constants

const (
	EnvNameSSHAuthSock   = "SSH_AUTH_SOCK"
	EnvNameSSHKnownHosts = "SSH_KNOWN_HOSTS"

	EnvNameAWSAccessKey            = "AWS_ACCESS_KEY_ID"
	EnvNameAWSSecretKey            = "AWS_SECRET_ACCESS_KEY"
	EnvNameAWSSessionToken         = "AWS_SESSION_TOKEN"
	EnvNameAWSRegion               = "AWS_REGION"
	EnvNameAWSB64EcodedCredentials = "AWS_B64ENCODED_CREDENTIALS"

	EnvNameHCloudToken   = "HCLOUD_TOKEN"
	EnvNameRobotUser     = "ROBOT_USER"
	EnvNameRobotPassword = "ROBOT_PASSWORD"

	EnvNameKubeconfig = "KUBECONFIG"
)

const (
	FlagNameDebug = "debug"

	FlagNameKubeAidVersion = "kubeaid-version"

	FlagNameManagementClusterName             = "management-cluster-name"
	FlagNameManagementClusterNameDefaultValue = "kubeaid-bootstrapper"

	FlagNameConfigsDirectory             = "configs-directory"
	FlagNameConfigsDirectoryDefaultValue = "outputs/configs"

	FlagNameSkipMonitoringSetup = "skip-monitoring-setup"
	FlagNameSkipPRWorkflow      = "skip-pr-workflow"
	FlagNameSkipClusterctlMove  = "skip-clusterctl-move"

	FlagNameAWSAccessKeyID     = "aws-access-key-id"
	FlagNameAWSSecretAccessKey = "aws-secret-access-key"
	FlagNameAWSSessionToken    = "aws-session-token"
	FlagNameAWSRegion          = "aws-region"
	FlagNameAMIID              = "ami-id"

	FlagNameAzureClientSecret = "azure-client-secret"
	FlagNameNewImageOffer     = "new-image-offer"

	FlagNameHetznerAPIToken      = "hetzner-cloud-api-token"
	FlagNameHetznerRobotUsername = "hetzner-robot-username"
	FlagNameHetznerRobotPassword = "hetzner-robot-password"
	FlagNameNewImageName         = "new-image-name"
	FlagNameNewImagePath         = "new-image-path"

	FlagNameNewK8sVersion = "new-k8s-version"

	FlagNameOSSize      = "os-size"
	FlagNameZFSPoolSize = "zfs-pool-size"
)

const (
	KubeAPIServerFlagAuditPolicyFile = "audit-policy-file"
	KubeAPIServerFlagAuditLogPath    = "audit-log-path"
)

const (
	CloudProviderAWS       = "aws"
	CloudProviderHetzner   = "hetzner"
	CloudProviderAzure     = "azure"
	CloudProviderBareMetal = "bare-metal"
	CloudProviderLocal     = "local"
)

const (
	DiskTypeHDD  = "HDD"
	DiskTypeSSD  = "SSD"
	DiskTypeNVMe = "NVMe"

	DiskTypeUnknown = "Unknown"
)

const (
	ZFSPoolDefaultSize = (ZFSVolumeSizeContainerImages + ZFSVolumeSizePodLogs + ZFSVolumeSizePodEphemeralVolumes) + 20 // = 220 GB.

	ZFSVolumeSizeContainerImages     = 100
	ZFSVolumeSizePodLogs             = 50
	ZFSVolumeSizePodEphemeralVolumes = 50
)

const (
	ReleaseNameArgoCD = "argocd"

	ArgoCDProjectKubeAid   = "kubeaid"
	ArgoCDRoleKubeAidAgent = "kubeaid-agent"

	// Apps.
	ArgoCDAppArgoCD             = "argocd"
	ArgoCDAppRoot               = "root"
	ArgoCDAppCapiCluster        = "capi-cluster"
	ArgoCDAppHetznerRobot       = "hetzner-robot"
	ArgoCDAppClusterAutoscaler  = "cluster-autoscaler"
	ArgoCDAppVelero             = "velero"
	ArgoCDAppKubePrometheus     = "kube-prometheus"
	ArgoCDExternalSnapshotter   = "external-snapshotter"
	ArgoCDAppCilium             = "cilium"
	ArgoCDAppAzureDiskCSIDriver = "azuredisk-csi-driver"
	ArgoCDAppHCloudCSIDriver    = "hcloud-csi-driver"
	ArgoCDAppRookCeph           = "rook-ceph"
	ArgoCDAppLocalPVProvisioner = "localpv-provisioner"

	ArgoCDProjectRolePolicyFmt = "p, proj:%s:%s, %s, %s, %s/*, %s" // Inputs: project-name, role-name, resource, action, project-name, effect
	ArgoCDLabelKeyManagedBy    = "kubeaid.io/managed-by"

	ArgoCDRBACEffectAllow = "allow"
	ArgoCDRBACEffectDeny  = "deny"

	ArgoCDProjectRoleSecretName = "argocd-project-role-kubeaid-agent"
)

const (
	ReleaseNameSealedSecrets    = "sealed-secrets"
	SealedSecretsControllerName = ReleaseNameSealedSecrets + "-controller"

	CRONJobNameBackupSealedSecrets = "backup-sealed-secrets"
)

const (
	BlobContainerNameOIDCProvider = "oidc-provider"

	AzureBlobNameOpenIDConfiguration = ".well-known/openid-configuration"
	AzureBlobNameJWKSDocument        = "openid/v1/jwks"

	// Grants full access to manage all resources, but does not allow you to assign roles in Azure
	// RBAC, manage assignments in Azure Blueprints, or share image galleries.
	AzureRoleIDContributor = "b24988ac-6180-42a0-ab88-20f7382dd24c"
	// Provides full access to Azure Storage blob containers and data, including assigning POSIX
	// access control.
	AzureRoleIDStorageBlobDataOwner = "b7e6dc6d-f1e8-4753-8033-0f276bb0955b"

	AzureResponseStatusCodeResourceAlreadyExists = 409
)

const (
	HetznerModeBareMetal = "bare-metal"
	HetznerModeHCloud    = "hcloud"
	HetznerModeHybrid    = "hybrid"

	HetznerRobotWebServiceAPI = "https://robot-ws.your-server.de"

	HetznerNetworkCIDR       = "10.0.0.0/16"
	HCloudServersSubnetCIDR  = "10.0.0.0/24"
	HetznerVSwitchSubnetCIDR = "10.0.1.0/24"
	HetznerVSwitchGatewayIP  = "10.0.1.0"

	HCloudServerTypeCAX11 = "cax11"

	HCloudServerImageUbuntu2404 = "ubuntu-24.04"

	HCloudLocationHel1 = "hel1"

	HCloudLBTypeLB11 = "lb11"
)

const (
	// Namespaces.
	NamespaceArgoCD        = "argocd"
	NamespaceVelero        = "velero"
	NamespaceSealedSecrets = "sealed-secrets"
	NamespaceCrossPlane    = "crossplane"
	NamespaceCilium        = "cilium"
	NamespaceCiliumTest    = "cilium-test"

	// Service Accounts.
	ServiceAccountCAPZ          = "capz-manager"
	ServiceAccountASO           = "azureserviceoperator-default"
	ServiceAccountVelero        = "velero"
	ServiceAccountSealedSecrets = "sealed-secrets"
)

const (
	ClusterTypeManagement = "management"
	ClusterTypeMain       = "main"

	ClusterTypeVPN      = "vpn"
	ClusterTypeWorkload = "workload"
)

const (
	RepoURLObmondoKubeAid = "https://github.com/Obmondo/KubeAid"

	GzippedFilenameSuffix = ".gz"
)

const (
	OneDay   = 24 * time.Hour
	OneMonth = 30 * OneDay
)

const (
	CommitAuthorName  = "KubeAid CLI"
	CommitAuthorEmail = "info@obmondo.com"
)

const (
	DockerSocketPath         = "/var/run/docker.sock"
	DockerDefaultNetworkName = "default"
)

const (
	K3sReleasesAPIURL = "https://api.github.com/repos/k3s-io/k3s/releases/latest"

	// CGroup v1 support has been dropped from K8s version v1.35.
	// REFER : https://www.sysdig.com/blog/kubernetes-1-35-whats-new#changes-in-kubernetes-135-that-may-break-things.
	MaxCGroupV1CompatibleK3sVersion = "v1.34.5-k3s1"
)

const (
	MinSupportedK8sVersion = "v1.30"
	//
	// Whatever is the latest K8s version, that becomes the max supported K8s version.
	// We get the latest K8s version from the K8s release API.
	K8sReleaseAPIURL = "https://dl.k8s.io/release/stable.txt"

	// CGroup v1 support has been dropped from K8s version v1.35.
	// REFER : https://www.sysdig.com/blog/kubernetes-1-35-whats-new#changes-in-kubernetes-135-that-may-break-things.
	MaxCGroupV1CompatibleK8sVersion = "v1.34"

	// For the Bare Metal provider though, the story is a bit different.
	// We're using KubeOne v1.12. And you can see the K8s versions officially supported by KubeOne
	// here : https://docs.kubermatic.com/kubeone/v1.12/architecture/compatibility/supported-versions.
	// That range becomes the range of K8s version supported by KubeAid CLI.
	// NOTE : We need update this range manually, when upgrading KubeOne.
	MinKubeOneSupportedK8sVersion = "v1.32"
	MaxKubeOneSupportedK8sVersion = "v1.34"
)

const (
	TemplateNameKubePrometheusArgoCDApp = "argocd-apps/templates/kube-prometheus.yaml.tmpl"
	TemplateNameKubePrometheusVars      = "cluster-vars.jsonnet.tmpl"
)

const CEPHNodeMinSize = 50 // GB.

const HighSpeedNICThreshold = 5000 // GBPS.

const KubeOneConfigTemlateName = "kubeone/kubeone-cluster.yaml.tmpl"

const OSDefaultSize = 50 // GB.

const PEMBlockTypeOpenSSHPrivateKey = "OPENSSH PRIVATE KEY"

const TempDirectory = "/tmp/kubeaid-core"

const TemplateNameK3DConfig = "templates/k3d.config.yaml.tmpl"

const TemplateNameStoragePlanExecutor = "templates/storage-plan-executor.sh.tmpl"