package v1

import "cue.dev/x/k8s.io/apimachinery/pkg/apis/meta/v1"

// APIService represents a server for a particular GroupVersion. Name must be "version.group".
#APIService: {
	// APIVersion defines the versioned schema of this representation of an object.
	// Servers should convert recognized schemas to the latest internal value, and
	// may reject unrecognized values. More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	"apiVersion": "apiregistration.k8s.io/v1"

	// Kind is a string value representing the REST resource this object represents.
	// Servers may infer this from the endpoint the client submits requests to.
	// Cannot be updated. In CamelCase. More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	"kind": "APIService"

	// Standard object's metadata. More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	"metadata"?: v1.#ObjectMeta

	// Spec contains information for locating and communicating with a server
	"spec"?: #APIServiceSpec

	// Status contains derived information about an API server
	"status"?: #APIServiceStatus
}

// APIServiceCondition describes the state of an APIService at a particular point
#APIServiceCondition: {
	// Last time the condition transitioned from one status to another.
	"lastTransitionTime"?: v1.#Time

	// Human-readable message indicating details about last transition.
	"message"?: string

	// Unique, one-word, CamelCase reason for the condition's last transition.
	"reason"?: string

	// Status is the status of the condition. Can be True, False, Unknown.
	"status"!: string

	// Type is the type of the condition.
	"type"!: string
}

// APIServiceList is a list of APIService objects.
#APIServiceList: {
	// APIVersion defines the versioned schema of this representation of an object.
	// Servers should convert recognized schemas to the latest internal value, and
	// may reject unrecognized values. More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	"apiVersion": "apiregistration.k8s.io/v1"

	// Items is the list of APIService
	"items"!: [...#APIService]

	// Kind is a string value representing the REST resource this object represents.
	// Servers may infer this from the endpoint the client submits requests to.
	// Cannot be updated. In CamelCase. More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	"kind": "APIServiceList"

	// Standard list metadata More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	"metadata"?: v1.#ListMeta
}

// APIServiceSpec contains information for locating and communicating with a
// server. Only https is supported, though you are able to disable certificate
// verification.
#APIServiceSpec: {
	// CABundle is a PEM encoded CA bundle which will be used to validate an API
	// server's serving certificate. If unspecified, system trust roots on the
	// apiserver are used.
	"caBundle"?: string

	// Group is the API group name this server hosts
	"group"?: string

	// GroupPriorityMinimum is the priority this group should have at least. Higher
	// priority means that the group is preferred by clients over lower priority
	// ones. Note that other versions of this group might specify even higher
	// GroupPriorityMinimum values such that the whole group gets a higher
	// priority. The primary sort is based on GroupPriorityMinimum, ordered highest
	// number to lowest (20 before 10). The secondary sort is based on the
	// alphabetical comparison of the name of the object. (v1.bar before v1.foo)
	// We'd recommend something like: *.k8s.io (except extensions) at 18000 and
	// PaaSes (OpenShift, Deis) are recommended to be in the 2000s
	"groupPriorityMinimum"!: int32 & int

	// InsecureSkipTLSVerify disables TLS certificate verification when
	// communicating with this server. This is strongly discouraged. You should use
	// the CABundle instead.
	"insecureSkipTLSVerify"?: bool

	// Service is a reference to the service for this API server. It must
	// communicate on port 443. If the Service is nil, that means the handling for
	// the API groupversion is handled locally on this server. The call will simply
	// delegate to the normal handler chain to be fulfilled.
	"service"?: #ServiceReference

	// Version is the API version this server hosts. For example, "v1"
	"version"?: string

	// VersionPriority controls the ordering of this API version inside of its
	// group. Must be greater than zero. The primary sort is based on
	// VersionPriority, ordered highest to lowest (20 before 10). Since it's inside
	// of a group, the number can be small, probably in the 10s. In case of equal
	// version priorities, the version string will be used to compute the order
	// inside a group. If the version string is "kube-like", it will sort above non
	// "kube-like" version strings, which are ordered lexicographically.
	// "Kube-like" versions start with a "v", then are followed by a number (the
	// major version), then optionally the string "alpha" or "beta" and another
	// number (the minor version). These are sorted first by GA > beta > alpha
	// (where GA is a version with no suffix such as beta or alpha), and then by
	// comparing major version, then minor version. An example sorted list of
	// versions: v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2,
	// foo1, foo10.
	"versionPriority"!: int32 & int
}

// APIServiceStatus contains derived information about an API server
#APIServiceStatus: {
	// Current service state of apiService.
	"conditions"?: [...#APIServiceCondition]
}

// ServiceReference holds a reference to Service.legacy.k8s.io
#ServiceReference: {
	// Name is the name of the service
	"name"?: string

	// Namespace is the namespace of the service
	"namespace"?: string

	// If specified, the port on the service that hosting webhook. Default to 443
	// for backward compatibility. `port` should be a valid port number (1-65535,
	// inclusive).
	"port"?: int32 & int
}