `json:"provisionedNamespaces,omitempty"`

	// Conditions is an array of current Space conditions
	// Supported condition types: ConditionReady
	// +optional
	// +patchMergeKey=type
	// +patchStrategy=merge
	// +listType=map
	// +listMapKey=type
	Conditions []Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`
}

type TLSValidation string

type TierTemplate struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec TierTemplateSpec `json:"spec,omitempty"`
}

type TierTemplateList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []TierTemplate `json:"items"`
}

type TierTemplateSpec struct {

	// The tier of the template. For example: "basic", "advanced", or "team"
	TierName string `json:"tierName"`

	// The type of the template. For example: "code", "dev", "stage" or "cluster"
	Type string `json:"type"`

	// The revision of the corresponding template
	Revision string `json:"revision"`

	// Template contains an OpenShift Template to be used to provision either a user's namespace or cluster-wide resources
	Template templatev1.Template `json:"template"`
}

type TiersConfig struct {
	// DefaultUserTier specifies the default tier to assign for new users
	// +optional
	DefaultUserTier *string `json:"defaultUserTier,omitempty"`

	// DefaultSpaceTier specifies the default tier to assign for new spaces
	// +optional
	DefaultSpaceTier *string `json:"defaultSpaceTier,omitempty"`

	// DurationBeforeChangeTierRequestDeletion specifies the duration before a ChangeTierRequest resource is deleted
	// +optional
	DurationBeforeChangeTierRequestDeletion *string `json:"durationBeforeChangeTierRequestDeletion,omitempty"`

	// TemplateUpdateRequestMaxPoolSize specifies the maximum number of concurrent TemplateUpdateRequests
	// when updating MasterUserRecords
	// +optional
	TemplateUpdateRequestMaxPoolSize *int `json:"templateUpdateRequestMaxPoolSize,omitempty"`
}

type ToolchainCluster struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec ToolchainClusterSpec `json:"spec"`
	// +optional
	Status ToolchainClusterStatus `json:"status,omitempty"`
}

type ToolchainClusterCondition struct {
	// Type of cluster condition, Ready or Offline.
	Type ToolchainClusterConditionType `json:"type"`
	// Status of the condition, one of True, False, Unknown.
	Status corev1.ConditionStatus `json:"status"`
	// Last time the condition was checked.
	LastProbeTime metav1.Time `json:"lastProbeTime"`
	// Last time the condition transit from one status to another.
	// +optional
	LastTransitionTime *metav1.Time `json:"lastTransitionTime,omitempty"`
	// (brief) reason for the condition's last transition.
	// +optional
	Reason string `json:"reason,omitempty"`
	// Human readable message indicating details about last transition.
	// +optional
	Message string `json:"message,omitempty"`
}

type ToolchainClusterConditionType string

type ToolchainClusterConfig struct {
	// Defines the period in between health checks
	// +optional
	HealthCheckPeriod *string `json:"healthCheckPeriod,omitempty"`

	// Defines the timeout for each health check
	// +optional
	HealthCheckTimeout *string `json:"healthCheckTimeout,omitempty"`
}

type ToolchainClusterList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ToolchainCluster `json:"items"`
}

type ToolchainClusterSpec struct {
	// The API endpoint of the member cluster. This can be a hostname,
	// hostname:port, IP or IP:port.
	APIEndpoint string `json:"apiEndpoint"`

	// CABundle contains the certificate authority information.
	// +optional
	CABundle string `json:"caBundle,omitempty"`

	// Name of the secret containing the token required to access the
	// member cluster. The secret needs to exist in the same namespace
	// as the control plane and should have a "token" key.
	SecretRef LocalSecretReference `json:"secretRef"`

	// DisabledTLSValidations defines a list of checks to ignore when validating
	// the TLS connection to the member cluster.  This can be any of *, SubjectName, or ValidityPeriod.
	// If * is specified, it is expected to be the only option in list.
	// +optional
	// +listType=set
	DisabledTLSValidations []TLSValidation `json:"disabledTLSValidations,omitempty"`
}

type ToolchainClusterStatus struct {
	// Conditions is an array of current cluster conditions.
	// +listType=atomic
	Conditions []ToolchainClusterCondition `json:"conditions"`
}

type ToolchainConfig struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ToolchainConfigSpec   `json:"spec,omitempty"`
	Status ToolchainConfigStatus `json:"status,omitempty"`
}

type ToolchainConfigList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ToolchainConfig `json:"items"`
}