customiamrolemodels

type K8sIoApimachineryPkgApisMetaV1LabelSelector struct {

	// matchExpressions is a list of label selector requirements. The requirements are ANDed.
	// +optional
	MatchExpressions []*K8sIoApimachineryPkgApisMetaV1LabelSelectorRequirement `json:"matchExpressions"`

	// matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
	// map is equivalent to an element of matchExpressions, whose key field is "key", the
	// operator is "In", and the values array contains only "value". The requirements are ANDed.
	// +optional
	MatchLabels map[string]string `json:"matchLabels,omitempty"`
}

type K8sIoApimachineryPkgApisMetaV1LabelSelectorRequirement struct {

	// key is the label key that the selector applies to.
	// +patchMergeKey=key
	// +patchStrategy=merge
	Key string `json:"key,omitempty"`

	// operator represents a key's relationship to a set of values.
	// Valid operators are In, NotIn, Exists and DoesNotExist.
	Operator string `json:"operator,omitempty"`

	// values is an array of string values. If the operator is In or NotIn,
	// the values array must be non-empty. If the operator is Exists or DoesNotExist,
	// the values array must be empty. This array is replaced during a strategic
	// merge patch.
	// +optional
	Values []string `json:"values"`
}

type VmwareTanzuManageV1alpha1IamPermissionResource string

type VmwareTanzuManageV1alpha1IamRole struct {

	// Full name for the role.
	FullName *VmwareTanzuManageV1alpha1IamRoleFullName `json:"fullName,omitempty"`

	// Metadata for the role object.
	Meta *objectmetamodel.VmwareTanzuCoreV1alpha1ObjectMeta `json:"meta,omitempty"`

	// Spec for the role.
	Spec *VmwareTanzuManageV1alpha1IamRoleSpec `json:"spec,omitempty"`

	// Metadata describing the type of the resource.
	Type *objectmetamodel.VmwareTanzuCoreV1alpha1ObjectType `json:"type,omitempty"`
}

type VmwareTanzuManageV1alpha1IamRoleAggregationRule struct {

	// Label based Cluster Role Selector.
	ClusterRoleSelectors []*K8sIoApimachineryPkgApisMetaV1LabelSelector `json:"clusterRoleSelectors"`
}

type VmwareTanzuManageV1alpha1IamRoleData struct {

	// Role to create.
	Role *VmwareTanzuManageV1alpha1IamRole `json:"role,omitempty"`
}

type VmwareTanzuManageV1alpha1IamRoleFullName struct {

	// Name of the role.
	Name string `json:"name,omitempty"`

	// Org Id.
	OrgID string `json:"orgId,omitempty"`
}

type VmwareTanzuManageV1alpha1IamRoleKubernetesRule struct {

	// API group.
	APIGroups []string `json:"apiGroups"`

	// Non-resource urls for the role.
	NonResourceUrls []string `json:"nonResourceUrls"`

	// ResourceNames to restrict the rule to resources by name
	ResourceNames []string `json:"resourceNames"`

	// Resources - added a validation to input.
	Resources []string `json:"resources"`

	// Verbs.
	Verbs []string `json:"verbs"`
}

type VmwareTanzuManageV1alpha1IamRoleSpec struct {

	// AggregationRule.
	AggregationRule *VmwareTanzuManageV1alpha1IamRoleAggregationRule `json:"aggregationRule,omitempty"`

	// Flag representing whether role is deprecated.
	IsDeprecated bool `json:"isDeprecated"`

	// This flag will help the client identify if this is an inbuilt role.
	IsInbuilt bool `json:"isInbuilt"`

	// Valid resources for this role.
	Resources []*VmwareTanzuManageV1alpha1IamPermissionResource `json:"resources"`

	// KubernetesRule.
	Rules []*VmwareTanzuManageV1alpha1IamRoleKubernetesRule `json:"rules"`

	// Tanzu-specific permissions for the role.
	TanzuPermissions []string `json:"tanzuPermissions"`
}