apiVersion: marketplace.redhat.com/v1alpha1
kind: DataReporterConfig
metadata:
  name: datareporterconfig
spec:
  # true: report generated for 1 event and provide return code from data-service, confirming delivery
  # false: events will be accumulated before building report, and immediately return 200, delivery unfconfirmed
  confirmDelivery: false
  dataFilters:   # dataFilters matches the first dataFilter selector, applies transforms and forwards to data-service and destinations
  - altDestinations:   # List of desintations to transform and foward events to
    - authorization:   # optional endpoint if an authorization token must first be requested 
        authDestHeader: Authorization   # http header key to be appended to destination request
        authDestHeaderPrefix: 'Bearer '   # optional prefix for constructing destination request http header value
        bodyData:   # body data to send to authorization request, often an apiKey
          secretKeyRef:
            name: auth-body-data-secret
            key: bodydata
        header:   # secret map to use for authorization request headers
          secret:
            name: auth-header-map-secret
        tokenExpr: $.token   # optionally extract the returned body data using a jsonPath expression
        url: https://127.0.0.1:8443/api/2.0/accounts/my_account_id/apikeys/token   # the url to make an authorization request to
      header:   # secret map to use for destination request headers
        secret:
          name: dest-header-map-secret
      transformer:   # The transformer to apply to event data for this destination
        configMapKeyRef:
          key: kazaam.json
          name: kazaam-configmap
        type: kazaam
      url: https://127.0.0.1:8443/metering/api/1.0/usage   # the url to send the event to
      urlSuffixExpr: $.properties.productId   # optional jsonPath expression on the event to extract and set a suffix to the url path
    manifestType: dataReporter   # override manifestType of report sent to data-service
    selector:   # Matches against event data and a user. Empty selector matches all.
      matchExpressions:   # jsonPath expression must return a result for all expressions to match (AND)
      - $[?($.event == "Account Contractual Usage")]
      - $.properties.productId
      - $[?($.properties.source != null)]
      - $[?($.properties.unit == "AppPoints")]
      - $[?($.properties.quantity >= 0)]
      - $[?($.timestamp != null)]
      matchUsers:   # must match one of these users (OR). Omitting users matches any user
      - system:serviceaccount:ibm-software-central:ibm-data-reporter-operator-api
    transformer:   # The transformer to apply to the event for data-service
      configMapKeyRef:
        key: kazaam.json
        name: kazaam-configmap
      type: kazaam
  tlsConfig:   # TLS configuration for requests outbound to destinations
    caCerts:
    - name: tls-ca-certificates
      key: ca.crt
    certificates:
    - clientCert:
        secretKeyRef:
          name: tls-ca-certificates
          key: tls.crt
      clientKey:
        secretKeyRef:
          name: tls-ca-certificates
          key: tls.key
    cipherSuites: 
    - TLS_AES_128_GCM_SHA256
    - TLS_AES_256_GCM_SHA384
    - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
    - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
    - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    insecureSkipVerify: false
    minVersion: VersionTLS12
  userConfig:   # Optional metadata to apply to report sent to data-service for a specific user
  - metadata:
      ameta1: ametadata1
      bmeta1: bmetadata1
      cmeta1: cmetadata1
      dmeta1: dmetadata1
    userName: system:serviceaccount:ibm-software-central:ibm-data-reporter-operator-api

apiVersion: v1
stringData:
  accept: | 
    */*
kind: Secret
metadata:
  name: dest-header-map-secret
type: Opaque
---
apiVersion: v1
stringData:
  accept: application/json
  Content-Type: application/json
kind: Secret
metadata:
  name: auth-header-map-secret
type: Opaque

apiVersion: v1
stringData:
  bodydata: |
    {"apikey": "myapikey"}
kind: Secret
metadata:
  name: auth-body-data-secret
type: Opaque

apiVersion: v1
data:
  ca.crt: LS0t...
  tls.key: LS0t...
  tls.crt: LS0t...
kind: Secret
metadata:
  name: tls-ca-certificates

apiVersion: v1
kind: ConfigMap
metadata:
  name: kazaam-configmap
data:
  kazaam.json: |
    [
        {
            "operation": "timestamp",
            "spec": {
                "timestamp": {
                "inputFormat": "2006-01-02T15:04:05.999999+00:00",
                "outputFormat": "$unixmilli"
                }
            }
        },
        {
            "operation": "shift",
            "spec": {
                "instances[0].instanceId": "properties.source",
                "instances[0].startTime": "timestamp",
                "instances[0].endTime": "timestamp",
                "instances[0].metricUsage[0].metricId": "properties.unit",
                "instances[0].metricUsage[0].quantity": "properties.quantity"
            }
        },
        {
            "operation": "default",
            "spec": {
                "meteringModel": "point-in-time",
                "meteringPlan": "contract"
            }
        }
    ]