builders

type ClusterResourceBuilder interface {
	BuildStackCR(stack *models.Stack) (*corev1alpha1.Stack, error)
	GetStackCRHash(stack *models.Stack) (string, error)
	BuildStackResourceCR(stackResource *models.StackResource, stackName, orgID string) (*corev1alpha1.StackResource, error)
	BuildVolumeCR(ctx context.Context, volume *models.Volume) (*storagev1alpha1.Volume, error)
}

type ClusterResourceBuilderSpec struct {
	// CredentialResolver is optional; when set, org-level registry credentials
	// auto-attach to image pull / push specs.
	CredentialResolver credentials.Resolver
	PlatformBaseDomain string
	ComputeMode        config.ComputeMode
	PlatformTLSEnabled bool
}

type PostgresClusterBuildContext struct {
	// BackupObjectStoreName is the resolved name of the barman ObjectStore
	// K8s resource used for backups. Required when BackupConfig.ObjectStoreID is set.
	BackupObjectStoreName string

	// RestoreObjectStoreName is the resolved name of the barman ObjectStore
	// K8s resource used for restore. Required when restoring from object store.
	RestoreObjectStoreName string

	// RecoverySourceClusterName is the name of the PostgresCluster CR that
	// originally archived backups to the object store. Used as the barman-cloud
	// serverName when restoring from object store.
	RecoverySourceClusterName string

	// RestoreBackupName is the resolved CNPG Backup CR name to restore from.
	// Required when restoring from a specific backup.
	RestoreBackupName string
}

type PostgresClusterBuilder interface {
	BuildPostgresClusterCR(addon *models.PostgresAddon, buildCtx PostgresClusterBuildContext) (*addonsv1alpha1.PostgresCluster, error)
	// BuildImportPasswordSecret builds the K8s Secret that holds the password for
	// importing from an external database. The returned secret must be created in
	// the cluster before the PostgresCluster CR is applied.
	BuildImportPasswordSecret(addon *models.PostgresAddon, password string) *corev1.Secret
}

type SecretBuilder interface {
	// BuildDockerConfigJsonSecret synthesizes a dockerconfigjson secret from
	// raw credentials — used for org-level registry credentials. ref may be an
	// image or repository reference; insecure derives an http:// auth URL for
	// in-cluster/plain-HTTP registries.
	BuildDockerConfigJsonSecret(ctx context.Context, secretName, username, password, ref string, insecure bool) (*corev1.Secret, error)
	// BuildGitCredentialsSecretFromCredentials synthesizes a git credentials
	// secret from raw credentials — used for org-level git integrations and
	// minted GitHub App tokens that have no backing hub secret.
	BuildGitCredentialsSecretFromCredentials(ctx context.Context, secretName string, creds gitclient.GitCredentials) (*corev1.Secret, error)
}

type SecretBuilderSpec struct{}