v1alpha3

type Account struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              AccountSpec   `json:"spec"`
	Status            AccountStatus `json:"status,omitempty"`
}

type AccountClass struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// SpecTemplate is a template for the spec of a dynamically provisioned
	// Account.
	SpecTemplate AccountClassSpecTemplate `json:"specTemplate"`
}

type AccountClassList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []AccountClass `json:"items"`
}

type AccountClassSpecTemplate struct {
	runtimev1alpha1.ClassSpecTemplate `json:",inline"`
	AccountParameters                 `json:",inline"`
}

type AccountList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Account `json:"items"`
}

type AccountParameters struct {
	// ResourceGroupName specifies the resource group for this Account.
	ResourceGroupName string `json:"resourceGroupName"`

	// StorageAccountName specifies the name for this Account.
	// +kubebuilder:validation:MaxLength=24
	StorageAccountName string `json:"storageAccountName"`

	// StorageAccountSpec specifies the desired state of this Account.
	StorageAccountSpec *StorageAccountSpec `json:"storageAccountSpec"`
}

type AccountSpec struct {
	runtimev1alpha1.ResourceSpec `json:",inline"`
	AccountParameters            `json:",inline"`
}

type AccountStatus struct {
	runtimev1alpha1.ResourceStatus `json:",inline"`

	*StorageAccountStatus `json:",inline"`
}

type Container struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              ContainerSpec   `json:"spec"`
	Status            ContainerStatus `json:"status,omitempty"`
}

type ContainerClass struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// SpecTemplate is a template for the spec of a dynamically provisioned
	// Container.
	SpecTemplate ContainerClassSpecTemplate `json:"specTemplate"`
}

type ContainerClassList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ContainerClass `json:"items"`
}

type ContainerClassSpecTemplate struct {
	runtimev1alpha1.ClassSpecTemplate `json:",inline"`
	ContainerParameters               `json:",inline"`
}

type ContainerList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Container `json:"items"`
}

type ContainerParameters struct {
	// NameFormat specifies the name of the external Container. The first
	// instance of the string '%s' will be replaced with the Kubernetes
	// UID of this Container.
	NameFormat string `json:"nameFormat"`

	// Metadata for this Container.
	// +optional
	Metadata azblob.Metadata `json:"metadata,omitempty"`

	// PublicAccessType for this container; either "blob" or "container".
	// +optional
	PublicAccessType azblob.PublicAccessType `json:"publicAccessType,omitempty"`

	// AccountReference to the Azure Blob Storage Account this Container will
	// reside within.
	AccountReference corev1.LocalObjectReference `json:"accountReference"`
}

type ContainerSpec struct {
	ContainerParameters `json:",inline"`

	// WriteConnectionSecretToReference specifies the name of a Secret, in the
	// same namespace as this managed resource, to which any connection details
	// for this managed resource should be written. Connection details
	// frequently include the endpoint, username, and password required to
	// connect to the managed resource.
	// +optional
	WriteConnectionSecretToReference *runtimev1alpha1.SecretReference `json:"writeConnectionSecretToRef,omitempty"`

	// ClaimReference specifies the resource claim to which this managed
	// resource will be bound. ClaimReference is set automatically during
	// dynamic provisioning. Crossplane does not currently support setting this
	// field manually, per https://github.com/crossplaneio/crossplane-runtime/issues/19
	// +optional
	ClaimReference *corev1.ObjectReference `json:"claimRef,omitempty"`

	// ClassReference specifies the non-portable resource class that was used to
	// dynamically provision this managed resource, if any. Crossplane does not
	// currently support setting this field manually, per
	// https://github.com/crossplaneio/crossplane-runtime/issues/20
	// +optional
	ClassReference *corev1.ObjectReference `json:"classRef,omitempty"`

	// ReclaimPolicy specifies what will happen to the external resource this
	// managed resource manages when the managed resource is deleted. "Delete"
	// deletes the external resource, while "Retain" (the default) does not.
	// Note this behaviour is subtly different from other uses of the
	// ReclaimPolicy concept within the Kubernetes ecosystem per
	// https://github.com/crossplaneio/crossplane-runtime/issues/21
	// +optional
	ReclaimPolicy runtimev1alpha1.ReclaimPolicy `json:"reclaimPolicy,omitempty"`
}

type ContainerStatus struct {
	runtimev1alpha1.ResourceStatus `json:",inline"`

	// Name of this Container.
	Name string `json:"name,omitempty"`
}

type CustomDomain struct {
	// Name - custom domain name assigned to the storage account. Name is the
	// CNAME source.
	// +optional
	Name string `json:"name,omitempty"`

	// UseSubDomainName - Indicates whether indirect CNAME validation is
	// enabled.
	// +optional
	UseSubDomainName bool `json:"useSubDomainName,omitempty"`
}

type EnabledEncryptionServices struct {
	// Blob - The encryption function of the blob storage service.
	Blob bool `json:"blob,omitempty"`

	// File - The encryption function of the file storage service.
	File bool `json:"file,omitempty"`

	// Table - The encryption function of the table storage service.
	Table bool `json:"table,omitempty"`

	// Queue - The encryption function of the queue storage service.
	Queue bool `json:"queue,omitempty"`
}

type Encryption struct {
	// Services - List of services which support encryption.
	Services *EnabledEncryptionServices `json:"services,omitempty"`

	// KeySource - The encryption keySource (provider).
	//
	// Possible values (case-insensitive):  Microsoft.Storage, Microsoft.Keyvault
	// +kubebuilder:validation:Enum=Microsoft.Storage;Microsoft.Keyvault
	KeySource storage.KeySource `json:"keySource,omitempty"`

	// KeyVaultProperties - Properties provided by key vault.
	KeyVaultProperties *KeyVaultProperties `json:"keyvaultproperties,omitempty"`
}

type Endpoints struct {
	// Blob - the blob endpoint.
	Blob string `json:"blob,omitempty"`
	// Queue - the queue endpoint.
	Queue string `json:"queue,omitempty"`
	// Table - the table endpoint.
	Table string `json:"table,omitempty"`
	// File - the file endpoint.
	File string `json:"file,omitempty"`
}

type IPRule struct {
	// IPAddressOrRange - Specifies the IP or IP range in CIDR format.
	// Only IPV4 address is allowed.
	IPAddressOrRange string `json:"value,omitempty"`

	// Action - The action of IP ACL rule. Possible values include: 'Allow'
	// +kubebuilder:validation:Enum=Allow
	Action storage.Action `json:"action,omitempty"`
}

type Identity struct {
	// PrincipalID - The principal ID of resource identity.
	PrincipalID string `json:"principalId,omitempty"`

	// TenantID - The tenant ID of resource.
	TenantID string `json:"tenantId,omitempty"`

	// Type - The identity type.
	Type string `json:"type,omitempty"`
}

type KeyVaultProperties struct {
	// KeyName - The name of KeyVault key.
	KeyName string `json:"keyname,omitempty"`

	// KeyVersion - The version of KeyVault key.
	KeyVersion string `json:"keyversion,omitempty"`

	// KeyVaultURI - The Uri of KeyVault.
	KeyVaultURI string `json:"keyvaulturi,omitempty"`
}

type NetworkRuleSet struct {
	// Bypass - Specifies whether traffic is bypassed for Logging/Metrics/AzureServices.
	// Possible values are any combination of Logging|Metrics|AzureServices
	// (For example, "Logging, Metrics"), or None to bypass none of those traffics.
	// Possible values include: 'None', 'Logging', 'Metrics', 'AzureServices'
	Bypass storage.Bypass `json:"bypass,omitempty"`

	// VirtualNetworkRules - Sets the virtual network rules
	VirtualNetworkRules []VirtualNetworkRule `json:"virtualNetworkRules,omitempty"`

	// IPRules - Sets the IP ACL rules
	IPRules []IPRule `json:"ipRules,omitempty"`

	// DefaultAction - Specifies the default action of allow or deny when no other rules match.
	//
	// Possible values include: 'Allow', 'Deny'
	// +kubebuilder:validation:Enum=Allow;Deny
	DefaultAction storage.DefaultAction `json:"defaultAction,omitempty"`
}

type Sku struct {
	// Capabilities - The capability information in the specified sku, including
	// file encryption, network acls, change notification, etc.
	Capabilities []skuCapability `json:"capabilities,omitempty"`

	// Kind - Indicates the type of storage account.
	//
	// Possible values include: 'Storage', 'BlobStorage'
	// +kubebuilder:validation:Enum=Storage;BlobStorage
	Kind storage.Kind `json:"kind,omitempty"`

	// Locations - The set of locations that the Sku is available.
	// This will be supported and registered Azure Geo Regions (e.g. West US, East US, Southeast Asia, etc.).
	Locations []string `json:"locations,omitempty"`

	// Name - Gets or sets the sku name. Required for account creation; optional for update.
	// Note that in older versions, sku name was called accountType.
	//
	// Possible values include: 'Standard_LRS', 'Standard_GRS', 'Standard_RAGRS', 'Standard_ZRS', 'Premium_LRS'
	// +kubebuilder:validation:Enum=Standard_LRS;Standard_GRS;Standard_RAGRS;Standard_ZRS;Premium_LRS
	Name storage.SkuName `json:"name"`

	// ResourceType - The type of the resource, usually it is 'storageAccounts'.
	ResourceType string `json:"resourceType,omitempty"`

	// Tier - Gets the sku tier. This is based on the Sku name.
	//
	// Possible values include: 'Standard', 'Premium'
	// +kubebuilder:validation:Enum=Standard;Premium
	Tier storage.SkuTier `json:"tier,omitempty"`
}

type StorageAccountSpec struct {
	// Identity - The identity of the resource.
	// +optional
	Identity *Identity `json:"identity,omitempty"`

	// Kind - Indicates the type of storage account.
	// Possible values include: 'Storage', 'BlobStorage'
	// +kubebuilder:validation:Enum=Storage;BlobStorage
	Kind storage.Kind `json:"kind"`

	// Location - The location of the resource. This will be one of the
	// supported and registered Azure Geo Regions (e.g. West US, East US,
	// Southeast Asia, etc.).
	Location string `json:"location"`

	// Sku of the storage account.
	Sku *Sku `json:"sku"`

	// StorageAccountSpecProperties - The parameters used to create the storage
	// account.
	// +optional
	*StorageAccountSpecProperties `json:"properties,omitempty"`

	// Tags - A list of key value pairs that describe the resource. These tags
	// can be used for viewing and grouping this resource (across resource
	// groups). A maximum of 15 tags can be provided for a resource. Each tag
	// must have a key with a length no greater than 128 characters and a value
	// with a length no greater than 256 characters.
	// +optional
	Tags map[string]string `json:"tags,omitempty"`
}

type StorageAccountSpecProperties struct {
	// AccessTier - Required for storage accounts where kind = BlobStorage.
	// The access tier used for billing.
	// Possible values include: 'Hot', 'Cool'
	// +kubebuilder:validation:Enum=Hot;Cool
	AccessTier storage.AccessTier `json:"accessTier,omitempty"`

	// CustomDomain - User domain assigned to the storage account.
	// Name is the CNAME source. Only one custom domain is supported per storage account at this time.
	// to clear the existing custom domain, use an empty string for the custom domain name property.
	CustomDomain *CustomDomain `json:"customDomain,omitempty"`

	// EnableHTTPSTrafficOnly - Allows https traffic only to storage service if sets to true.
	EnableHTTPSTrafficOnly bool `json:"supportsHttpsTrafficOnly,omitempty"`

	// Encryption - Provides the encryption settings on the account.
	// If left unspecified the account encryption settings will remain the same.
	// The default setting is unencrypted.
	Encryption *Encryption `json:"encryption,omitempty"`

	// NetworkRuleSet - Network rule set
	NetworkRuleSet *NetworkRuleSet `json:"networkAcls,omitempty"`
}

type StorageAccountStatus struct {
	// ID of this Account.
	ID string `json:"id,omitempty"`

	// Name of this Account.
	Name string `json:"name,omitempty"`

	// Type of this Account.
	Type string `json:"type,omitempty"`

	// Properties of this Account.
	*StorageAccountStatusProperties `json:"properties,omitempty"`
}

type StorageAccountStatusProperties struct {

	// CreationTime - the creation date and time of the storage account in UTC.
	CreationTime *metav1.Time `json:"creationTime,omitempty"`

	// LastGeoFailoverTime - the timestamp of the most recent instance of a
	// failover to the secondary location. Only the most recent timestamp is retained.
	// This element is not returned if there has never been a failover instance.
	// Only available if the accountType is Standard_GRS or Standard_RAGRS.
	LastGeoFailoverTime *metav1.Time `json:"lastGeoFailoverTime,omitempty"`

	// PrimaryEndpoints - the URLs that are used to perform a retrieval of a public blob, queue, or table object.
	// Note that Standard_ZRS and Premium_LRS accounts only return the blob endpoint.
	PrimaryEndpoints *Endpoints `json:"primaryEndpoints,omitempty"`

	// PrimaryLocation - the location of the primary data center for the storage account.
	PrimaryLocation string `json:"primaryLocation,omitempty"`

	// ProvisioningState - the status of the storage account at the time the operation was called.
	// Possible values include: 'Creating', 'ResolvingDNS', 'Succeeded'
	// +kubebuilder:validation:Enum=Creating;ResolvingDNS;Succeeded
	ProvisioningState storage.ProvisioningState `json:"provisioningState,omitempty"`

	// SecondaryEndpoints - the URLs that are used to perform a retrieval of a
	// public blob, queue, or table object from the secondary location of the
	// storage account. Only available if the Sku name is Standard_RAGRS.
	SecondaryEndpoints *Endpoints `json:"secondaryEndpoints,omitempty"`

	// SecondaryLocation - the location of the geo-replicated secondary for the
	// storage account. Only available if the accountType is Standard_GRS or Standard_RAGRS.
	SecondaryLocation string `json:"secondaryLocation,omitempty"`

	// StatusOfPrimary - the status indicating whether the primary location
	// of the storage account is available or unavailable.
	// Possible values include: 'Available', 'Unavailable'
	StatusOfPrimary storage.AccountStatus `json:"statusOfPrimary,omitempty"`

	// StatusOfSecondary - the status indicating whether the secondary location
	// of the storage account is available or unavailable.
	// Only available if the Sku name is Standard_GRS or Standard_RAGRS.
	// Possible values include: 'Available', 'Unavailable'
	// +kubebuilder:validation:Enum=Available;Unavailable
	StatusOfSecondary storage.AccountStatus `json:"statusOfSecondary,omitempty"`
}

type VirtualNetworkRule struct {
	// VirtualNetworkResourceID - Resource ID of a subnet,
	// for example: /subscriptions/{subscriptionId}/resourceGroups/{groupName}/providers/Microsoft.Network/virtualNetworks/{vnetName}/subnets/{subnetName}.
	VirtualNetworkResourceID string `json:"id,omitempty"`

	// Action - The action of virtual network rule. Possible values include: 'Allow'
	// +kubebuilder:validation:Enum=Allow
	Action storage.Action `json:"action,omitempty"`
}