config

type API struct {
	Schema    string `validate:"required"`
	Host      string `validate:"required,hostname|ip"`
	Port      int    `validate:"required,min=1,max=65535"`
	APIPrefix string `validate:"required"`
}

type Auth struct {
	Username string `validate:"required"`
}

type Base interface {
	IsDebug() bool
}

type Client struct {
	Debug  bool   `validate:"-"`
	Output string `validate:"required"`
	API    API    `validate:"required"`
	Auth   Auth   `validate:"required"`
	HTTP   HTTP   `validate:"required"`
}

type DB struct {
	Connection string `validate:"required"`
}

type Enforcer struct {
	Disabled  bool `validate:"-"`
	Noop      bool `validate:"-"`
	NoopSleep int  `validate:"-"`
}

type HTTP struct {
	Timeout time.Duration
}

type Helm struct {
}

type LDAP struct {
	Host   string `validate:"required,hostname|ip"`
	Port   int    `validate:"required,min=1,max=65535"`
	BaseDN string `validate:"required"`

	// Filter is LDAP filter query for all users
	Filter string `validate:"required"`

	// FilterByName is LDAP filter query when doing user lookup by name
	FilterByName string `validate:"required"`

	LabelToAttributes map[string]string `validate:"required"`
}

type Server struct {
	Debug                bool            `validate:"-"`
	API                  API             `validate:"required"`
	UI                   UI              `validate:"omitempty"` // if UI is not defined, then UI will not be started
	DB                   DB              `validate:"required"`
	Helm                 Helm            `validate:"required"`
	Users                UserSources     `validate:"required"`
	SecretsDir           string          `validate:"omitempty,dir"` // secrets is not a first-class citizen yet, so it's not required
	Enforcer             Enforcer        `validate:"required"`
	DomainAdminOverrides map[string]bool `validate:"-"`
}

type UI struct {
	Schema string `validate:"required"`
	Host   string `validate:"required,hostname|ip"`
	Port   int    `validate:"required,min=1,max=65535"`
}

type UserSources struct {
	LDAP []LDAP   `validate:"dive"`
	File []string `validate:"dive,file"`
}

type Validator struct {
	// contains filtered or unexported fields
}