add deny purge property to stream spec

controllers/jetstream/stream.go

@@ -418,11 +418,16 @@ func createStream(ctx context.Context, c jsmClient, spec apis.StreamSpec) (err e
 		opts = append(opts, jsm.DenyDelete())
 	}
 
+	if spec.DenyPurge {
+		opts = append(opts, jsm.DenyPurge())
+	}
+
 	if spec.DiscardPerSubject {
 		opts = append(opts, jsm.DiscardNewPerSubject())
 	}
+
 	if spec.FirstSequence != 0 {
-		opts = append(opts, jsm.FirstSequence(uint64(spec.FirstSequence)))
+		opts = append(opts, jsm.FirstSequence(spec.FirstSequence))
 	}
 
 	if spec.Metadata != nil {
@@ -486,6 +491,7 @@ func updateStream(ctx context.Context, c jsmClient, spec apis.StreamSpec) (err e
 		Duplicates:       duplicates,
 		AllowDirect:      spec.AllowDirect,
 		DenyDelete:       spec.DenyDelete,
+		DenyPurge:        spec.DenyPurge,
 		RollupAllowed:    spec.AllowRollup,
 		FirstSeq:         spec.FirstSequence,
 		SubjectTransform: subjectTransform,

deploy/crds.yml

@@ -262,6 +262,10 @@ spec:
                 description: When true, restricts the ability to delete messages from a stream via the API. Cannot be changed once set to true.
                 type: boolean
                 default: false
+              denyPurge:
+                description: When true, restricts the ability to purge a stream via the API. Cannot be changed once set to true.
+                type: boolean
+                default: false
               discardPerSubject:
                 description: Allows to discard messages on a subject basis.
                 type: boolean

pkg/jetstream/apis/jetstream/v1beta2/streamtypes.go

@@ -27,6 +27,7 @@ type StreamSpec struct {
 	AllowRollup       bool              `json:"allowRollup"`
 	Creds             string            `json:"creds"`
 	DenyDelete        bool              `json:"denyDelete"`
+	DenyPurge         bool              `json:"denyPurge"`
 	Description       string            `json:"description"`
 	DiscardPerSubject bool              `json:"discardPerSubject"`
 	PreventDelete     bool              `json:"preventDelete"`