builder

type ClusterDeployment struct {
	Lid     mtypes.LeaseID
	Group   *mani.Group
	Sparams crd.ClusterSettings
	// contains filtered or unexported fields
}

type ContextKey string

type Deployment interface {
	Create() (*appsv1.Deployment, error)
	Update(obj *appsv1.Deployment) (*appsv1.Deployment, error)
	// contains filtered or unexported methods
}

type IClusterDeployment interface {
	LeaseID() mtypes.LeaseID
	ManifestGroup() *mani.Group
	UpdateManifest() bool
	ClusterParams() crd.ClusterSettings
	SetResourceVersion(string)
	GetResourceVersion() string
}

type IngressMode string

type Manifest interface {
	Create() (*crd.Manifest, error)
	Update(obj *crd.Manifest) (*crd.Manifest, error)
	Name() string
	// contains filtered or unexported methods
}

type NS interface {
	Create() (*corev1.Namespace, error)
	Update(obj *corev1.Namespace) (*corev1.Namespace, error)
	// contains filtered or unexported methods
}

type NetPol interface {
	Create() ([]*netv1.NetworkPolicy, error)
	Update(obj *netv1.NetworkPolicy) (*netv1.NetworkPolicy, error)
	// contains filtered or unexported methods
}

type PermissionType string

type PolicyRuleGenerator func(resource string, permType PermissionType) []rbacv1.PolicyRule

type PolicyRuleRegistry struct {
	// contains filtered or unexported fields
}

type ResourcePolicyMapping struct {
	// Name is the resource identifier (e.g., "logs", "events")
	Name string
	// Generator creates the policy rules for this resource based on permission type
	Generator PolicyRuleGenerator
}

type Role interface {
	Create() (*rbacv1.Role, error)
	Update(obj *rbacv1.Role) (*rbacv1.Role, error)
	// contains filtered or unexported methods
}

type RoleBinding interface {
	Create() (*rbacv1.RoleBinding, error)
	Update(obj *rbacv1.RoleBinding) (*rbacv1.RoleBinding, error)
	// contains filtered or unexported methods
}

type Service interface {
	Create() (*corev1.Service, error)
	Update(obj *corev1.Service) (*corev1.Service, error)
	Any() bool
	// contains filtered or unexported methods
}

type ServiceAccount interface {
	Create() (*corev1.ServiceAccount, error)
	Update(obj *corev1.ServiceAccount) (*corev1.ServiceAccount, error)
	// contains filtered or unexported methods
}

type ServiceCredentials interface {
	Create() (*corev1.Secret, error)
	Update(obj *corev1.Secret) (*corev1.Secret, error)
	// contains filtered or unexported methods
}

type Settings struct {
	// gcp:    NodePort
	// others: ClusterIP
	DeploymentServiceType corev1.ServiceType

	// gcp:    false
	// others: true
	DeploymentIngressStaticHosts bool
	// Ingress domain to map deployments to
	DeploymentIngressDomain string

	// Return load balancer host in lease status command ?
	// gcp:    true
	// others: optional
	DeploymentIngressExposeLBHosts bool

	// Global hostname for arbitrary ports
	ClusterPublicHostname string

	// NetworkPoliciesEnabled determines if NetworkPolicies should be installed.
	NetworkPoliciesEnabled bool

	// APIServerEndpoints are the addresses of all Kubernetes API server backends
	// (from the "kubernetes" endpoints in the default namespace, not the ClusterIP).
	// HA control planes have multiple backends; all must be allowed in network
	// policies because CNIs like Calico evaluate egress rules after DNAT.
	APIServerEndpoints []net.TCPAddr

	CPUCommitLevel     float64
	GPUCommitLevel     float64
	MemoryCommitLevel  float64
	StorageCommitLevel float64

	DeploymentRuntimeClass string

	// Name of the image pull secret to use in pod spec
	DockerImagePullSecretsName string

	// Ingress mode: "ingress" or "gateway-api"
	IngressMode IngressMode

	// Gateway name when using gateway-api mode
	GatewayName string

	// Gateway namespace when using gateway-api mode
	GatewayNamespace string

	// Gateway provider when using gateway-api mode
	GatewayProvider string
}

type StatefulSet interface {
	Create() (*appsv1.StatefulSet, error)
	Update(obj *appsv1.StatefulSet) (*appsv1.StatefulSet, error)
	// contains filtered or unexported methods
}

type Workload struct {
	// contains filtered or unexported fields
}

type WorkloadPermissions struct {
	Read []string
}