v1alpha1

type ManagedZone struct {
	metav1.TypeMeta   `json:",inline,omitempty"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              ManagedZoneSpec   `json:"spec,omitempty"`
	Status            ManagedZoneStatus `json:"status,omitempty"`
}

type ManagedZoneList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	// Items is a list of ManagedZone CRD objects
	Items []ManagedZone `json:"items,omitempty"`
}

type ManagedZoneSpec struct {
	State *ManagedZoneSpecResource `json:"state,omitempty" tf:"-"`

	Resource ManagedZoneSpecResource `json:"resource" tf:"resource"`

	UpdatePolicy base.UpdatePolicy `json:"updatePolicy,omitempty" tf:"-"`

	TerminationPolicy base.TerminationPolicy `json:"terminationPolicy,omitempty" tf:"-"`

	ProviderRef core.LocalObjectReference `json:"providerRef" tf:"-"`

	BackendRef *core.LocalObjectReference `json:"backendRef,omitempty" tf:"-"`
}

type ManagedZoneSpecDnssecConfig struct {
	// Specifies parameters that will be used for generating initial DnsKeys
	// for this ManagedZone. If you provide a spec for keySigning or zoneSigning,
	// you must also provide one for the other.
	// default_key_specs can only be updated when the state is 'off'.
	// +optional
	DefaultKeySpecs []ManagedZoneSpecDnssecConfigDefaultKeySpecs `json:"defaultKeySpecs,omitempty" tf:"default_key_specs"`
	// Identifies what kind of resource this is
	// +optional
	Kind *string `json:"kind,omitempty" tf:"kind"`
	// Specifies the mechanism used to provide authenticated denial-of-existence responses.
	// non_existence can only be updated when the state is 'off'. Possible values: ["nsec", "nsec3"]
	// +optional
	NonExistence *string `json:"nonExistence,omitempty" tf:"non_existence"`
	// Specifies whether DNSSEC is enabled, and what mode it is in Possible values: ["off", "on", "transfer"]
	// +optional
	State *string `json:"state,omitempty" tf:"state"`
}

type ManagedZoneSpecDnssecConfigCodec struct {
}

type ManagedZoneSpecDnssecConfigDefaultKeySpecs struct {
	// String mnemonic specifying the DNSSEC algorithm of this key Possible values: ["ecdsap256sha256", "ecdsap384sha384", "rsasha1", "rsasha256", "rsasha512"]
	// +optional
	Algorithm *string `json:"algorithm,omitempty" tf:"algorithm"`
	// Length of the keys in bits
	// +optional
	KeyLength *int64 `json:"keyLength,omitempty" tf:"key_length"`
	// Specifies whether this is a key signing key (KSK) or a zone
	// signing key (ZSK). Key signing keys have the Secure Entry
	// Point flag set and, when active, will only be used to sign
	// resource record sets of type DNSKEY. Zone signing keys do
	// not have the Secure Entry Point flag set and will be used
	// to sign all other types of resource record sets. Possible values: ["keySigning", "zoneSigning"]
	// +optional
	KeyType *string `json:"keyType,omitempty" tf:"key_type"`
	// Identifies what kind of resource this is
	// +optional
	Kind *string `json:"kind,omitempty" tf:"kind"`
}

type ManagedZoneSpecForwardingConfig struct {
	// List of target name servers to forward to. Cloud DNS will
	// select the best available name server if more than
	// one target is given.
	TargetNameServers []ManagedZoneSpecForwardingConfigTargetNameServers `json:"targetNameServers" tf:"target_name_servers"`
}

type ManagedZoneSpecForwardingConfigCodec struct {
}

type ManagedZoneSpecForwardingConfigTargetNameServers struct {
	// Forwarding path for this TargetNameServer. If unset or 'default' Cloud DNS will make forwarding
	// decision based on address ranges, i.e. RFC1918 addresses go to the VPC, Non-RFC1918 addresses go
	// to the Internet. When set to 'private', Cloud DNS will always send queries through VPC for this target Possible values: ["default", "private"]
	// +optional
	ForwardingPath *string `json:"forwardingPath,omitempty" tf:"forwarding_path"`
	// IPv4 address of a target name server.
	Ipv4Address *string `json:"ipv4Address" tf:"ipv4_address"`
}

type ManagedZoneSpecPeeringConfig struct {
	// The network with which to peer.
	TargetNetwork *ManagedZoneSpecPeeringConfigTargetNetwork `json:"targetNetwork" tf:"target_network"`
}

type ManagedZoneSpecPeeringConfigCodec struct {
}

type ManagedZoneSpecPeeringConfigTargetNetwork struct {
	// The id or fully qualified URL of the VPC network to forward queries to.
	// This should be formatted like 'projects/{project}/global/networks/{network}' or
	// 'https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}'
	NetworkURL *string `json:"networkURL" tf:"network_url"`
}

type ManagedZoneSpecPeeringConfigTargetNetworkCodec struct {
}

type ManagedZoneSpecPrivateVisibilityConfig struct {
	// The list of VPC networks that can see this zone. Until the provider updates to use the Terraform 0.12 SDK in a future release, you
	// may experience issues with this resource while updating. If you've defined a 'networks' block and
	// add another 'networks' block while keeping the old block, Terraform will see an incorrect diff
	// and apply an incorrect update to the resource. If you encounter this issue, remove all 'networks'
	// blocks in an update and then apply another update adding all of them back simultaneously.
	Networks []ManagedZoneSpecPrivateVisibilityConfigNetworks `json:"networks" tf:"networks"`
}

type ManagedZoneSpecPrivateVisibilityConfigCodec struct {
}

type ManagedZoneSpecPrivateVisibilityConfigNetworks struct {
	// The id or fully qualified URL of the VPC network to bind to.
	// This should be formatted like 'projects/{project}/global/networks/{network}' or
	// 'https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}'
	NetworkURL *string `json:"networkURL" tf:"network_url"`
}

type ManagedZoneSpecResource struct {
	Timeouts *base.ResourceTimeout `json:"timeouts,omitempty" tf:"timeouts"`

	ID string `json:"id,omitempty" tf:"id,omitempty"`

	// A textual description field. Defaults to 'Managed by Terraform'.
	// +optional
	Description *string `json:"description,omitempty" tf:"description"`
	// The DNS name of this managed zone, for instance "example.com.".
	DnsName *string `json:"dnsName" tf:"dns_name"`
	// DNSSEC configuration
	// +optional
	DnssecConfig *ManagedZoneSpecDnssecConfig `json:"dnssecConfig,omitempty" tf:"dnssec_config"`
	// +optional
	ForceDestroy *bool `json:"forceDestroy,omitempty" tf:"force_destroy"`
	// The presence for this field indicates that outbound forwarding is enabled
	// for this zone. The value of this field contains the set of destinations
	// to forward to.
	// +optional
	ForwardingConfig *ManagedZoneSpecForwardingConfig `json:"forwardingConfig,omitempty" tf:"forwarding_config"`
	// A set of key/value label pairs to assign to this ManagedZone.
	// +optional
	Labels *map[string]string `json:"labels,omitempty" tf:"labels"`
	// User assigned name for this resource.
	// Must be unique within the project.
	Name *string `json:"name" tf:"name"`
	// Delegate your managed_zone to these virtual name servers;
	// defined by the server
	// +optional
	NameServers []string `json:"nameServers,omitempty" tf:"name_servers"`
	// The presence of this field indicates that DNS Peering is enabled for this
	// zone. The value of this field contains the network to peer with.
	// +optional
	PeeringConfig *ManagedZoneSpecPeeringConfig `json:"peeringConfig,omitempty" tf:"peering_config"`
	// For privately visible zones, the set of Virtual Private Cloud
	// resources that the zone is visible from.
	// +optional
	PrivateVisibilityConfig *ManagedZoneSpecPrivateVisibilityConfig `json:"privateVisibilityConfig,omitempty" tf:"private_visibility_config"`
	// +optional
	Project *string `json:"project,omitempty" tf:"project"`
	// The zone's visibility: public zones are exposed to the Internet,
	// while private zones are visible only to Virtual Private Cloud resources. Default value: "public" Possible values: ["private", "public"]
	// +optional
	Visibility *string `json:"visibility,omitempty" tf:"visibility"`
}

type ManagedZoneStatus struct {
	// Resource generation, which is updated on mutation by the API Server.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`
	// +optional
	Phase status.Status `json:"phase,omitempty"`
	// +optional
	Conditions []kmapi.Condition `json:"conditions,omitempty"`
}

type Policy struct {
	metav1.TypeMeta   `json:",inline,omitempty"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              PolicySpec   `json:"spec,omitempty"`
	Status            PolicyStatus `json:"status,omitempty"`
}

type PolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	// Items is a list of Policy CRD objects
	Items []Policy `json:"items,omitempty"`
}

type PolicySpec struct {
	State *PolicySpecResource `json:"state,omitempty" tf:"-"`

	Resource PolicySpecResource `json:"resource" tf:"resource"`

	UpdatePolicy base.UpdatePolicy `json:"updatePolicy,omitempty" tf:"-"`

	TerminationPolicy base.TerminationPolicy `json:"terminationPolicy,omitempty" tf:"-"`

	ProviderRef core.LocalObjectReference `json:"providerRef" tf:"-"`

	BackendRef *core.LocalObjectReference `json:"backendRef,omitempty" tf:"-"`
}

type PolicySpecAlternativeNameServerConfig struct {
	// Sets an alternative name server for the associated networks. When specified,
	// all DNS queries are forwarded to a name server that you choose. Names such as .internal
	// are not available when an alternative name server is specified.
	TargetNameServers []PolicySpecAlternativeNameServerConfigTargetNameServers `json:"targetNameServers" tf:"target_name_servers"`
}

type PolicySpecAlternativeNameServerConfigCodec struct {
}

type PolicySpecAlternativeNameServerConfigTargetNameServers struct {
	// Forwarding path for this TargetNameServer. If unset or 'default' Cloud DNS will make forwarding
	// decision based on address ranges, i.e. RFC1918 addresses go to the VPC, Non-RFC1918 addresses go
	// to the Internet. When set to 'private', Cloud DNS will always send queries through VPC for this target Possible values: ["default", "private"]
	// +optional
	ForwardingPath *string `json:"forwardingPath,omitempty" tf:"forwarding_path"`
	// IPv4 address to forward to.
	Ipv4Address *string `json:"ipv4Address" tf:"ipv4_address"`
}

type PolicySpecNetworks struct {
	// The id or fully qualified URL of the VPC network to forward queries to.
	// This should be formatted like 'projects/{project}/global/networks/{network}' or
	// 'https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}'
	NetworkURL *string `json:"networkURL" tf:"network_url"`
}

type PolicySpecResource struct {
	Timeouts *base.ResourceTimeout `json:"timeouts,omitempty" tf:"timeouts"`

	ID string `json:"id,omitempty" tf:"id,omitempty"`

	// Sets an alternative name server for the associated networks.
	// When specified, all DNS queries are forwarded to a name server that you choose.
	// Names such as .internal are not available when an alternative name server is specified.
	// +optional
	AlternativeNameServerConfig *PolicySpecAlternativeNameServerConfig `json:"alternativeNameServerConfig,omitempty" tf:"alternative_name_server_config"`
	// A textual description field. Defaults to 'Managed by Terraform'.
	// +optional
	Description *string `json:"description,omitempty" tf:"description"`
	// Allows networks bound to this policy to receive DNS queries sent
	// by VMs or applications over VPN connections. When enabled, a
	// virtual IP address will be allocated from each of the sub-networks
	// that are bound to this policy.
	// +optional
	EnableInboundForwarding *bool `json:"enableInboundForwarding,omitempty" tf:"enable_inbound_forwarding"`
	// Controls whether logging is enabled for the networks bound to this policy.
	// Defaults to no logging if not set.
	// +optional
	EnableLogging *bool `json:"enableLogging,omitempty" tf:"enable_logging"`
	// User assigned name for this policy.
	Name *string `json:"name" tf:"name"`
	// List of network names specifying networks to which this policy is applied.
	// +optional
	Networks []PolicySpecNetworks `json:"networks,omitempty" tf:"networks"`
	// +optional
	Project *string `json:"project,omitempty" tf:"project"`
}

type PolicyStatus struct {
	// Resource generation, which is updated on mutation by the API Server.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`
	// +optional
	Phase status.Status `json:"phase,omitempty"`
	// +optional
	Conditions []kmapi.Condition `json:"conditions,omitempty"`
}

type RecordSet struct {
	metav1.TypeMeta   `json:",inline,omitempty"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              RecordSetSpec   `json:"spec,omitempty"`
	Status            RecordSetStatus `json:"status,omitempty"`
}

type RecordSetList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	// Items is a list of RecordSet CRD objects
	Items []RecordSet `json:"items,omitempty"`
}

type RecordSetSpec struct {
	State *RecordSetSpecResource `json:"state,omitempty" tf:"-"`

	Resource RecordSetSpecResource `json:"resource" tf:"resource"`

	UpdatePolicy base.UpdatePolicy `json:"updatePolicy,omitempty" tf:"-"`

	TerminationPolicy base.TerminationPolicy `json:"terminationPolicy,omitempty" tf:"-"`

	ProviderRef core.LocalObjectReference `json:"providerRef" tf:"-"`

	BackendRef *core.LocalObjectReference `json:"backendRef,omitempty" tf:"-"`
}

type RecordSetSpecResource struct {
	ID string `json:"id,omitempty" tf:"id,omitempty"`

	// The name of the zone in which this record set will reside.
	ManagedZone *string `json:"managedZone" tf:"managed_zone"`
	// The DNS name this record set will apply to.
	Name *string `json:"name" tf:"name"`
	// The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
	// +optional
	Project *string `json:"project,omitempty" tf:"project"`
	// The string data for the records in this record set whose meaning depends on the DNS type. For TXT record, if the string data contains spaces, add surrounding \" if you don't want your string to get split on spaces. To specify a single record value longer than 255 characters such as a TXT record for DKIM, add \"\" inside the Terraform configuration string (e.g. "first255characters\"\"morecharacters").
	Rrdatas []string `json:"rrdatas" tf:"rrdatas"`
	// The time-to-live of this record set (seconds).
	// +optional
	Ttl *int64 `json:"ttl,omitempty" tf:"ttl"`
	// The DNS record set type.
	Type *string `json:"type" tf:"type"`
}

type RecordSetStatus struct {
	// Resource generation, which is updated on mutation by the API Server.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`
	// +optional
	Phase status.Status `json:"phase,omitempty"`
	// +optional
	Conditions []kmapi.Condition `json:"conditions,omitempty"`
}