config

type CloudSQLConfig struct {
	// Instance is the instance connection name, PROJECT:REGION:INSTANCE.
	Instance string
	// InstanceSet records whether ATE_API_POSTGRES_CLOUDSQL_INSTANCE was
	// present in the environment at all, empty value included.
	InstanceSet bool

	// GSA is the Google service account the proxy authenticates as, and whose
	// email (minus the .gserviceaccount.com suffix) is the IAM database user.
	GSA string
	// IAMAuth enables automatic IAM database authentication ("true" or
	// "false"). Empty defaults to enabled.
	IAMAuth string
	// IPType selects which instance address the proxy dials: one of the
	// CloudSQLIPType constants. Empty defaults to private.
	IPType string
}

type Config struct {
	// Root is the repository root. All manifest paths are relative to it.
	Root string

	// Kind selects the local Kind install profile (ATE_INSTALL_KIND).
	Kind bool

	// Namespace is the namespace the control plane is installed into, from
	// ATE_NAMESPACE. It defaults to the canonical installdefaults.SystemNamespace,
	// so an install that does not set it is unaffected. The checked-in manifests
	// under manifests/ate-install/ name that namespace literally, so the
	// manifest-applying steps refuse any other value; see Env.RequireCanonicalNamespace.
	Namespace string

	// Kubeconfig and Context select the target cluster. Empty Context means
	// "use the current context" (the KUBECTL_CONTEXT convention).
	//
	// Kubeconfig is a single file, handed to client-go as its explicit path. It
	// falls back to $KUBECONFIG rather than staying empty so that ate-setup and
	// the shell scripts it delegates to agree on the cluster — but only when
	// that variable names one file. See loadKubeconfig.
	Kubeconfig string
	Context    string

	// GKE cluster coordinates, used to fetch credentials and to derive the
	// service account JWT issuer.
	ProjectID       string
	ClusterName     string
	ClusterLocation string

	// ExpectedJWTIssuer is the service account token issuer ate-api-server
	// trusts (EXPECTED_JWT_ISSUER). It overrides both the GKE derivation from
	// the coordinates above and OpenID discovery, for clusters whose issuer
	// follows neither form.
	ExpectedJWTIssuer string

	// BucketName is the snapshot bucket demos are templated with.
	BucketName string

	// KODockerRepo is where ko pushes images (KO_DOCKER_REPO).
	KODockerRepo string
	// KODefaultPlatforms constrains ko's build platforms.
	KODefaultPlatforms string

	// Images selects where container images come from. Its zero value builds
	// them from source with ko, which is what a developer install does.
	Images images.Source

	// Router selects the atenet router dataplane.
	Router string
	// PostgresConnectionString is the apiserver's store connection string.
	// Empty means use DefaultPostgresConnectionString.
	PostgresConnectionString string
	// PostgresSchema is the PostgreSQL schema for the Substrate tables
	// (ATE_API_POSTGRES_SCHEMA). Empty means DefaultPostgresSchema.
	PostgresSchema string
	// PostgresPoolMaxConns sizes the apiserver's pgxpool
	// (ATE_API_POSTGRES_POOL_MAX_CONNS). It is spliced into the DSN rather
	// than passed separately, because that is the only place pgxpool reads it
	// from. Empty leaves the pgxpool default in place.
	PostgresPoolMaxConns string
	// PostgresServerCAFile is a local PEM file holding the server CA of an
	// external PostgreSQL (ATE_API_POSTGRES_SERVER_CA_FILE). Its contents are
	// published as the postgres-server-ca Secret, which ate-api-server mounts
	// at /run/postgres-server-ca/server-ca.pem for sslmode=verify-ca DSNs.
	PostgresServerCAFile string
	// CloudSQL points the apiserver at a Cloud SQL instance through the Auth
	// Proxy sidecar instead of a directly reachable PostgreSQL.
	CloudSQL CloudSQLConfig

	// RolloutTimeout is the timeout duration for rollout status checks.
	RolloutTimeout time.Duration

	// PodcertWorkersPerSigner overrides WORKERS_PER_SIGNER on podcertificate-controller.
	PodcertWorkersPerSigner int

	// ClusterSize is the footprint profile (ATE_INSTALL_CLUSTER_SIZE): size0
	// or size10.
	ClusterSize string

	// CordonControlPlane pins each control plane workload to its own node
	// (ATE_INSTALL_CORDON_CONTROL_PLANE). It assumes a node pool labeled and
	// tainted ate.dev/workloadType=ate-control-plane:NoSchedule with one node
	// per pod plus a spare for rollout surges.
	CordonControlPlane bool

	// ExperimentalUseSDSMint enables per-SNI dynamic cert minting on atenet-egress.
	ExperimentalUseSDSMint bool

	// AdditionalEgressExtprocService is the optional NS/SVC:PORT external processor filter.
	AdditionalEgressExtprocService string

	// ExperimentalEgressCredentialInjection points the egress gateway's MITM-leg
	// handler at a credential provider so a matching EgressPolicy rule injects its
	// credential. CredentialProviderName/Address configure the provider.
	ExperimentalEgressCredentialInjection bool
	CredentialProviderName                string
	CredentialProviderAddress             string

	// AnthropicAPIKey is required only by the claude-code-multiplex demo.
	AnthropicAPIKey string

	// OtlpEndpoint is where the control plane ships telemetry
	// (ATE_OTLP_ENDPOINT). Benchmark actors are pointed at it too.
	OtlpEndpoint string
	// BenchmarkActorMemory is the memory limit for benchmark actors
	// (BENCHMARK_ACTOR_MEMORY). Empty leaves the workload default in place.
	BenchmarkActorMemory string
	// contains filtered or unexported fields
}

type Options struct {
	Kind                                  bool
	Kubeconfig                            string
	Context                               string
	Router                                string
	RolloutTimeout                        string
	PodcertWorkersPerSigner               int
	ClusterSize                           string
	CordonControlPlane                    bool
	ExperimentalUseSDSMint                bool
	AdditionalEgressExtprocService        string
	ExperimentalEgressCredentialInjection bool
	CredentialProviderName                string
	CredentialProviderAddress             string
	OtlpEndpoint                          string

	// Image source selection.
	ImageRepo string
	ImageTag  string

	// NoDevEnv skips sourcing .ate-dev-env.sh even when it exists.
	NoDevEnv bool
}