config

type CloudSQLConfig struct {
	// Instance is the instance connection name, PROJECT:REGION:INSTANCE.
	Instance string
	// InstanceSet records whether ATE_API_POSTGRES_CLOUDSQL_INSTANCE was
	// present in the environment at all, empty value included.
	InstanceSet bool

	// GSA is the Google service account the proxy authenticates as, and whose
	// email (minus the .gserviceaccount.com suffix) is the IAM database user.
	GSA string
	// IAMAuth enables automatic IAM database authentication ("true" or
	// "false"). Empty defaults to enabled.
	IAMAuth string
	// IPType selects which instance address the proxy dials: one of the
	// CloudSQLIPType constants. Empty defaults to private.
	IPType string
}

type Config struct {
	// Root is the repository root. All manifest paths are relative to it.
	Root string

	// Kind selects the local Kind install profile (ATE_INSTALL_KIND).
	Kind bool

	// Namespace is the namespace the control plane is installed into, from
	// ATE_NAMESPACE. It defaults to the canonical installdefaults.SystemNamespace,
	// so an install that does not set it is unaffected. The checked-in manifests
	// under manifests/ate-install/ name that namespace literally, so the
	// manifest-applying steps refuse any other value; see Env.RequireCanonicalNamespace.
	Namespace string

	// Kubeconfig and Context select the target cluster. Empty Context means
	// "use the current context" (the KUBECTL_CONTEXT convention).
	//
	// Kubeconfig is a single file, handed to client-go as its explicit path. It
	// falls back to $KUBECONFIG rather than staying empty so that ate-setup and
	// the shell scripts it delegates to agree on the cluster — but only when
	// that variable names one file. See loadKubeconfig.
	Kubeconfig string
	Context    string

	// GKE cluster coordinates, used to fetch credentials and to derive the
	// service account JWT issuer.
	ProjectID       string
	ClusterName     string
	ClusterLocation string

	// ExpectedJWTIssuer is the service account token issuer ate-api-server
	// trusts (EXPECTED_JWT_ISSUER). It overrides both the GKE derivation from
	// the coordinates above and OpenID discovery, for clusters whose issuer
	// follows neither form.
	ExpectedJWTIssuer string

	// ActorJWTAlgorithm is the signing algorithm of the key in a new actor JWT
	// pool (ACTOR_JWT_ALGORITHM): ES256 or RS256.
	ActorJWTAlgorithm string

	// BucketName is the snapshot bucket demos are templated with.
	BucketName string

	// KODockerRepo is where ko pushes images (KO_DOCKER_REPO).
	KODockerRepo string
	// KODefaultPlatforms constrains ko's build platforms.
	KODefaultPlatforms string
	// DockerBuildFlags are extra docker buildx build flags for the images ko
	// cannot build (DOCKER_BUILD_FLAGS, whitespace-separated).
	DockerBuildFlags []string

	// Images selects where container images come from. Its zero value builds
	// them from source with ko, which is what a developer install does.
	Images images.Source

	// Router selects the atenet router dataplane.
	Router string
	// The read/write and owner connections can use different login identities.
	// With one configured connection, both pools use it. Both empty selects
	// bundled PostgreSQL.
	PostgresReadWriteConnectionString string
	PostgresOwnerConnectionString     string
	PostgresReadWriteRole             string
	PostgresOwnerRole                 string
	// These distinguish an explicit role override from the default when
	// adopting an existing Cloud SQL installation.
	PostgresReadWriteRoleSet bool
	PostgresOwnerRoleSet     bool
	// PostgresSchema is the PostgreSQL schema for the Substrate tables
	// (ATE_API_POSTGRES_SCHEMA). Empty means DefaultPostgresSchema.
	PostgresSchema string
	// PostgresPoolMaxConns sizes the apiserver's read/write pool
	// (ATE_API_POSTGRES_POOL_MAX_CONNS). Empty leaves the DSN or pgxpool default.
	PostgresPoolMaxConns string
	// PostgresServerCAFile is a local PEM file holding the server CA of an
	// external PostgreSQL (ATE_API_POSTGRES_SERVER_CA_FILE). Its contents are
	// published as the postgres-server-ca Secret, which ate-api-server mounts
	// at /run/postgres-server-ca/server-ca.pem for sslmode=verify-ca DSNs.
	PostgresServerCAFile string
	// CloudSQL points the apiserver at a Cloud SQL instance through the Auth
	// Proxy sidecar instead of a directly reachable PostgreSQL.
	CloudSQL CloudSQLConfig

	// RolloutTimeout is the timeout duration for rollout status checks.
	RolloutTimeout time.Duration

	// PodcertWorkersPerSigner overrides WORKERS_PER_SIGNER on podcertificate-controller.
	PodcertWorkersPerSigner int

	// ClusterSize is the footprint profile (ATE_INSTALL_CLUSTER_SIZE): size0
	// or size10.
	ClusterSize string

	// CordonControlPlane keeps the control plane off the worker nodes
	// (ATE_INSTALL_CORDON_CONTROL_PLANE). It assumes a small shared pool
	// labeled and tainted ate.dev/workloadType=ate-control-plane:NoSchedule,
	// and a one-node pool labeled and tainted
	// ate.dev/workloadType=ate-postgres:NoSchedule for postgres alone.
	CordonControlPlane bool

	// AdditionalEgressExtprocService is the optional NS/SVC:PORT external processor filter.
	AdditionalEgressExtprocService string

	// CredentialProviderJSON is the --credential-provider value; see
	// CredentialProvider for its schema.
	CredentialProviderJSON string

	// AnthropicAPIKey is required only by the claude-code-multiplex demo.
	AnthropicAPIKey string

	// OtlpEndpoint is where the control plane ships telemetry
	// (ATE_OTLP_ENDPOINT). Benchmark actors are pointed at it too.
	OtlpEndpoint string
	// BenchmarkActorMemory is the memory limit for benchmark actors
	// (BENCHMARK_ACTOR_MEMORY). Empty leaves the workload default in place.
	BenchmarkActorMemory string
	// contains filtered or unexported fields
}

type ConflictError struct {
	A, B Value
	// Why states the rule that was broken.
	Why string
}

type CredentialProvider struct {
	// Name is the host of the ate-secret:// credential URIs the provider
	// serves, e.g. k8s.io.
	Name string
	// Address is the host:port the gateway dials the provider at.
	Address string
}

type Document struct {
	Metadata DocumentMetadata
	// contains filtered or unexported fields
}

type DocumentMetadata struct {
	// Context is the cluster the run targeted, and names the file.
	Context string `json:"context,omitempty"`
	// Outcome is whether the run completed.
	Outcome Outcome `json:"outcome,omitempty"`
	// FailedAt is the command that returned an error, for a failed run.
	FailedAt string `json:"failedAt,omitempty"`
	// WrittenAt and WrittenBy identify the run for a reader comparing two
	// documents.
	WrittenAt string `json:"writtenAt,omitempty"`
	WrittenBy string `json:"writtenBy,omitempty"`
}

type File struct {
	// Path is where the document was read from, for error messages.
	Path string
	// contains filtered or unexported fields
}

type InvalidError struct {
	Value Value
	// Want describes the accepted values, e.g. "envoy or agentgateway".
	Want string
}

type LoadOptions struct {
	// ConfigPath is the --config document. Empty falls back to $ATE_CONFIG,
	// and then to no file layer.
	ConfigPath string
	// NoDevEnv skips sourcing .ate-dev-env.sh even when it exists.
	NoDevEnv bool
}

type Origin int

type Outcome string

type ReportOptions struct {
	// OmitDefaults lists only the settings a channel supplied.
	//
	// The full listing is the default: the report answers "where did every
	// value come from", and a setting left out of it is one the reader has to
	// go and look up. Omitting is for callers that already know, or that have
	// more output than the configuration is worth.
	OmitDefaults bool
}

type RequiredError struct {
	Setting Setting
}

type ResolveOptions struct {
	// File is the parsed configuration document, or nil when --config was not
	// given.
	File *File
	// Env is the environment to read, normally Environ().
	Env map[string]string
}

type Resolved struct {
	// contains filtered or unexported fields
}

type Setting struct {
	// Key is the canonical name and the path in the configuration file,
	// dot-separated: "ateapi.postgres.connectionString".
	Key string
	// Env is the environment variable that supplies this setting.
	Env string
	// Flag is the command-line name, without the leading dashes.
	Flag string
	// Kind is the value type. Resolve parses raw strings against it.
	Kind ValueKind
	// Default applies when no channel supplies a value.
	Default string
	// Secret suppresses the value wherever configuration is displayed.
	Secret bool
	// Usage is the flag help text.
	Usage string
	// Commands restricts the flag to those command paths, named as they are
	// typed: "deploy benchmarks". Empty means a persistent flag on the root.
	//
	// Only the flag channel is scoped. The environment and the file reach
	// every setting, because a configuration document describes a whole
	// install and must parse the same way whichever subcommand reads it.
	Commands []string
}

type Value struct {
	Setting Setting
	Raw     string
	From    Origin
	// Supplied is false when Raw is the declared default. It distinguishes an
	// empty value a channel provided from one nobody set, which the Cloud SQL
	// instance setting depends on.
	Supplied bool
}

type ValueKind int