app

type AWSClient interface {
	Region() string
	AccountID(context.Context) (string, error)
	EnsureIssuer(context.Context, State, []byte, []byte) error
	CheckIssuerObjects(context.Context, State, []byte, []byte) error
	EnsureOIDCProvider(context.Context, State) (string, error)
	CheckOIDCProvider(context.Context, State) error
	EnsureRole(context.Context, State, Binding) (string, error)
	EnsureDemoPolicy(context.Context, State, DemoPolicyRequest) (DemoPolicyDetails, error)
	AssumeRoleWithWebIdentity(context.Context, string, string, int32) (string, error)
	DeleteDemoPolicy(context.Context, State, DemoPolicyRequest) (bool, error)
	CleanupRole(context.Context, State, Binding) (bool, error)
	CleanupProvider(context.Context, State) (bool, error)
	CleanupIssuer(context.Context, State, bool) (bool, error)
}

type AWSFactory interface {
	New(context.Context, AWSOptions) (AWSClient, error)
}

type AWSOptions struct {
	Region  string
	Profile string
}

type ActualAWSFactory struct{}

type Binding struct {
	Namespace      string   `json:"namespace"`
	ServiceAccount string   `json:"serviceAccount"`
	RoleName       string   `json:"roleName"`
	RoleARN        string   `json:"roleARN"`
	PolicyARNs     []string `json:"policyARNs"`
}

type DemoPolicyDetails struct {
	Status           string
	PolicyName       string
	PolicyARN        string
	AccountID        string
	RoleName         string
	DefaultVersionID string
	Document         []byte
	Tags             map[string]string
}

type DemoPolicyRequest struct {
	PolicyName string
	RoleName   string
	Document   []byte
	Tags       map[string]string
}

type KubeClient interface {
	Raw(context.Context, string) ([]byte, error)
	CheckCertManager(context.Context) error
	Apply(context.Context, string) error
	WaitDeploymentAvailable(context.Context, string, string, string) error
	CheckServiceAccountPermissions(context.Context, string, string, []string, string) error
	CheckWebhookMutation(context.Context, string, string) error
	ServiceAccountExists(context.Context, string, string) (bool, error)
	CreateServiceAccount(context.Context, string, string) error
	AnnotateServiceAccount(context.Context, string, string, map[string]string) error
	RemoveServiceAccountAnnotations(context.Context, string, string, []string) error
	ServiceAccountRoleARN(context.Context, string, string) (string, error)
	CreateToken(context.Context, string, string, string, string) (string, error)
	PodExists(context.Context, string, string) (bool, error)
	RunDemoPod(context.Context, string, string, string, string, string) ([]byte, error)
	DeletePod(context.Context, string, string) error
}

type Kubectl struct {
	ContextName string
}

type Progress interface {
	Start(step string)
	Detail(key string, value string)
	Info(key string, value string)
	Success(message string)
	Warn(message string)
	Fail(message string)
}

type Runner struct {
	AWSFactory        AWSFactory
	KubectlFactory    func(contextName string) KubeClient
	IssuerIDGenerator func() (string, error)
	Env               func(string) string
	HomeDir           func() (string, error)
}

type State struct {
	Name      string    `json:"name"`
	Region    string    `json:"region"`
	IssuerID  string    `json:"issuerID,omitempty"`
	Bucket    string    `json:"bucket"`
	IssuerURL string    `json:"issuerURL"`
	AccountID string    `json:"accountID"`
	Profile   string    `json:"profile,omitempty"`
	Bindings  []Binding `json:"bindings,omitempty"`
}