config

type Bastion struct {
	Host `yaml:",inline"`

	Hosts        []Host `yaml:"hosts"`
	IdentityFile string `yaml:"identity_file"`
	User         string `yaml:"user"`
}

type ClientConfig struct {
	ClientDir       string `json:"client_dir" yaml:"client_dir"`
	ConfigFile      string `json:"config_file" yaml:"config_file"`
	CacheDir        string `json:"cache_dir" yaml:"cache_dir"`
	KMSAuthCacheDir string `json:"kmsauth_cache_dir" yaml:"kmsauth_cache_dir"`

	SSHPrivateKey string `json:"ssh_private_key" yaml:"ssh_private_key"`

	// cert related
	CertLifetime Duration `json:"cert_lifetime" yaml:"cert_lifetime,inline"`
	RemoteUsers  []string `json:"remote_users" yaml:"remote_users"`
	BastionIPS   []string `json:"bastion_ips" yaml:"bastion_ips"`
}

type Config struct {
	Version int `json:"version" yaml:"version"`

	ClientConfig ClientConfig `json:"client_config" yaml:"client_config"`
	LambdaConfig LambdaConfig `json:"lambda_config" yaml:"lambda_config"`
	SSHConfig    *SSHConfig   `json:"ssh_config,omitempty" yaml:"ssh_config,omitempty"`
}

type Duration struct {
	time.Duration
}

type Host struct {
	Pattern string `yaml:"pattern"`
}

type LambdaConfig struct {
	// RoleARN used to assume and invoke bless lambda
	RoleARN      string   `json:"role_arn" yaml:"role_arn"`
	FunctionName string   `json:"function_name" yaml:"function_name"`
	Regions      []Region `json:"regions,omitempty" yaml:"regions,omitempty"`
}

type Region struct {
	AWSRegion    string `json:"aws_region" yaml:"aws_region"`
	KMSAuthKeyID string `json:"kms_auth_key_id" yaml:"kms_auth_key_id"`
}

type SSHConfig struct {
	Bastions []Bastion `yaml:"bastions"`
}