cloudconn

type Config struct {
	Region         string `json:"region,omitempty"`
	AccountID      string `json:"account_id,omitempty"` // AWS account, OCI tenancy OCID, GCP project
	Compartment    string `json:"compartment,omitempty"`
	RoleARN        string `json:"role_arn,omitempty"`
	SubscriptionID string `json:"subscription_id,omitempty"`
	ResourceGroup  string `json:"resource_group,omitempty"`
	OIDCAudience   string `json:"oidc_audience,omitempty"`
}

type Connection struct {
	Name           string
	Provider       string
	TeamID         string
	AuthMethod     string
	Config         Config
	CredentialRef  string
	CreatedBy      string
	CreatedAt      time.Time
	UpdatedAt      time.Time
	LastCheckedAt  time.Time
	LastCheckClass string
}

type Fake struct {
	ProviderName string
	Class        string
	Err          error
	Regions      []string

	Checked []string
	CredLen []int
	// contains filtered or unexported fields
}

type HealthChecker interface {
	Check(ctx context.Context, c OracleCredential) (string, error)
}

type Input struct {
	Provider      string
	TeamID        string
	AuthMethod    string
	Config        Config
	CredentialRef string
}

type OracleCredFiles struct {
	// contains filtered or unexported fields
}

type OracleCredential struct {
	TenancyOCID     string
	CompartmentOCID string
	Region          string
	Secret          OracleSecret
}

type OracleHTTPChecker struct {
	Client  *http.Client
	BaseURL func(region string) string
	Now     func() time.Time
}

type OracleProvider struct {
	Checker HealthChecker
}

type OracleSecret struct {
	UserOCID    string
	Fingerprint string
	// contains filtered or unexported fields
}

type Provider interface {
	Name() string
	// ValidateConfig checks the non-secret settings for the given auth method.
	ValidateConfig(cfg Config, authMethod string) error
	// Check makes one read-only call and returns a Class constant; detail stays inside the provider.
	Check(ctx context.Context, t Target) (string, error)
	// ListRegions returns region identifiers the credential can see, read-only.
	ListRegions(ctx context.Context, t Target) ([]string, error)
}

type Registry map[string]Provider

type Rows interface {
	ListCloudConnections(ctx context.Context) ([]store.CloudConnection, error)
	GetCloudConnection(ctx context.Context, name string) (store.CloudConnection, error)
	CreateCloudConnection(ctx context.Context, c store.CloudConnection) error
	UpdateCloudConnection(ctx context.Context, c store.CloudConnection) error
	SetCloudConnectionCheck(ctx context.Context, name, class string, at time.Time) error
	DeleteCloudConnection(ctx context.Context, name string) error
}

type SealedReader interface {
	Resolve(ctx context.Context, namespace, key string) (string, error)
}

type SealedSetter interface {
	SetValue(ctx context.Context, namespace, key, plaintext string) error
}

type Service struct {
	Rows      Rows
	Providers Registry
	// Sources resolves secret:// references for a probe; nil means references cannot be resolved.
	Sources *secretsource.Resolver
	Now     func() time.Time
}

type Target struct {
	Connection Connection
	Credential secretsource.Value
}

type TestResult struct {
	OK     bool
	Class  string
	Reason string
}