cloudflared

type Builder interface {
	// BuildDeployment creates a Deployment for cloudflared.
	// The deployment uses the tunnel token for authentication.
	BuildDeployment(tunnel *cfgatev1alpha1.CloudflareTunnel, token string) *appsv1.Deployment

	// BuildConfigMap creates a ConfigMap for cloudflared configuration.
	// This is used when running with a config file instead of remote config.
	BuildConfigMap(tunnel *cfgatev1alpha1.CloudflareTunnel, config *TunnelConfig) (*corev1.ConfigMap, error)

	// BuildTokenSecret creates a Secret containing the tunnel token.
	BuildTokenSecret(tunnel *cfgatev1alpha1.CloudflareTunnel, token string) *corev1.Secret
}

type DefaultBuilder struct{}

type IngressRule struct {
	// Hostname is the hostname to match.
	Hostname string `yaml:"hostname,omitempty"`

	// Path is the path regex to match.
	Path string `yaml:"path,omitempty"`

	// Service is the origin service URL.
	Service string `yaml:"service"`

	// OriginRequest contains per-rule origin settings.
	OriginRequest *OriginRequestConfig `yaml:"originRequest,omitempty"`
}

type OriginRequestConfig struct {
	ConnectTimeout         string `yaml:"connectTimeout,omitempty"`
	TLSTimeout             string `yaml:"tlsTimeout,omitempty"`
	TCPKeepAlive           string `yaml:"tcpKeepAlive,omitempty"`
	NoHappyEyeballs        bool   `yaml:"noHappyEyeballs,omitempty"`
	KeepAliveConnections   int    `yaml:"keepAliveConnections,omitempty"`
	KeepAliveTimeout       string `yaml:"keepAliveTimeout,omitempty"`
	HTTPHostHeader         string `yaml:"httpHostHeader,omitempty"`
	OriginServerName       string `yaml:"originServerName,omitempty"`
	CAPool                 string `yaml:"caPool,omitempty"`
	NoTLSVerify            bool   `yaml:"noTLSVerify,omitempty"`
	DisableChunkedEncoding bool   `yaml:"disableChunkedEncoding,omitempty"`
	BastionMode            bool   `yaml:"bastionMode,omitempty"`
	ProxyAddress           string `yaml:"proxyAddress,omitempty"`
	ProxyPort              int    `yaml:"proxyPort,omitempty"`
	ProxyType              string `yaml:"proxyType,omitempty"`
	HTTP2Origin            bool   `yaml:"http2Origin,omitempty"`
	H2cOrigin              bool   `yaml:"h2cOrigin,omitempty"`
}

type TunnelConfig struct {
	// TunnelID is the tunnel UUID.
	TunnelID string `yaml:"tunnel"`

	// CredentialsFile is the path to the credentials file.
	CredentialsFile string `yaml:"credentials-file,omitempty"`

	// Ingress is the list of ingress rules.
	Ingress []IngressRule `yaml:"ingress"`

	// OriginRequest contains default origin settings.
	OriginRequest *OriginRequestConfig `yaml:"originRequest,omitempty"`

	// WarpRouting enables WARP routing.
	WarpRouting *WarpRoutingConfig `yaml:"warp-routing,omitempty"`

	// Protocol is the tunnel transport protocol.
	Protocol string `yaml:"protocol,omitempty"`

	// LogLevel is the log level.
	LogLevel string `yaml:"loglevel,omitempty"`

	// NoAutoUpdate disables auto-updates.
	NoAutoUpdate bool `yaml:"no-autoupdate,omitempty"`

	// Metrics is the metrics endpoint address.
	Metrics string `yaml:"metrics,omitempty"`
}

type WarpRoutingConfig struct {
	Enabled bool `yaml:"enabled"`
}