package v1

import (
	"time"
	"cue.dev/x/k8s.io/apimachinery/pkg/runtime"
)

// APIGroup contains the name, the supported versions, and the
// preferred version of a group.
#APIGroup: {
	// APIVersion defines the versioned schema of this representation
	// of an object. Servers should convert recognized schemas to the
	// latest internal value, and may reject unrecognized values.
	// More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	"apiVersion": "v1"

	// Kind is a string value representing the REST resource this
	// object represents. Servers may infer this from the endpoint
	// the client submits requests to. Cannot be updated. In
	// CamelCase. More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	"kind": "APIGroup"

	// name is the name of the group.
	"name"!: string

	// preferredVersion is the version preferred by the API server,
	// which probably is the storage version.
	"preferredVersion"?: #GroupVersionForDiscovery

	// a map of client CIDR to server address that is serving this
	// group. This is to help clients reach servers in the most
	// network-efficient way possible. Clients can use the
	// appropriate server address as per the CIDR that they match. In
	// case of multiple matches, clients should use the longest
	// matching CIDR. The server returns only those CIDRs that it
	// thinks that the client can match. For example: the master will
	// return an internal IP CIDR only, if the client reaches the
	// server using an internal IP. Server looks at X-Forwarded-For
	// header or X-Real-Ip header or request.RemoteAddr (in that
	// order) to get the client IP.
	"serverAddressByClientCIDRs"?: [...#ServerAddressByClientCIDR]

	// versions are the versions supported in this group.
	"versions"!: [...#GroupVersionForDiscovery]
}

// APIGroupList is a list of APIGroup, to allow clients to
// discover the API at /apis.
#APIGroupList: {
	// APIVersion defines the versioned schema of this representation
	// of an object. Servers should convert recognized schemas to the
	// latest internal value, and may reject unrecognized values.
	// More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	"apiVersion": "v1"

	// groups is a list of APIGroup.
	"groups"!: [...#APIGroup]

	// Kind is a string value representing the REST resource this
	// object represents. Servers may infer this from the endpoint
	// the client submits requests to. Cannot be updated. In
	// CamelCase. More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	"kind": "APIGroupList"
}

// APIResource specifies the name of a resource and whether it is
// namespaced.
#APIResource: {
	// categories is a list of the grouped resources this resource
	// belongs to (e.g. 'all')
	"categories"?: [...string]

	// group is the preferred group of the resource. Empty implies the
	// group of the containing resource list. For subresources, this
	// may have a different value, for example: Scale".
	"group"?: string

	// kind is the kind for the resource (e.g. 'Foo' is the kind for a
	// resource 'foo')
	"kind"!: string

	// name is the plural name of the resource.
	"name"!: string

	// namespaced indicates if a resource is namespaced or not.
	"namespaced"!: bool

	// shortNames is a list of suggested short names of the resource.
	"shortNames"?: [...string]

	// singularName is the singular name of the resource. This allows
	// clients to handle plural and singular opaquely. The
	// singularName is more correct for reporting status on a single
	// item and both singular and plural are allowed from the kubectl
	// CLI interface.
	"singularName"!: string

	// The hash value of the storage version, the version this
	// resource is converted to when written to the data store. Value
	// must be treated as opaque by clients. Only equality comparison
	// on the value is valid. This is an alpha feature and may change
	// or be removed in the future. The field is populated by the
	// apiserver only if the StorageVersionHash feature gate is
	// enabled. This field will remain optional even if it graduates.
	"storageVersionHash"?: string

	// verbs is a list of supported kube verbs (this includes get,
	// list, watch, create, update, patch, delete, deletecollection,
	// and proxy)
	"verbs"!: [...string]

	// version is the preferred version of the resource. Empty implies
	// the version of the containing resource list For subresources,
	// this may have a different value, for example: v1 (while inside
	// a v1beta1 version of the core resource's group)".
	"version"?: string
}

// APIResourceList is a list of APIResource, it is used to expose
// the name of the resources supported in a specific group and
// version, and if the resource is namespaced.
#APIResourceList: {
	// APIVersion defines the versioned schema of this representation
	// of an object. Servers should convert recognized schemas to the
	// latest internal value, and may reject unrecognized values.
	// More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	"apiVersion": "v1"

	// groupVersion is the group and version this APIResourceList is
	// for.
	"groupVersion"!: string

	// Kind is a string value representing the REST resource this
	// object represents. Servers may infer this from the endpoint
	// the client submits requests to. Cannot be updated. In
	// CamelCase. More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	"kind": "APIResourceList"

	// resources contains the name of the resources and if they are
	// namespaced.
	"resources"!: [...#APIResource]
}

// APIVersions lists the versions that are available, to allow
// clients to discover the API at /api, which is the root path of
// the legacy v1 API.
#APIVersions: {
	// APIVersion defines the versioned schema of this representation
	// of an object. Servers should convert recognized schemas to the
	// latest internal value, and may reject unrecognized values.
	// More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	"apiVersion": "v1"

	// Kind is a string value representing the REST resource this
	// object represents. Servers may infer this from the endpoint
	// the client submits requests to. Cannot be updated. In
	// CamelCase. More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	"kind": "APIVersions"

	// a map of client CIDR to server address that is serving this
	// group. This is to help clients reach servers in the most
	// network-efficient way possible. Clients can use the
	// appropriate server address as per the CIDR that they match. In
	// case of multiple matches, clients should use the longest
	// matching CIDR. The server returns only those CIDRs that it
	// thinks that the client can match. For example: the master will
	// return an internal IP CIDR only, if the client reaches the
	// server using an internal IP. Server looks at X-Forwarded-For
	// header or X-Real-Ip header or request.RemoteAddr (in that
	// order) to get the client IP.
	"serverAddressByClientCIDRs"!: [...#ServerAddressByClientCIDR]

	// versions are the api versions that are available.
	"versions"!: [...string]
}

// Condition contains details for one aspect of the current state
// of this API Resource.
#Condition: {
	// lastTransitionTime is the last time the condition transitioned
	// from one status to another. This should be when the underlying
	// condition changed. If that is not known, then using the time
	// when the API field changed is acceptable.
	"lastTransitionTime"!: #Time

	// message is a human readable message indicating details about
	// the transition. This may be an empty string.
	"message"!: string

	// observedGeneration represents the .metadata.generation that the
	// condition was set based upon. For instance, if
	// .metadata.generation is currently 12, but the
	// .status.conditions[x].observedGeneration is 9, the condition
	// is out of date with respect to the current state of the
	// instance.
	"observedGeneration"?: int64 & int

	// reason contains a programmatic identifier indicating the reason
	// for the condition's last transition. Producers of specific
	// condition types may define expected values and meanings for
	// this field, and whether the values are considered a guaranteed
	// API. The value should be a CamelCase string. This field may
	// not be empty.
	"reason"!: string

	// status of the condition, one of True, False, Unknown.
	"status"!: string

	// type of condition in CamelCase or in foo.example.com/CamelCase.
	"type"!: string
}

// DeleteOptions may be provided when deleting an API object.
#DeleteOptions: {
	// APIVersion defines the versioned schema of this representation
	// of an object. Servers should convert recognized schemas to the
	// latest internal value, and may reject unrecognized values.
	// More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	"apiVersion"?: string

	// When present, indicates that modifications should not be
	// persisted. An invalid or unrecognized dryRun directive will
	// result in an error response and no further processing of the
	// request. Valid values are: - All: all dry run stages will be
	// processed
	"dryRun"?: [...string]

	// The duration in seconds before the object should be deleted.
	// Value must be non-negative integer. The value zero indicates
	// delete immediately. If this value is nil, the default grace
	// period for the specified type will be used. Defaults to a per
	// object value if not specified. zero means delete immediately.
	"gracePeriodSeconds"?: int64 & int

	// if set to true, it will trigger an unsafe deletion of the
	// resource in case the normal deletion flow fails with a corrupt
	// object error. A resource is considered corrupt if it can not
	// be retrieved from the underlying storage successfully because
	// of a) its data can not be transformed e.g. decryption failure,
	// or b) it fails to decode into an object. NOTE: unsafe deletion
	// ignores finalizer constraints, skips precondition checks, and
	// removes the object from the storage. WARNING: This may
	// potentially break the cluster if the workload associated with
	// the resource being unsafe-deleted relies on normal deletion
	// flow. Use only if you REALLY know what you are doing. The
	// default value is false, and the user must opt in to enable it
	"ignoreStoreReadErrorWithClusterBreakingPotential"?: bool

	// Kind is a string value representing the REST resource this
	// object represents. Servers may infer this from the endpoint
	// the client submits requests to. Cannot be updated. In
	// CamelCase. More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	"kind"?: string

	// Deprecated: please use the PropagationPolicy, this field will
	// be deprecated in 1.7. Should the dependent objects be
	// orphaned. If true/false, the "orphan" finalizer will be added
	// to/removed from the object's finalizers list. Either this
	// field or PropagationPolicy may be set, but not both.
	"orphanDependents"?: bool

	// Must be fulfilled before a deletion is carried out. If not
	// possible, a 409 Conflict status will be returned.
	"preconditions"?: #Preconditions

	// Whether and how garbage collection will be performed. Either
	// this field or OrphanDependents may be set, but not both. The
	// default policy is decided by the existing finalizer set in the
	// metadata.finalizers and the resource-specific default policy.
	// Acceptable values are: 'Orphan' - orphan the dependents;
	// 'Background' - allow the garbage collector to delete the
	// dependents in the background; 'Foreground' - a cascading
	// policy that deletes all dependents in the foreground.
	"propagationPolicy"?: string
}

// FieldSelectorRequirement is a selector that contains values, a
// key, and an operator that relates the key and values.
#FieldSelectorRequirement: {
	// key is the field selector key that the requirement applies to.
	"key"!: string

	// operator represents a key's relationship to a set of values.
	// Valid operators are In, NotIn, Exists, DoesNotExist. The list
	// of operators may grow in the future.
	"operator"!: string

	// values is an array of string values. If the operator is In or
	// NotIn, the values array must be non-empty. If the operator is
	// Exists or DoesNotExist, the values array must be empty.
	"values"?: [...string]
}

// FieldsV1 stores a set of fields in a data structure like a
// Trie, in JSON format.
//
// Each key is either a '.' representing the field itself, and
// will always map to an empty set, or a string representing a
// sub-field or item. The string will follow one of these four
// formats: 'f:<name>', where <name> is the name of a field in a
// struct, or key in a map 'v:<value>', where <value> is the
// exact json formatted value of a list item 'i:<index>', where
// <index> is position of a item in a list 'k:<keys>', where
// <keys> is a map of a list item's key fields to their unique
// values If a key maps to an empty Fields value, the field that
// key represents is part of the set.
//
// The exact format is defined in
// sigs.k8s.io/structured-merge-diff
#FieldsV1: {}

// GroupResource specifies a Group and a Resource, but does not
// force a version. This is useful for identifying concepts
// during lookup stages without having partially valid types
#GroupResource: {
	"group"!:    string
	"resource"!: string
}

// GroupVersion contains the "group/version" and "version" string
// of a version. It is made a struct to keep extensibility.
#GroupVersionForDiscovery: {
	// groupVersion specifies the API group and version in the form
	// "group/version"
	"groupVersion"!: string

	// version specifies the version in the form of "version". This is
	// to save the clients the trouble of splitting the GroupVersion.
	"version"!: string
}

// A label selector is a label query over a set of resources. The
// result of matchLabels and matchExpressions are ANDed. An empty
// label selector matches all objects. A null label selector
// matches no objects.
#LabelSelector: {
	// matchExpressions is a list of label selector requirements. The
	// requirements are ANDed.
	"matchExpressions"?: [...#LabelSelectorRequirement]

	// matchLabels is a map of {key,value} pairs. A single {key,value}
	// in the matchLabels map is equivalent to an element of
	// matchExpressions, whose key field is "key", the operator is
	// "In", and the values array contains only "value". The
	// requirements are ANDed.
	"matchLabels"?: {
		[string]: string
	}
}

// A label selector requirement is a selector that contains
// values, a key, and an operator that relates the key and
// values.
#LabelSelectorRequirement: {
	// key is the label key that the selector applies to.
	"key"!: string

	// operator represents a key's relationship to a set of values.
	// Valid operators are In, NotIn, Exists and DoesNotExist.
	"operator"!: string

	// values is an array of string values. If the operator is In or
	// NotIn, the values array must be non-empty. If the operator is
	// Exists or DoesNotExist, the values array must be empty. This
	// array is replaced during a strategic merge patch.
	"values"?: [...string]
}

// ListMeta describes metadata that synthetic resources must have,
// including lists and various status objects. A resource may
// have only one of {ObjectMeta, ListMeta}.
#ListMeta: {
	// continue may be set if the user set a limit on the number of
	// items returned, and indicates that the server has more data
	// available. The value is opaque and may be used to issue
	// another request to the endpoint that served this list to
	// retrieve the next set of available objects. Continuing a
	// consistent list may not be possible if the server
	// configuration has changed or more than a few minutes have
	// passed. The resourceVersion field returned when using this
	// continue value will be identical to the value in the first
	// response, unless you have received this token from an error
	// message.
	"continue"?: string

	// remainingItemCount is the number of subsequent items in the
	// list which are not included in this list response. If the list
	// request contained label or field selectors, then the number of
	// remaining items is unknown and the field will be left unset
	// and omitted during serialization. If the list is complete
	// (either because it is not chunking or because this is the last
	// chunk), then there are no more remaining items and this field
	// will be left unset and omitted during serialization. Servers
	// older than v1.15 do not set this field. The intended use of
	// the remainingItemCount is *estimating* the size of a
	// collection. Clients should not rely on the remainingItemCount
	// to be set or to be exact.
	"remainingItemCount"?: int64 & int

	// String that identifies the server's internal version of this
	// object that can be used by clients to determine when objects
	// have changed. Value must be treated as opaque by clients and
	// passed unmodified back to the server. Populated by the system.
	// Read-only. More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
	"resourceVersion"?: string

	// Deprecated: selfLink is a legacy read-only field that is no
	// longer populated by the system.
	"selfLink"?: string
}

// ManagedFieldsEntry is a workflow-id, a FieldSet and the group
// version of the resource that the fieldset applies to.
#ManagedFieldsEntry: {
	// APIVersion defines the version of this resource that this field
	// set applies to. The format is "group/version" just like the
	// top-level APIVersion field. It is necessary to track the
	// version of a field set because it cannot be automatically
	// converted.
	"apiVersion"?: string

	// FieldsType is the discriminator for the different fields format
	// and version. There is currently only one possible value:
	// "FieldsV1"
	"fieldsType"?: string

	// FieldsV1 holds the first JSON version format as described in
	// the "FieldsV1" type.
	"fieldsV1"?: #FieldsV1

	// Manager is an identifier of the workflow managing these fields.
	"manager"?: string

	// Operation is the type of operation which lead to this
	// ManagedFieldsEntry being created. The only valid values for
	// this field are 'Apply' and 'Update'.
	"operation"?: string

	// Subresource is the name of the subresource used to update that
	// object, or empty string if the object was updated through the
	// main resource. The value of this field is used to distinguish
	// between managers, even if they share the same name. For
	// example, a status update will be distinct from a regular
	// update using the same manager name. Note that the APIVersion
	// field is not related to the Subresource field and it always
	// corresponds to the version of the main resource.
	"subresource"?: string

	// Time is the timestamp of when the ManagedFields entry was
	// added. The timestamp will also be updated if a field is added,
	// the manager changes any of the owned fields value or removes a
	// field. The timestamp does not update when a field is removed
	// from the entry because another manager took it over.
	"time"?: #Time
}

// MicroTime is version of Time with microsecond level precision.
#MicroTime: time.Time

// ObjectMeta is metadata that all persisted resources must have,
// which includes all objects users must create.
#ObjectMeta: {
	// Annotations is an unstructured key value map stored with a
	// resource that may be set by external tools to store and
	// retrieve arbitrary metadata. They are not queryable and should
	// be preserved when modifying objects. More info:
	// https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations
	"annotations"?: [string]: string

	// CreationTimestamp is a timestamp representing the server time
	// when this object was created. It is not guaranteed to be set
	// in happens-before order across separate operations. Clients
	// may not set this value. It is represented in RFC3339 form and
	// is in UTC.
	//
	// Populated by the system. Read-only. Null for lists. More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	"creationTimestamp"?: #Time

	// Number of seconds allowed for this object to gracefully
	// terminate before it will be removed from the system. Only set
	// when deletionTimestamp is also set. May only be shortened.
	// Read-only.
	"deletionGracePeriodSeconds"?: int64 & int

	// DeletionTimestamp is RFC 3339 date and time at which this
	// resource will be deleted. This field is set by the server when
	// a graceful deletion is requested by the user, and is not
	// directly settable by a client. The resource is expected to be
	// deleted (no longer visible from resource lists, and not
	// reachable by name) after the time in this field, once the
	// finalizers list is empty. As long as the finalizers list
	// contains items, deletion is blocked. Once the
	// deletionTimestamp is set, this value may not be unset or be
	// set further into the future, although it may be shortened or
	// the resource may be deleted prior to this time. For example, a
	// user may request that a pod is deleted in 30 seconds. The
	// Kubelet will react by sending a graceful termination signal to
	// the containers in the pod. After that 30 seconds, the Kubelet
	// will send a hard termination signal (SIGKILL) to the container
	// and after cleanup, remove the pod from the API. In the
	// presence of network partitions, this object may still exist
	// after this timestamp, until an administrator or automated
	// process can determine the resource is fully terminated. If not
	// set, graceful deletion of the object has not been requested.
	//
	// Populated by the system when a graceful deletion is requested.
	// Read-only. More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	"deletionTimestamp"?: #Time

	// Must be empty before the object is deleted from the registry.
	// Each entry is an identifier for the responsible component that
	// will remove the entry from the list. If the deletionTimestamp
	// of the object is non-nil, entries in this list can only be
	// removed. Finalizers may be processed and removed in any order.
	// Order is NOT enforced because it introduces significant risk
	// of stuck finalizers. finalizers is a shared field, any actor
	// with permission can reorder it. If the finalizer list is
	// processed in order, then this can lead to a situation in which
	// the component responsible for the first finalizer in the list
	// is waiting for a signal (field value, external system, or
	// other) produced by a component responsible for a finalizer
	// later in the list, resulting in a deadlock. Without enforced
	// ordering finalizers are free to order amongst themselves and
	// are not vulnerable to ordering changes in the list.
	"finalizers"?: [...string]

	// GenerateName is an optional prefix, used by the server, to
	// generate a unique name ONLY IF the Name field has not been
	// provided. If this field is used, the name returned to the
	// client will be different than the name passed. This value will
	// also be combined with a unique suffix. The provided value has
	// the same validation rules as the Name field, and may be
	// truncated by the length of the suffix required to make the
	// value unique on the server.
	//
	// If this field is specified and the generated name exists, the
	// server will return a 409.
	//
	// Applied only if Name is not specified. More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
	"generateName"?: string

	// A sequence number representing a specific generation of the
	// desired state. Populated by the system. Read-only.
	"generation"?: int64 & int

	// Map of string keys and values that can be used to organize and
	// categorize (scope and select) objects. May match selectors of
	// replication controllers and services. More info:
	// https://kubernetes.io/docs/concepts/overview/working-with-objects/labels
	"labels"?: {
		[string]: string
	}

	// ManagedFields maps workflow-id and version to the set of fields
	// that are managed by that workflow. This is mostly for internal
	// housekeeping, and users typically shouldn't need to set or
	// understand this field. A workflow can be the user's name, a
	// controller's name, or the name of a specific apply path like
	// "ci-cd". The set of fields is always in the version that the
	// workflow used when modifying the object.
	"managedFields"?: [...#ManagedFieldsEntry]

	// Name must be unique within a namespace. Is required when
	// creating resources, although some resources may allow a client
	// to request the generation of an appropriate name
	// automatically. Name is primarily intended for creation
	// idempotence and configuration definition. Cannot be updated.
	// More info:
	// https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
	"name"?: string

	// Namespace defines the space within which each name must be
	// unique. An empty namespace is equivalent to the "default"
	// namespace, but "default" is the canonical representation. Not
	// all objects are required to be scoped to a namespace - the
	// value of this field for those objects will be empty.
	//
	// Must be a DNS_LABEL. Cannot be updated. More info:
	// https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces
	"namespace"?: string

	// List of objects depended by this object. If ALL objects in the
	// list have been deleted, this object will be garbage collected.
	// If this object is managed by a controller, then an entry in
	// this list will point to this controller, with the controller
	// field set to true. There cannot be more than one managing
	// controller.
	"ownerReferences"?: [...#OwnerReference]

	// An opaque value that represents the internal version of this
	// object that can be used by clients to determine when objects
	// have changed. May be used for optimistic concurrency, change
	// detection, and the watch operation on a resource or set of
	// resources. Clients must treat these values as opaque and
	// passed unmodified back to the server. They may only be valid
	// for a particular resource or set of resources.
	//
	// Populated by the system. Read-only. Value must be treated as
	// opaque by clients and . More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
	"resourceVersion"?: string

	// Deprecated: selfLink is a legacy read-only field that is no
	// longer populated by the system.
	"selfLink"?: string

	// UID is the unique in time and space value for this object. It
	// is typically generated by the server on successful creation of
	// a resource and is not allowed to change on PUT operations.
	//
	// Populated by the system. Read-only. More info:
	// https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
	"uid"?: string
}

// OwnerReference contains enough information to let you identify
// an owning object. An owning object must be in the same
// namespace as the dependent, or be cluster-scoped, so there is
// no namespace field.
#OwnerReference: {
	// API version of the referent.
	"apiVersion"!: string

	// If true, AND if the owner has the "foregroundDeletion"
	// finalizer, then the owner cannot be deleted from the key-value
	// store until this reference is removed. See
	// https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
	// for how the garbage collector interacts with this field and
	// enforces the foreground deletion. Defaults to false. To set
	// this field, a user needs "delete" permission of the owner,
	// otherwise 422 (Unprocessable Entity) will be returned.
	"blockOwnerDeletion"?: bool

	// If true, this reference points to the managing controller.
	"controller"?: bool

	// Kind of the referent. More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	"kind"!: string

	// Name of the referent. More info:
	// https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
	"name"!: string

	// UID of the referent. More info:
	// https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
	"uid"!: string
}

// Patch is provided to give a concrete name and type to the
// Kubernetes PATCH request body.
#Patch: {}

// Preconditions must be fulfilled before an operation (update,
// delete, etc.) is carried out.
#Preconditions: {
	// Specifies the target ResourceVersion
	"resourceVersion"?: string

	// Specifies the target UID.
	"uid"?: string
}

// ServerAddressByClientCIDR helps the client to determine the
// server address that they should use, depending on the
// clientCIDR that they match.
#ServerAddressByClientCIDR: {
	// The CIDR with which clients can match their IP to figure out
	// the server address that they should use.
	"clientCIDR"!: string

	// Address of this server, suitable for a client that matches the
	// above CIDR. This can be a hostname, hostname:port, IP or
	// IP:port.
	"serverAddress"!: string
}

// Status is a return value for calls that don't return other
// objects.
#Status: {
	// APIVersion defines the versioned schema of this representation
	// of an object. Servers should convert recognized schemas to the
	// latest internal value, and may reject unrecognized values.
	// More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	"apiVersion": "v1"

	// Suggested HTTP return code for this status, 0 if not set.
	"code"?: int32 & int

	// Extended data associated with the reason. Each reason may
	// define its own extended details. This field is optional and
	// the data returned is not guaranteed to conform to any schema
	// except that defined by the reason type.
	"details"?: #StatusDetails

	// Kind is a string value representing the REST resource this
	// object represents. Servers may infer this from the endpoint
	// the client submits requests to. Cannot be updated. In
	// CamelCase. More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	"kind": "Status"

	// A human-readable description of the status of this operation.
	"message"?: string

	// Standard list metadata. More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	"metadata"?: #ListMeta

	// A machine-readable description of why this operation is in the
	// "Failure" status. If this value is empty there is no
	// information available. A Reason clarifies an HTTP status code
	// but does not override it.
	"reason"?: string

	// Status of the operation. One of: "Success" or "Failure". More
	// info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
	"status"?: string
}

// StatusCause provides more information about an api.Status
// failure, including cases when multiple errors are encountered.
#StatusCause: {
	// The field of the resource that has caused this error, as named
	// by its JSON serialization. May include dot and postfix
	// notation for nested attributes. Arrays are zero-indexed.
	// Fields may appear more than once in an array of causes due to
	// fields having multiple errors. Optional.
	//
	// Examples:
	// "name" - the field "name" on the current resource
	// "items[0].name" - the field "name" on the first array entry in
	// "items"
	"field"?: string

	// A human-readable description of the cause of the error. This
	// field may be presented as-is to a reader.
	"message"?: string

	// A machine-readable description of the cause of the error. If
	// this value is empty there is no information available.
	"reason"?: string
}

// StatusDetails is a set of additional properties that MAY be set
// by the server to provide additional information about a
// response. The Reason field of a Status object defines what
// attributes will be set. Clients must ignore fields that do not
// match the defined type of each attribute, and should assume
// that any attribute may be empty, invalid, or under defined.
#StatusDetails: {
	// The Causes array includes more details associated with the
	// StatusReason failure. Not all StatusReasons may provide
	// detailed causes.
	"causes"?: [...#StatusCause]

	// The group attribute of the resource associated with the status
	// StatusReason.
	"group"?: string

	// The kind attribute of the resource associated with the status
	// StatusReason. On some operations may differ from the requested
	// resource Kind. More info:
	// https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	"kind"?: string

	// The name attribute of the resource associated with the status
	// StatusReason (when there is a single name which can be
	// described).
	"name"?: string

	// If specified, the time in seconds before the operation should
	// be retried. Some errors may indicate the client must take an
	// alternate action - for those errors this field may indicate
	// how long to wait before taking the alternate action.
	"retryAfterSeconds"?: int32 & int

	// UID of the resource. (when there is a single resource which can
	// be described). More info:
	// https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
	"uid"?: string
}

// Time is a wrapper around time.Time which supports correct
// marshaling to YAML and JSON. Wrappers are provided for many of
// the factory methods that the time package offers.
#Time: time.Time

// Event represents a single event to a watched resource.
#WatchEvent: {
	// Object is:
	// * If Type is Added or Modified: the new state of the object.
	// * If Type is Deleted: the state of the object immediately
	// before deletion.
	// * If Type is Error: *Status is recommended; other types may
	// make sense
	// depending on context.
	"object"!: runtime.#RawExtension
	"type"!:   string
}