installdefaults

const (
	// SystemNamespace is the namespace where substrate's control-plane
	// components and the atelet DaemonSet run.
	SystemNamespace = "ate-system"
	// APIServiceName is the Service name of ate-api-server.
	APIServiceName = "api"
	// RouterServiceName is the Service name of atenet-router.
	RouterServiceName = "atenet-router"
	// IDPServiceName is the Service name of ate-idp-server.
	IDPServiceName = "idp"
	// ClientServiceAccount is the ServiceAccount an out-of-cluster client mints
	// its ateapi bearer token from.
	ClientServiceAccount = "ate-client"

	// AteletTrustDomain and the ServiceAccount constants are the trust-domain
	// and service-account segments of the SPIFFE IDs that atelet,
	// atenet-router, atenet-egress and ate-controller Pod certificates carry,
	// as minted by the podidentity signer
	// (cmd/podcertcontroller/internal/podidentitysigner).
	// The namespace segment is the namespace they run in, which callers
	// resolve themselves rather than assume.
	AteletTrustDomain        = "cluster.local"
	AteletServiceAccount     = "atelet"
	RouterServiceAccount     = "atenet-router"
	EgressServiceAccount     = "atenet-egress"
	ControllerServiceAccount = "ate-controller"

	// PodNamespaceEnv is the conventional env var name for the namespace
	// a pod is running in, exposed via Kubernetes' downward API.
	PodNamespaceEnv = "POD_NAMESPACE"
)