v1alpha1

type API struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   APISpec   `json:"spec"`
	Status APIStatus `json:"status,omitempty"`
}

type APIList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []API `json:"items"`
}

type APIMutator struct {
	Client client.Client
	// contains filtered or unexported fields
}

type APISpec struct {

	// +optional
	// Fleet represents EnvoyFleet ID, which is deployed EnvoyFleet CustomResource name and namespace
	// Optional, if missing will be automatically added by the Kusk Gateway with the discovery of the single fleet in the cluster (MutatingWebhookConfiguration for the API resource must be enabled).
	Fleet *EnvoyFleetID `json:"fleet,omitempty"`

	// Spec represents OpenAPI spec as an embedded string.
	Spec string `json:"spec"`
}

type APIStatus struct {
}

type APIValidator struct {
	Client client.Client
	// contains filtered or unexported fields
}

type AccessLoggingConfig struct {
	// Stdout logging format - text for unstructured and json for the structured type of logging
	// +kubebuilder:validation:Enum=json;text
	Format string `json:"format"`

	// Logging format template for the unstructured text type.
	// See https://www.envoyproxy.io/docs/envoy/latest/configuration/observability/access_log/usage for the usage.
	// Uses Kusk Gateway defaults if not specified.
	// +optional
	TextTemplate string `json:"text_template,omitempty"`

	// Logging format template for the structured json type.
	// See https://www.envoyproxy.io/docs/envoy/latest/configuration/observability/access_log/usage for the usage.
	// Uses Kusk Gateway defaults if not specified.
	// +optional
	JsonTemplate map[string]string `json:"json_template,omitempty"`
}

type Action struct {
	// +optional
	Route *Route `json:"route,omitempty"`
	// +optional
	Redirect *options.RedirectOptions `json:"redirect,omitempty"`
}

type EnvoyFleet struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   EnvoyFleetSpec   `json:"spec"`
	Status EnvoyFleetStatus `json:"status,omitempty"`
}

type EnvoyFleetID struct {

	//+kubebuilder:validation:Pattern:="^[a-z0-9-]{1,62}$"
	// deployed Envoy Fleet CR name
	Name string `json:"name"`

	//+kubebuilder:validation:Pattern:="^[a-z0-9-]{1,62}$"
	// deployed Envoy Fleet CR namespace
	Namespace string `json:"namespace"`
}

type EnvoyFleetList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []EnvoyFleet `json:"items"`
}

type EnvoyFleetMutator struct {
	// contains filtered or unexported fields
}

type EnvoyFleetSpec struct {

	// Default marks fleet as the default one in the cluster
	Default bool `json:"default,omitempty"`

	// Service describes Envoy K8s service settings
	Service *ServiceConfig `json:"service"`

	// Envoy image tag
	// +kubebuilder:default:="docker.io/envoyproxy/envoy:v1.23.1"
	Image string `json:"image,omitempty"`

	// Node Selector is used to schedule the Envoy pod(s) to the specificly labeled nodes, optional
	// This is the map of "key: value" labels (e.g. "disktype": "ssd")
	// +optional
	NodeSelector map[string]string `json:"nodeSelector,omitempty"`

	// Affinity is used to schedule Envoy pod(s) to specific nodes, optional
	// +optional
	Affinity *corev1.Affinity `json:"affinity,omitempty"`

	// Tolerations allow pod to be scheduled to the nodes that has specific toleration labels, optional
	// +optional
	Tolerations []corev1.Toleration `json:"tolerations,omitempty"`

	// Optional duration in seconds the pod needs to terminate gracefully. May be decreased in delete request.
	// Value must be non-negative integer. The value zero indicates stop immediately via
	// the kill signal (no opportunity to shut down).
	// If this value is nil, the default grace period will be used instead.
	// The grace period is the duration in seconds after the processes running in the pod are sent
	// a termination signal and the time when the processes are forcibly halted with a kill signal.
	// Set this value longer than the expected cleanup time for your process.
	// Defaults to 30 seconds.
	// +optional
	TerminationGracePeriodSeconds *int64 `json:"terminationGracePeriodSeconds,omitempty"`

	// Additional Envoy Deployment annotations, optional
	// +optional
	Annotations map[string]string `json:"annotations,omitempty"`

	// Resources allow to set CPU and Memory resource requests and limits, optional
	// +optional
	Resources *corev1.ResourceRequirements `json:"resources,omitempty"`

	// Size field specifies the number of Envoy Pods being deployed. Optional, default value is 1.
	// +kubebuilder:validation:Minimum=1
	// +kubebuilder:default:=1
	Size *int32 `json:"size,omitempty"`

	// Access logging settings for the Envoy
	AccessLog *AccessLoggingConfig `json:"accesslog,omitempty"`

	// TLS configuration
	//+optional
	TLS TLS `json:"tls,omitempty"`
}

type EnvoyFleetStatus struct {

	// State indicates Envoy Fleet state
	State string `json:"state,omitempty"`
}

type EnvoyFleetValidator struct {
	Client client.Client
	// contains filtered or unexported fields
}

type Methods map[options.HTTPMethod]*Action

type Path string

type Route struct {
	Upstream *options.UpstreamOptions `json:"upstream"`
	// +optional
	CORS *options.CORSOptions `json:"cors,omitempty"`
	// +optional
	QoS *options.QoSOptions `json:"qos,omitempty"`
	// +optional
	// Enable establishing Websocket connections, by default disabled
	Websocket *bool `json:"websocket,omitempty"`
}

type ServiceConfig struct {

	// Kubernetes service type: NodePort, ClusterIP or LoadBalancer
	// +kubebuilder:validation:Enum=NodePort;ClusterIP;LoadBalancer
	Type corev1.ServiceType `json:"type"`

	// Kubernetes Service ports
	Ports []corev1.ServicePort `json:"ports"`

	// Service's annotations
	// +optional
	Annotations map[string]string `json:"annotations,omitempty"`

	// Static ip address for the LoadBalancer type if available
	// +optional
	LoadBalancerIP string `json:"loadBalancerIP,omitempty"`

	// externalTrafficPolicy denotes if this Service desires to route external
	// traffic to node-local or cluster-wide endpoints. "Local" preserves the
	// client source IP and avoids a second hop for LoadBalancer and Nodeport
	// type services, but risks potentially imbalanced traffic spreading.
	// "Cluster" obscures the client source IP and may cause a second hop to
	// another node, but should have good overall load-spreading.
	// For the preservation of the real client ip in access logs chose "Local"
	// +optional
	// +kubebuilder:validation:Enum=Cluster;Local
	ExternalTrafficPolicy corev1.ServiceExternalTrafficPolicyType `json:"externalTrafficPolicy,omitempty"`
}

type StaticRoute struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   StaticRouteSpec   `json:"spec,omitempty"`
	Status StaticRouteStatus `json:"status,omitempty"`
}

type StaticRouteList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []StaticRoute `json:"items"`
}

type StaticRouteMutator struct {
	Client client.Client
	// contains filtered or unexported fields
}

type StaticRouteSpec struct {

	// +optional
	// Fleet represents EnvoyFleet ID, which is deployed EnvoyFleet CustomResource name and namespace
	// Optional, if missing will be automatically added by the Kusk Gateway with the discovery of the single fleet in the cluster (MutatingWebhookConfiguration for the API resource must be enabled).
	Fleet *EnvoyFleetID `json:"fleet,omitempty"`

	// Hosts is a collection of vhosts the rules apply to.
	// Defaults to "*" - vhost that matches all domain names.
	// +optional
	Hosts []options.Host `json:"hosts,omitempty"`

	// Paths is a multidimensional map of path / method to the routing rules
	Paths map[Path]Methods `json:"paths"`
}

type StaticRouteStatus struct {
}

type StaticRouteValidator struct {
	// contains filtered or unexported fields
}

type TLS struct {
	// +optional
	// If specified, the TLS listener will only support the specified cipher list when negotiating TLS 1.0-1.2 (this setting has no effect when negotiating TLS 1.3).
	// If not specified, a default list will be used. Defaults are different for server (downstream) and client (upstream) TLS configurations.
	// For more information see: https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/transport_sockets/tls/v3/common.proto
	CipherSuites []string `json:"cipherSuites,omitempty"`

	// +optional
	// Minimum TLS protocol version. By default, it’s TLSv1_2 for clients and TLSv1_0 for servers.
	TlsMinimumProtocolVersion string `json:"tlsMinimumProtocolVersion,omitempty"`

	// +optional
	// Maximum TLS protocol version. By default, it’s TLSv1_2 for clients and TLSv1_3 for servers.
	TlsMaximumProtocolVersion string `json:"tlsMaximumProtocolVersion,omitempty"`

	// SecretName and Namespace combinations for locating TLS secrets containing TLS certificates
	// You can specify more than one
	// For more information on how certificate selection works see: https://www.envoyproxy.io/docs/envoy/latest/intro/arch_overview/security/ssl#certificate-selection
	TlsSecrets []TLSSecrets `json:"tlsSecrets"`

	// + optional
	// List of host names to enforce HTTPS redirect for.
	// That is if a HTTP request is received on a host in this list
	// a 301 redirect will be sent telling the client to use HTTPS
	HTTPSRedirectHosts []string `json:"https_redirect_hosts,omitempty"`
}

type TLSSecrets struct {
	// Name of the Kubernetes secret containing the TLS certificate
	SecretRef string `json:"secretRef"`

	// Namespace where the Kubernetes certificate resides
	Namespace string `json:"namespace"`
}