v1

type BackendConfig struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   BackendConfigSpec   `json:"spec,omitempty"`
	Status BackendConfigStatus `json:"status,omitempty"`
}

type BackendConfigList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata"`

	Items []BackendConfig `json:"items"`
}

type BackendConfigSpec struct {
	Iap                   *IAPConfig                   `json:"iap,omitempty"`
	Cdn                   *CDNConfig                   `json:"cdn,omitempty"`
	SecurityPolicy        *SecurityPolicyConfig        `json:"securityPolicy,omitempty"`
	TimeoutSec            *int64                       `json:"timeoutSec,omitempty"`
	ConnectionDraining    *ConnectionDrainingConfig    `json:"connectionDraining,omitempty"`
	SessionAffinity       *SessionAffinityConfig       `json:"sessionAffinity,omitempty"`
	CustomRequestHeaders  *CustomRequestHeadersConfig  `json:"customRequestHeaders,omitempty"`
	CustomResponseHeaders *CustomResponseHeadersConfig `json:"customResponseHeaders,omitempty"`
	HealthCheck           *HealthCheckConfig           `json:"healthCheck,omitempty"`
	// Logging specifies the configuration for access logs.
	Logging *LogConfig `json:"logging,omitempty"`
}

type BackendConfigStatus struct {
}

type BypassCacheOnRequestHeader struct {
	// The header field name to match on when bypassing cache. Values are
	// case-insensitive.
	HeaderName string `json:"headerName,omitempty"`
}

type CDNConfig struct {
	Enabled                     bool                          `json:"enabled"`
	BypassCacheOnRequestHeaders []*BypassCacheOnRequestHeader `json:"bypassCacheOnRequestHeaders,omitempty"`
	CachePolicy                 *CacheKeyPolicy               `json:"cachePolicy,omitempty"`
	CacheMode                   *string                       `json:"cacheMode,omitempty"`
	ClientTtl                   *int64                        `json:"clientTtl,omitempty"`
	DefaultTtl                  *int64                        `json:"defaultTtl,omitempty"`
	MaxTtl                      *int64                        `json:"maxTtl,omitempty"`
	NegativeCaching             *bool                         `json:"negativeCaching,omitempty"`
	NegativeCachingPolicy       []*NegativeCachingPolicy      `json:"negativeCachingPolicy,omitempty"`
	RequestCoalescing           *bool                         `json:"requestCoalescing,omitempty"`
	ServeWhileStale             *int64                        `json:"serveWhileStale,omitempty"`
	SignedUrlCacheMaxAgeSec     *int64                        `json:"signedUrlCacheMaxAgeSec,omitempty"`
	SignedUrlKeys               []*SignedUrlKey               `json:"signedUrlKeys,omitempty"`
}

type CacheKeyPolicy struct {
	// If true, requests to different hosts will be cached separately.
	IncludeHost bool `json:"includeHost,omitempty"`
	// If true, http and https requests will be cached separately.
	IncludeProtocol bool `json:"includeProtocol,omitempty"`
	// If true, query string parameters are included in the cache key
	// according to QueryStringBlacklist and QueryStringWhitelist.
	// If neither is set, the entire query string is included and if false
	// the entire query string is excluded.
	IncludeQueryString bool `json:"includeQueryString,omitempty"`
	// Names of query strint parameters to exclude from cache keys. All other
	// parameters are included. Either specify QueryStringBlacklist or
	// QueryStringWhitelist, but not both.
	QueryStringBlacklist []string `json:"queryStringBlacklist,omitempty"`
	// Names of query string parameters to include in cache keys. All other
	// parameters are excluded. Either specify QueryStringBlacklist or
	// QueryStringWhitelist, but not both.
	QueryStringWhitelist []string `json:"queryStringWhitelist,omitempty"`
}

type ConnectionDrainingConfig struct {
	// Draining timeout in seconds.
	DrainingTimeoutSec int64 `json:"drainingTimeoutSec,omitempty"`
}

type CustomRequestHeadersConfig struct {
	Headers []string `json:"headers,omitempty"`
}

type CustomResponseHeadersConfig struct {
	Headers []string `json:"headers,omitempty"`
}

type HealthCheckConfig struct {
	// CheckIntervalSec is a health check parameter. See
	// https://cloud.google.com/compute/docs/reference/rest/v1/healthChecks.
	CheckIntervalSec *int64 `json:"checkIntervalSec,omitempty"`
	// TimeoutSec is a health check parameter. See
	// https://cloud.google.com/compute/docs/reference/rest/v1/healthChecks.
	TimeoutSec *int64 `json:"timeoutSec,omitempty"`
	// HealthyThreshold is a health check parameter. See
	// https://cloud.google.com/compute/docs/reference/rest/v1/healthChecks.
	HealthyThreshold *int64 `json:"healthyThreshold,omitempty"`
	// UnhealthyThreshold is a health check parameter. See
	// https://cloud.google.com/compute/docs/reference/rest/v1/healthChecks.
	UnhealthyThreshold *int64 `json:"unhealthyThreshold,omitempty"`
	// Type is a health check parameter. See
	// https://cloud.google.com/compute/docs/reference/rest/v1/healthChecks.
	Type *string `json:"type,omitempty"`
	// Port is a health check parameter. See
	// https://cloud.google.com/compute/docs/reference/rest/v1/healthChecks.
	// If Port is used, the controller updates portSpecification as well
	Port *int64 `json:"port,omitempty"`
	// RequestPath is a health check parameter. See
	// https://cloud.google.com/compute/docs/reference/rest/v1/healthChecks.
	RequestPath *string `json:"requestPath,omitempty"`
}

type IAPConfig struct {
	Enabled bool `json:"enabled"`
	// +optional
	OAuthClientCredentials *OAuthClientCredentials `json:"oauthclientCredentials"`
}

type LogConfig struct {
	// This field denotes whether to enable logging for the load balancer
	// traffic served by this backend service.
	Enable bool `json:"enable,omitempty"`
	// This field can only be specified if logging is enabled for this
	// backend service. The value of the field must be in [0, 1]. This
	// configures the sampling rate of requests to the load balancer where
	// 1.0 means all logged requests are reported and 0.0 means no logged
	// requests are reported. The default value is 1.0.
	SampleRate *float64 `json:"sampleRate,omitempty"`
}

type NegativeCachingPolicy struct {
	// The HTTP status code to define a TTL against. Only HTTP status codes
	// 300, 301, 308, 404, 405, 410, 421, 451 and 501 are can be specified
	// as values, and you cannot specify a status code more than once.
	Code int64 `json:"code,omitempty"`
	// The TTL (in seconds) for which to cache responses with the
	// corresponding status code. The maximum allowed value is 1800s (30
	// minutes), noting that infrequently accessed objects may be evicted
	// from the cache before the defined TTL.
	Ttl int64 `json:"ttl,omitempty"`
}

type OAuthClientCredentials struct {
	// The name of a k8s secret which stores the OAuth client id & secret.
	SecretName string `json:"secretName"`
	// Direct reference to OAuth client id.
	ClientID string `json:"clientID,omitempty"`
	// Direct reference to OAuth client secret.
	ClientSecret string `json:"clientSecret,omitempty"`
}

type SecurityPolicyConfig struct {
	// Name of the security policy that should be associated. If set to empty, the
	// existing security policy on the backend will be removed.
	Name string `json:"name"`
}

type SessionAffinityConfig struct {
	AffinityType         string `json:"affinityType,omitempty"`
	AffinityCookieTtlSec *int64 `json:"affinityCookieTtlSec,omitempty"`
}

type SignedUrlKey struct {
	// KeyName: Name of the key. The name must be 1-63 characters long, and
	// comply with RFC1035. Specifically, the name must be 1-63 characters
	// long and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?`
	// which means the first character must be a lowercase letter, and all
	// following characters must be a dash, lowercase letter, or digit,
	// except the last character, which cannot be a dash.
	KeyName string `json:"keyName,omitempty"`

	// KeyValue: 128-bit key value used for signing the URL. The key value
	// must be a valid RFC 4648 Section 5 base64url encoded string.
	KeyValue string `json:"keyValue,omitempty"`

	// The name of a k8s secret which stores the 128-bit key value
	// used for signing the URL. The key value must be a valid RFC 4648 Section 5
	// base64url encoded string
	SecretName string `json:"secretName,omitempty"`
}