controllers

type EgressMITMTrustReconciler struct {
	client.Client

	// SystemNamespace is the namespace holding the egress MITM CA pool Secret.
	SystemNamespace string
	// contains filtered or unexported fields
}

type NetworkPolicyReconciler struct {
	client.Client
	Scheme *runtime.Scheme

	// SystemNamespace is the namespace atenet-router runs in. The generated
	// ingress policy admits only that namespace, so a value that does not
	// match the running router blocks every request to the worker pool.
	SystemNamespace string
}

type WorkerPoolReconciler struct {
	client.Client
	Scheme       *runtime.Scheme
	OTelEndpoint string
	// OTelMetricExportInterval is the OTEL_METRIC_EXPORT_INTERVAL propagated to
	// ateom pods. Empty keeps the SDK's default.
	OTelMetricExportInterval string
	// OTelMetricExportTimeout is the OTEL_METRIC_EXPORT_TIMEOUT propagated to
	// ateom pods. Empty keeps the SDK's default.
	OTelMetricExportTimeout string
	// OTelTracesSampler is the OTEL_TRACES_SAMPLER propagated to ateom pods.
	// Empty keeps the ateom binary's default.
	OTelTracesSampler string
	// OTelTracesSamplerArg is the OTEL_TRACES_SAMPLER_ARG propagated to ateom
	// pods. Ignored unless OTelTracesSampler is set.
	OTelTracesSamplerArg string
	// OTelLogsExporter is the OTEL_LOGS_EXPORTER propagated to ateom pods.
	// Empty keeps the ateom binary's default.
	OTelLogsExporter string
	// SystemNamespace is the namespace substrate's control plane runs in, and
	// AteletServiceAccount / RouterServiceAccount are the ServiceAccounts those
	// components run as. Together they name the SPIFFE identities that atunnel
	// authenticates inside each worker, which is why the ServiceAccount names
	// are configuration and not constants: a deployment that prefixes
	// resource names changes them.
	SystemNamespace      string
	AteletServiceAccount string
	RouterServiceAccount string
	// contains filtered or unexported fields
}