installdefaults

const (
	// SystemNamespace is the namespace where substrate's control-plane
	// components and the atelet DaemonSet run.
	SystemNamespace = "ate-system"
	// APIServiceName is the Service name of ate-api-server.
	APIServiceName = "api"
	// RouterServiceName is the Service name of atenet-router.
	RouterServiceName = "atenet-router"
	// ClientServiceAccount is the ServiceAccount an out-of-cluster client mints
	// its ateapi bearer token from.
	ClientServiceAccount = "ate-client"

	// AteletTrustDomain and the ServiceAccount constants are the trust-domain
	// and service-account segments of the SPIFFE IDs that atelet,
	// atenet-router and atenet-egress Pod certificates carry, as minted by the
	// podidentity signer (cmd/podcertcontroller/internal/podidentitysigner).
	// The namespace segment is the namespace they run in, which callers
	// resolve themselves rather than assume.
	AteletTrustDomain    = "cluster.local"
	AteletServiceAccount = "atelet"
	RouterServiceAccount = "atenet-router"
	EgressServiceAccount = "atenet-egress"

	// PodNamespaceEnv is the conventional env var name for the namespace
	// a pod is running in, exposed via Kubernetes' downward API.
	PodNamespaceEnv = "POD_NAMESPACE"
)