v1alpha1

type AuthProxyType string

type AuthRealm struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   AuthRealmSpec   `json:"spec,omitempty"`
	Status AuthRealmStatus `json:"status,omitempty"`
}

type AuthRealmClusterOAuthStatus struct {
	//ClusterOAuth name
	Name string `json:"name"`
	//ClusterOAuth status
	ClusterOAuthStatus `json:",inline"`
}

type AuthRealmClusterStatus struct {
	//ClusterName
	Name string `json:"name"`
	//ClusterOAuth status, only 1 as a authrealm has only one clusterOAuth per cluster
	ClusterOAuth AuthRealmClusterOAuthStatus `json:"clusterOAuth"`
	//ManifestWork status
	ManifestWork AuthRealmManifestWorkStatus `json:"manifestWork"`
	//HypershiftDeployment status
	HypershiftDeployment AuthRealmHypershiftDeploymentStatus `json:"hypershiftDeployment"`
}

type AuthRealmHypershiftDeploymentStatus struct {
	//HypershiftDeployment name
	Name string `json:"name"`
	//HypershiftDeployment status
	hypershiftdeploymentv1alpha1.HypershiftDeploymentStatus `json:",inline"`
}

type AuthRealmList struct {
	metav1.TypeMeta `json:",inline"`
	// Standard list metadata.
	// +optional
	metav1.ListMeta `json:"metadata,omitempty"`
	// List of AuthRealm.
	// +listType=set
	Items []AuthRealm `json:"items"`
}

type AuthRealmManifestWorkStatus struct {
	//Manifestwork name
	Name string `json:"name"`
	//Manifestwork status
	workv1.ManifestWorkStatus `json:",inline"`
}

type AuthRealmSpec struct {

	// RouteSubDomain defines a string that will be used for building the redirect URI callback.
	// The value must be a valid DNS-1123 subdomain. This field is immutable.
	// +required
	// +kubebuilder:validation:MinLength:=1
	// +kubebuilder:validation:MaxLength:=63
	RouteSubDomain string `json:"routeSubDomain"`

	// Placement defines a rule to select a set of ManagedClusters from the ManagedClusterSets bound
	// to the placement namespace.
	PlacementRef corev1.LocalObjectReference `json:"placementRef,omitempty"`

	//RemediateAction defines the remediation action to apply to the idp policy
	//For possible values check the policyv1 project (ie: Inform and inform are accepted)
	// +required
	RemediateAction policyv1.RemediationAction `json:"remediateAction,omitempty"`

	// +kubebuilder:validation:Enum=dex;rhsso
	// +optional
	Type AuthProxyType `json:"type,omitempty"`
	//Host defines the url of the proxy
	// +required
	Host string `json:"host,omitempty"`
	//Certificates references a secret containing `ca.crt`, `tls.crt`, and `tls.key`
	CertificatesSecretRef corev1.LocalObjectReference `json:"certificatesSecretRef,omitempty"`
	// IdentityProviders reference an identity provider
	// +optional
	IdentityProviders []openshiftconfigv1.IdentityProvider `json:"identityProviders,omitempty"`

	// LDAPExtraConfigs extra server configuration setting for LDAP,
	// the key being the idp.name
	// +optional
	LDAPExtraConfigs map[string]LDAPExtraConfig `json:"ldapExtraConfigs,omitempty"`

	GitHubExtraConfigs map[string]GitHubExtraConfig `json:"githubExtraConfigs,omitempty"`
}

type AuthRealmStatus struct {

	// Conditions contains the different condition statuses for this AuthRealm.
	// +optional
	Conditions []metav1.Condition `json:"conditions"`
	// +optional
	Strategies []AuthRealmStrategyStatus `json:"strategies,omitempty"`
}

type AuthRealmStrategyStatus struct {
	// The name of the strategy
	Name string `json:"name"`
	// Conditions contains the different condition statuses for each cluster for this AuthRealm.
	// +optional
	StrategyStatus `json:",inline"`
	//Placement
	// +optional
	Placement Placement `json:"placement"`
	//Clusters status, one status per cluster
	// +optional
	Clusters []AuthRealmClusterStatus `json:"clusters"`
}

type ClusterOAuth struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ClusterOAuthSpec   `json:"spec,omitempty"`
	Status ClusterOAuthStatus `json:"status,omitempty"`
}

type ClusterOAuthList struct {
	metav1.TypeMeta `json:",inline"`
	// Standard list metadata.
	// +optional
	metav1.ListMeta `json:"metadata,omitempty"`
	// List of ClusterOAuth.
	// +listType=set
	Items []ClusterOAuth `json:"items"`
}

type ClusterOAuthSpec struct {
	OAuth              *openshiftconfigv1.OAuth `json:"oauth,omitempty"`
	AuthRealmReference RelatedObjectReference   `json:"authRealmReference,omitempty"`
	StrategyReference  RelatedObjectReference   `json:"strategyReference,omitempty"`
	DexClientReference RelatedObjectReference   `json:"dexClientReference,omitempty"`
}

type ClusterOAuthStatus struct {

	// Conditions contains the different condition statuses for this ClusterOAuth.
	// +optional
	Conditions []metav1.Condition `json:"conditions"`
}

type GitHubExtraConfig struct {
	// LoadAllGroups if true the groups import will be enabled
	LoadAllGroups bool `json:"loadAllGroups,omitempty"`
}

type IDPConfig struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   IDPConfigSpec   `json:"spec,omitempty"`
	Status IDPConfigStatus `json:"status,omitempty"`
}

type IDPConfigList struct {
	metav1.TypeMeta `json:",inline"`
	// Standard list metadata.
	// +optional
	metav1.ListMeta `json:"metadata,omitempty"`
	// List of IDPConfig.
	// +listType=set
	Items []IDPConfig `json:"items"`
}

type IDPConfigSpec struct {
}

type IDPConfigStatus struct {

	// Conditions contains the different condition statuses for this IDPConfig.
	// +optional
	Conditions []metav1.Condition `json:"conditions"`
}

type LDAPExtraConfig struct {
	//Optional The groupSearch to apply to find the groups of the user
	// +optional
	GroupSearch dexoperatorv1alpha1.GroupSearchSpec `json:"groupSearch,omitempty"`
}

type Placement struct {
	//Name of the placement
	Name string `json:"name"`
	//Placement Status
	clusterv1alpha1.PlacementStatus `json:",inline"`
}

type RelatedObjectReference struct {
	// the Kind of the referenced resource
	Kind string `json:"kind,omitempty"`
	// The name of the referenced object
	Name string `json:"name,omitempty"`
	// The namespace of the referenced object
	Namespace string `json:"namespace,omitempty"`
}

type Strategy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   StrategySpec   `json:"spec,omitempty"`
	Status StrategyStatus `json:"status,omitempty"`
}

type StrategyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Strategy `json:"items"`
}

type StrategySpec struct {

	// Strategy to use for applying the AuthRealm to the managed clusters
	// +kubebuilder:validation:Enum=backplane;grc;hypershift
	// +required
	Type StrategyType `json:"type"`

	// Reference to a Placement CR created by the Strategy operator
	// reference to a Placement CR created by the strategy operator that is a copy of the placement (Placement)
	//   referenced in the ownerReference (AuthRealm) object's placement property,
	//   patched with additional predicates to filter managed clusters by supported strategy type.
	PlacementRef corev1.LocalObjectReference `json:"placementRef,omitempty"`
}

type StrategyStatus struct {

	// Conditions contains the different condition statuses for this Strategy.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type StrategyType string