v1alpha1

type DirectoryDomain struct {
	metav1.TypeMeta   `json:",inline,omitempty"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              DirectoryDomainSpec   `json:"spec,omitempty"`
	Status            DirectoryDomainStatus `json:"status,omitempty"`
}

type DirectoryDomainList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	// Items is a list of DirectoryDomain CRD objects
	Items []DirectoryDomain `json:"items,omitempty"`
}

type DirectoryDomainSpec struct {
	State *DirectoryDomainSpecResource `json:"state,omitempty" tf:"-"`

	Resource DirectoryDomainSpecResource `json:"resource" tf:"resource"`

	UpdatePolicy base.UpdatePolicy `json:"updatePolicy,omitempty" tf:"-"`

	TerminationPolicy base.TerminationPolicy `json:"terminationPolicy,omitempty" tf:"-"`

	ProviderRef core.LocalObjectReference `json:"providerRef" tf:"-"`

	BackendRef *core.LocalObjectReference `json:"backendRef,omitempty" tf:"-"`
}

type DirectoryDomainSpecResource struct {
	Timeouts *base.ResourceTimeout `json:"timeouts,omitempty" tf:"timeouts"`

	ID string `json:"id,omitempty" tf:"id,omitempty"`

	// The name of delegated administrator account used to perform Active Directory operations.
	// If not specified, setupadmin will be used.
	// +optional
	Admin *string `json:"admin,omitempty" tf:"admin"`
	// The full names of the Google Compute Engine networks the domain instance is connected to. The domain is only available on networks listed in authorizedNetworks.
	// If CIDR subnets overlap between networks, domain creation will fail.
	// +optional
	AuthorizedNetworks []string `json:"authorizedNetworks,omitempty" tf:"authorized_networks"`
	// The fully qualified domain name. e.g. mydomain.myorganization.com, with the restrictions,
	// https://cloud.google.com/managed-microsoft-ad/reference/rest/v1/projects.locations.global.domains.
	DomainName *string `json:"domainName" tf:"domain_name"`
	// The fully-qualified domain name of the exposed domain used by clients to connect to the service.
	// Similar to what would be chosen for an Active Directory set up on an internal network.
	// +optional
	Fqdn *string `json:"fqdn,omitempty" tf:"fqdn"`
	// Resource labels that can contain user-provided metadata
	// +optional
	Labels *map[string]string `json:"labels,omitempty" tf:"labels"`
	// Locations where domain needs to be provisioned. [regions][compute/docs/regions-zones/]
	// e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
	Locations []string `json:"locations" tf:"locations"`
	// The unique name of the domain using the format: 'projects/{project}/locations/global/domains/{domainName}'.
	// +optional
	Name *string `json:"name,omitempty" tf:"name"`
	// +optional
	Project *string `json:"project,omitempty" tf:"project"`
	// The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger.
	// Ranges must be unique and non-overlapping with existing subnets in authorizedNetworks
	ReservedIPRange *string `json:"reservedIPRange" tf:"reserved_ip_range"`
}

type DirectoryDomainStatus struct {
	// Resource generation, which is updated on mutation by the API Server.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`
	// +optional
	Phase status.Status `json:"phase,omitempty"`
	// +optional
	Conditions []kmapi.Condition `json:"conditions,omitempty"`
}

type DirectoryDomainTrust struct {
	metav1.TypeMeta   `json:",inline,omitempty"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              DirectoryDomainTrustSpec   `json:"spec,omitempty"`
	Status            DirectoryDomainTrustStatus `json:"status,omitempty"`
}

type DirectoryDomainTrustList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	// Items is a list of DirectoryDomainTrust CRD objects
	Items []DirectoryDomainTrust `json:"items,omitempty"`
}

type DirectoryDomainTrustSpec struct {
	State *DirectoryDomainTrustSpecResource `json:"state,omitempty" tf:"-"`

	Resource DirectoryDomainTrustSpecResource `json:"resource" tf:"resource"`

	UpdatePolicy base.UpdatePolicy `json:"updatePolicy,omitempty" tf:"-"`

	TerminationPolicy base.TerminationPolicy `json:"terminationPolicy,omitempty" tf:"-"`

	ProviderRef core.LocalObjectReference `json:"providerRef" tf:"-"`

	SecretRef *core.LocalObjectReference `json:"secretRef,omitempty" tf:"-"`

	BackendRef *core.LocalObjectReference `json:"backendRef,omitempty" tf:"-"`
}

type DirectoryDomainTrustSpecResource struct {
	Timeouts *base.ResourceTimeout `json:"timeouts,omitempty" tf:"timeouts"`

	ID string `json:"id,omitempty" tf:"id,omitempty"`

	// The fully qualified domain name. e.g. mydomain.myorganization.com, with the restrictions,
	// https://cloud.google.com/managed-microsoft-ad/reference/rest/v1/projects.locations.global.domains.
	Domain *string `json:"domain" tf:"domain"`
	// +optional
	Project *string `json:"project,omitempty" tf:"project"`
	// Whether the trusted side has forest/domain wide access or selective access to an approved set of resources.
	// +optional
	SelectiveAuthentication *bool `json:"selectiveAuthentication,omitempty" tf:"selective_authentication"`
	// The target DNS server IP addresses which can resolve the remote domain involved in the trust.
	TargetDNSIPAddresses []string `json:"targetDNSIPAddresses" tf:"target_dns_ip_addresses"`
	// The fully qualified target domain name which will be in trust with the current domain.
	TargetDomainName *string `json:"targetDomainName" tf:"target_domain_name"`
	// The trust direction, which decides if the current domain is trusted, trusting, or both. Possible values: ["INBOUND", "OUTBOUND", "BIDIRECTIONAL"]
	TrustDirection *string `json:"trustDirection" tf:"trust_direction"`
	// The trust secret used for the handshake with the target domain. This will not be stored.
	TrustHandshakeSecret *string `json:"-" sensitive:"true" tf:"trust_handshake_secret"`
	// The type of trust represented by the trust resource. Possible values: ["FOREST", "EXTERNAL"]
	TrustType *string `json:"trustType" tf:"trust_type"`
}

type DirectoryDomainTrustStatus struct {
	// Resource generation, which is updated on mutation by the API Server.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`
	// +optional
	Phase status.Status `json:"phase,omitempty"`
	// +optional
	Conditions []kmapi.Condition `json:"conditions,omitempty"`
}