v1beta1

type ExcludeList struct {
	// namespace where secret resource resides, single namespace name only
	//+kubebuilder:validation:Pattern:=`^[a-zA-Z0-9-_]+$`
	Namespace string `json:"namespace"`
	// name of the secret resource to exclude watch, comma separated or sinlge secretName example: secret1, secret2
	//+kubebuilder:validation:Pattern:=`^[a-zA-Z0-9._-]+(?:,\s*[a-zA-Z0-9._-]+)*$`
	SecretName string `json:"secretName"`
}

type SecretStatus struct {
	// Namespace of the secret being monitored.
	Namespace string `json:"namespace,omitempty"`

	// Name of the secret being monitored.
	Name string `json:"name,omitempty"`

	// Type or kind of the secret being monitored. Opaque dockerconfig etc
	SecretType string `json:"secretType,omitempty"`

	// Created is the timestamp of the secret created.
	Created metav1.Time `json:"created,omitempty"`

	// LastUpdateTime is the timestamp of the last update to the monitored secret.
	LastModified metav1.Time `json:"last_modified,omitempty"`

	// IsStale indicates whether the secret is stale or not.
	IsStale bool `json:"isStale,omitempty"`

	// Message is a human-readable message indicating details
	Message string `json:"message,omitempty"`
}

type StaleSecretToWatch struct {
	// Namespace of the Secret resource. namespace=all or namespace=namespace1 or namespace=namespace1,namespace2 comma separated
	//+kubebuilder:validation:Pattern:=`^[a-zA-Z0-9-_]+$`
	Namespace string `json:"namespace"`
	// exclude stale secret watch of below secrets present in namespace
	ExcludeList []ExcludeList `json:"excludeList,omitempty"`
}

type StaleSecretWatch struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   StaleSecretWatchSpec   `json:"spec,omitempty"`
	Status StaleSecretWatchStatus `json:"status,omitempty"`
}

type StaleSecretWatchList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []StaleSecretWatch `json:"items"`
}

type StaleSecretWatchSpec struct {
	// StaleSecretToWatch points to the namespace and secret to watch for stale secrets.
	// +operator-sdk:csv:customresourcedefinitions:type=spec
	StaleSecretToWatch StaleSecretToWatch `json:"staleSecretToWatch"`

	// StaleThreshold defines the threshold (in days) beyond which a secret is considered stale.
	// +operator-sdk:csv:customresourcedefinitions:type=spec
	StaleThresholdInDays int `json:"staleThresholdInDays"`

	// RefreshInterval is the amount of time after which the Reconciler would watch the cluster
	// Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h"
	// May be set to zero to fetch and create it once. Defaults to 1h.
	// +kubebuilder:default="1h"
	// +operator-sdk:csv:customresourcedefinitions:type=spec
	RefreshInterval *metav1.Duration `json:"refreshInterval,omitempty"`
}

type StaleSecretWatchStatus struct {
	// Conditions represent the current conditions of the StaleSecretWatch resource
	// +operator-sdk:csv:customresourcedefinitions:type=status
	Conditions []metav1.Condition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type" protobuf:"bytes,1,rep,name=conditions"`

	// SecretStatus provides detailed information about the monitored secret's status.
	// +operator-sdk:csv:customresourcedefinitions:type=status
	SecretStatus []SecretStatus `json:"secretStatus,omitempty" patchStrategy:"merge" patchMergeKey:"type" protobuf:"bytes,1,rep,name=secretStatus"`

	// StaleSecretsCount in the number of stale secret found
	// +operator-sdk:csv:customresourcedefinitions:type=status
	StaleSecretsCount int `json:"staleSecretCount,omitempty"`
}