config

package

Go to main page

Versions in this module

v0

v0.0.7

Oct 27, 2026

Changes in this version

+ const KMSKubernetesAuthMountDefault

+ const KMSProviderKMSv2

+ const KMSProviderTransit

+ const KMSServiceAccountTokenDefault

+ const KMSStartupTimeoutDefault

+ const KMSStartupTimeoutLower

+ const KMSStartupTimeoutUpper

+ const KMSTimeoutDefault

+ const KMSTimeoutLower

+ const KMSTimeoutUpper

+ const KMSTransitMountDefault

+ const ModelRelayListenerDashboard

+ const ModelRelayListenerGitProxy

+ const ModelRelayMaxModels

+ const ModelRelayMaxOutputTokensUpper

+ const PreviousRootPassphrase

+ const PushScanMaxObjectMBUpper

+ const PushScanMaxPushMBUpper

+ const PushScanSecondsUpper

+ var DefaultModelRelayModels = []string

+ func KMSv2SocketPath(endpoint string) (string, error)

+ func ValidateModelRelayConfig(m ModelRelayConfig) error

+ func ValidateModelRelayModels(models []string) error

+ func ValidateSecrets(s SecretsConfig) error

type BackgroundConfig

+ func (b *BackgroundConfig) ClampFor(section string) []string

type Config

+ Copilot CopilotConfig

+ Secrets SecretsConfig

+ func (c *Config) ModelFor(providerName string) string

type ContainerEgressFilterConfig

+ DropDenied bool

type ContainerExecutorConfig

+ Labels map[string]string

+ type CopilotConfig struct

+ Background BackgroundConfig

+ Effort string

+ Model string

type ExecutorsConfig

+ IsolationEvidence string

+ ModelRelay ModelRelayConfig

+ func (e ExecutorsConfig) ConfiguredExecutorLabels() map[string]map[string]string

type GitProxyConfig

+ PushScan string

+ PushScanMaxObjectMB int

+ PushScanMaxPushMB int

+ PushScanSeconds int

+ func (g GitProxyConfig) PushScanLimits() gitproxy.ScanLimits

+ func (g GitProxyConfig) PushScanMode() gitproxy.ScanMode

+ type KMSConfig struct

+ KMSv2 KMSv2Config

+ Name string

+ Provider string

+ StartupTimeout string

+ Timeout string

+ Transit KMSTransitConfig

+ func (k KMSConfig) Configured() bool

+ func (k KMSConfig) EffectiveName() string

+ func (k KMSConfig) EffectiveStartupTimeout() time.Duration

+ func (k KMSConfig) EffectiveTimeout() time.Duration

+ type KMSTransitConfig struct

+ Address string

+ CAFile string

+ Key string

+ Kubernetes KMSTransitKubernetesAuth

+ Mount string

+ Namespace string

+ TokenFile string

+ func (t KMSTransitConfig) EffectiveMount() string

+ type KMSTransitKubernetesAuth struct

+ Mount string

+ Role string

+ TokenFile string

+ func (a KMSTransitKubernetesAuth) EffectiveMount() string

+ func (a KMSTransitKubernetesAuth) EffectiveTokenFile() string

+ type KMSv2Config struct

+ Endpoint string

type KubernetesExecutorConfig

+ Labels map[string]string

+ type ModelRelayConfig struct

+ Broken string

+ Enabled bool

+ HubCredential []string

+ Listener string

+ MaxOutputTokens int

+ Models []string

+ UpstreamBaseURL string

+ func (m ModelRelayConfig) EffectiveModels() []string

+ func (m ModelRelayConfig) HubCredentialAllowed(projectPath, executorID string) bool

+ func (m ModelRelayConfig) ListenerName() string

+ type SecretsConfig struct

+ KMS KMSConfig

+ KMSPrevious KMSConfig

+ PreviousRoot string

+ func (s SecretsConfig) UsesKMS() bool

v0.0.6

Oct 16, 2026

Changes in this version

+ const AuditAuthAPIKey

+ const AuditAuthBasic

+ const AuditAuthBearer

+ const AuditAuthSplunk

+ const AuditFormatCEF

+ const AuditFormatJSON

+ const AuditForwardBatchSizeDefault

+ const AuditForwardBatchSizeLower

+ const AuditForwardBatchSizeUpper

+ const AuditForwardMaxBatchBytesDefault

+ const AuditForwardMaxBatchBytesLower

+ const AuditForwardMaxBatchBytesUpper

+ const AuditForwardMaxLagDefault

+ const AuditForwardMaxLagLower

+ const AuditForwardMaxLagUpper

+ const AuditForwardMaxMessageBytesDefault

+ const AuditForwardMaxMessageBytesLower

+ const AuditForwardMaxMessageBytesUpper

+ const AuditForwardMaxSinks

+ const AuditForwardTimeoutDefault

+ const AuditForwardTimeoutLower

+ const AuditForwardTimeoutUpper

+ const AuditSinkFile

+ const AuditSinkHTTPS

+ const AuditSinkSyslog

+ const AuditStartLatest

+ const AuditStartOldest

+ const AuditTransportTCP

+ const AuditTransportTLS

+ const AuditVariantSplunkHEC

+ const NotificationReminderLead

+ const NotificationTimeoutDefault

+ const NotificationTimeoutLower

+ const NotificationTimeoutUpper

+ const NotificationsMaxWebhooks

+ const NotifyDiscord

+ const NotifyEventRequestApproved

+ const NotifyEventRequestDenied

+ const NotifyEventRequestFiled

+ const NotifyEventRequestLapsed

+ const NotifyEventRequestReminder

+ const NotifyEventRequestWithdrawn

+ const NotifyEventTokenWaiting

+ const NotifyJSON

+ const NotifySlack

+ const NotifyTeams

+ func CheckOutsideCloopOnDisk(path string) error

+ func IsNotificationEvent(name string) bool

+ func NotificationEvents() []string

+ func NotificationTypes() []string

+ func SaveUIInstanceNotifications(path string, n NotificationsConfig) error

+ func SplitSecretRef(ref string) (name, key string)

+ func SyslogFacility(name string) (int, bool)

+ func ValidateAuditForward(c AuditForwardConfig) error

+ func ValidateAuditForwardFile(path string) error

+ func ValidateAuditForwardSink(s AuditForwardSink) error

+ func ValidateNotificationWebhook(w NotificationWebhook) error

+ func ValidateNotifications(c NotificationsConfig) error

+ func ValidateWebhookURL(raw string) error

+ func WebhookHost(raw string) string

type AuditConfig

+ Forward AuditForwardConfig

+ type AuditForwardConfig struct

+ Hostname string

+ MaxLag string

+ Sinks []AuditForwardSink

+ func (c AuditForwardConfig) EffectiveMaxLag() time.Duration

+ type AuditForwardSink struct

+ Address string

+ AllowPlaintextLoopback bool

+ AppName string

+ AuthScheme string

+ BatchSize int

+ CAFile string

+ ClientCert string

+ ClientKeySecret string

+ Facility string

+ Format string

+ MaxBatchBytes int

+ MaxMessageBytes int

+ Name string

+ Path string

+ ServerName string

+ SplunkIndex string

+ SplunkSource string

+ SplunkSourceType string

+ Start string

+ Timeout string

+ TokenSecret string

+ Transport string

+ Type string

+ URL string

+ Variant string

+ func (s AuditForwardSink) EffectiveAppName() string

+ func (s AuditForwardSink) EffectiveAuthScheme() string

+ func (s AuditForwardSink) EffectiveBatchSize() int

+ func (s AuditForwardSink) EffectiveFacility() int

+ func (s AuditForwardSink) EffectiveFormat() string

+ func (s AuditForwardSink) EffectiveMaxBatchBytes() int

+ func (s AuditForwardSink) EffectiveMaxMessageBytes() int

+ func (s AuditForwardSink) EffectiveStart() string

+ func (s AuditForwardSink) EffectiveTimeout() time.Duration

+ func (s AuditForwardSink) EffectiveTransport() string

+ func (s AuditForwardSink) Endpoint() string

+ func (s AuditForwardSink) Plaintext() bool

+ func (s AuditForwardSink) StoreRefs() []string

type Config

+ Notifications NotificationsConfig

+ type NotificationWebhook struct

+ AllowAddresses []string

+ CAFile string

+ Events []string

+ Name string

+ Timeout string

+ Type string

+ URL string

+ URLEnv string

+ func (w NotificationWebhook) AllowedPrefixes() []netip.Prefix

+ func (w NotificationWebhook) EffectiveTimeout() time.Duration

+ func (w NotificationWebhook) Endpoint() string

+ func (w NotificationWebhook) Wants(event string) bool

+ type NotificationsConfig struct

+ DashboardURL string

+ Webhooks []NotificationWebhook

v0.0.5

Oct 12, 2026

Changes in this version

+ const AuditCheckpointIntervalDefault

+ const AuditCheckpointIntervalLower

+ const AuditCheckpointIntervalUpper

+ const EnvMinFreeDiskMB

+ const FailoverMaxAttemptsDefault

+ const FailoverMaxAttemptsLower

+ const FailoverMaxAttemptsUpper

+ const MaxFeatureBundleMB

+ const MinFreeDiskMBDefault

+ const MinFreeDiskMBLower

+ const MinFreeDiskMBUpper

+ const MonitorTLSAuto

+ const OIDCDeviceApprovalMaxAgeMinutesDefault

+ const OIDCDeviceApprovalMaxAgeMinutesLower

+ const OIDCDeviceApprovalMaxAgeMinutesUpper

+ const PinnedWriteBackBytesLower

+ const PinnedWriteBackBytesUpper

+ const RBACOffConsequence

+ const RBACOffRemedy

+ const SCIMOffboardAfterDaysUpper

+ const SCIMRateLimitDefault

+ const SCIMRateLimitPerMinuteLower

+ const SCIMRateLimitPerMinuteUpper

+ const WriteBackPush

+ func FailoverMaxAttemptsError(v int) error

+ func MinFreeDiskMBError(v int) error

+ func PathInsideCloopDir(path string) bool

+ func RBACOff(issuer string) string

+ func SaveUIInstanceCI(path string, c CIConfig) error

+ func SaveUIInstanceMinFreeDisk(path string, mb int) error

+ func SaveUIInstanceSTTKey(path, key string) error

+ func SaveUIInstanceTelemetry(path string, t TelemetryConfig) error

+ func UIInstancePorts(workdir string) ([]int, error)

+ func ValidFailoverMaxAttempts(v int) bool

+ func ValidMinFreeDiskMB(v int) bool

+ func ValidPinnedWriteBackBytes(v int64) bool

+ func ValidateAdvertiseURL(u string) error

+ func ValidateAuditCheckpointFile(path string) error

+ func ValidateAuditCheckpoints(c AuditCheckpointsConfig) error

+ func ValidateRemoteExecutors(r RemoteExecutorsConfig) error

+ func WrittenYAML(workdir string) ([]byte, bool)

+ type AuditCheckpointsConfig struct

+ File string

+ Interval string

+ Stderr *bool

+ func (c AuditCheckpointsConfig) EffectiveInterval() time.Duration

+ func (c AuditCheckpointsConfig) Enabled() bool

+ func (c AuditCheckpointsConfig) StderrEnabled() bool

type AuditConfig

+ Checkpoints AuditCheckpointsConfig

+ type ClusterConfig struct

+ AdvertiseURL string

+ Exclusive bool

+ PeerCAFile string

+ PeerServerName string

+ func (c ClusterConfig) Validate() error

type Config

+ func (c *Config) LoadRepairs() []LoadRepair

type ExecutorsConfig

+ Failover FailoverConfig

+ FeatureBundleMB int

+ HarnessCredentialExempt []string

+ Remote RemoteExecutorsConfig

+ WriteBack string

+ func (e ExecutorsConfig) ApplyRatchets()

+ func (e ExecutorsConfig) FeatureBundleBytes() int64

+ func (e ExecutorsConfig) MetadataExposures() []MetadataExposure

+ func (e ExecutorsConfig) RunWriteBackPush() bool

+ type FailoverConfig struct

+ MaxAttempts *int

+ func (f FailoverConfig) MaxRedispatches() int

type GitProxyConfig

+ TLS string

+ func (g GitProxyConfig) AutoTLS() bool

type KubeGuardConfig

+ AuditAllowed bool

+ TLS string

+ func (k KubeGuardConfig) AutoTLS() bool

+ func (k KubeGuardConfig) CABundle() ([]byte, error)

type KubernetesExecutorConfig

+ GitCABundle kubernetes.GitCABundle

+ type LoadRepair struct

+ Detail string

+ Field string

+ File string

+ SwitchedOff string

+ type MetadataExposure struct

+ Finding cloudmeta.Finding

+ InForce bool

+ Key string

+ func (x MetadataExposure) Error() string

type OIDCConfig

+ CLIIdleTimeoutHours int

+ CLISessionTTLHours int

+ DeviceApprovalMaxAgeMinutes int

+ DeviceLogin *bool

+ RequireRBAC bool

+ SCIM SCIMConfig

+ func (o OIDCConfig) AuthConfig() oidcauth.Config

+ func (o OIDCConfig) AuthzBindings() []authz.Binding

+ func (o OIDCConfig) AuthzConfig(runtime authz.RuntimeSource) authz.Config

+ func (o OIDCConfig) DeviceLoginEnabled() bool

+ func (o OIDCConfig) EffectiveCLIIdleTimeoutHours() int

+ func (o OIDCConfig) EffectiveCLISessionTTLHours() int

+ func (o OIDCConfig) EffectiveDeviceApprovalMaxAgeMinutes() int

+ func (o OIDCConfig) RBACEnforced() (bool, error)

+ func (o OIDCConfig) RequireRBACRefusal() error

type OrchestratorConfig

+ MinFreeDiskMB *int

+ func (o OrchestratorConfig) EffectiveMinFreeDiskMB() int

type QuotasConfig

+ func (q QuotasConfig) QuotaConfig() quota.Config

+ type RemoteExecutorsConfig struct

+ MaxPinnedWriteBackBytes int64

+ MaxPinnedWriteBackTotalBytes int64

+ func (r RemoteExecutorsConfig) PinnedWriteBackLimits() (perExecutor, total int64)

+ type SCIMConfig struct

+ MatchClaim string

+ OffboardAfterDays int

+ RateLimitPerMinute int

+ func (c SCIMConfig) EffectiveOffboardAfterDays() int

+ func (c SCIMConfig) EffectiveRateLimitPerMinute() int

type TelemetryConfig

+ Sources []string

+ func (t TelemetryConfig) Collects(source string) bool

type UIConfig

+ AllowUnauthenticatedNetwork bool

+ AllowedHosts []string

+ Cluster ClusterConfig

+ Listen string

+ ProjectsRoot string

+ TrustedProxies []string

+ func (u UIConfig) PublicURL() (url, key string)

v0.0.4

Sep 27, 2026

v0.0.3

Sep 27, 2026

Changes in this version

+ const OIDCDisabledSentinel

+ func Explicit(workdir string) bool

+ func SaveUIInstanceOIDC(path string, o OIDCConfig) error

+ func UIInstanceConfigPath(workdir string, port int) string

type Config

+ func LoadUIInstance(workdir string, port int) (*Config, string, error)

type ExecutorsConfig

+ AutoInstallHarness *bool

+ func (e ExecutorsConfig) AutoInstallHarnessAllowed() bool

v0.0.2

Sep 17, 2026

Changes in this version

+ const CIClockSkewDefault

+ const CIClockSkewMax

+ const CIExchangeKeepDefault

+ const CIExchangeKeepMax

+ const KubeGuardSessionMinutesUpper

+ const OIDCClockSkewSecondsDefault

+ const OIDCClockSkewSecondsUpper

+ const OIDCMaxClaimAgeMinutesDefault

+ const OIDCMaxClaimAgeMinutesLower

+ const OIDCMaxClaimAgeMinutesUpper

+ const RetentionKeepEverything

+ const RetentionProviderCallBodyAgeDaysLower

+ const RetentionProviderCallBodyAgeDaysUpper

+ const RetentionRowsLower

+ const RetentionRowsUpper

+ const RetentionTelemetryMaxAgeDaysLower

+ const RetentionTelemetryMaxAgeDaysUpper

+ var DefaultCIModels = []string

+ func ExecutorLimitWarnings(l ExecutorLimitsConfig) []string

+ func ValidateExecutorLimits(l ExecutorLimitsConfig) error

+ func ValidateKubeGuardConfig(k KubeGuardConfig) error

+ type CIConfig struct

+ Audience string

+ ClockSkewSeconds int

+ DefaultModels []string

+ Enabled bool

+ ExchangeKeepRecords int

+ Issuer string

+ UpstreamAuthToken string

+ UpstreamBaseURL string

+ func (c CIConfig) ClockSkew() int

+ func (c CIConfig) ExchangeKeep() int

+ func (c CIConfig) Models() []string

type Config

+ STT STTConfig

+ type ExecutorLimitsConfig struct

+ MaxCPU float64

+ MaxDisk string

+ MaxMemory string

+ MaxPIDs int

+ func (l ExecutorLimitsConfig) Ceiling() (executor.ResourceCeiling, error)

+ func (l ExecutorLimitsConfig) IsZero() bool

type ExecutorsConfig

+ KubeGuard KubeGuardConfig

+ Limits ExecutorLimitsConfig

+ MinAgentBuild string

+ OrphanSweepIntervalMinutes *int

+ func (e ExecutorsConfig) OrphanSweepInterval() time.Duration

+ type KubeGuardConfig struct

+ AdvertiseURL string

+ CAFile string

+ CertFile string

+ Enabled bool

+ KeyFile string

+ ListenAddr string

+ MinTLSVersion string

+ Namespaces []string

+ Resources []string

+ SessionMinutes int

+ Verbs []string

+ func (k KubeGuardConfig) Policy() kubeguard.Policy

+ func (k KubeGuardConfig) SessionTTLMinutes() int

type KubernetesExecutorConfig

+ NetworkPolicyEnforced *bool

type OIDCConfig

+ ClockSkewSeconds int

+ MaxClaimAgeMinutes int

+ RequireIdP bool

+ func (o OIDCConfig) EffectiveClockSkew() time.Duration

+ func (o OIDCConfig) EffectiveMaxClaimAgeMinutes() int

type RetentionConfig

+ CostMaxRows int

+ EventMaxRows int

+ ProviderCallBodyAgeDays int

+ ProviderCallMaxRows int

+ StepMaxRows int

+ TelemetryMaxAgeDays int

+ type STTConfig struct

+ Endpoint string

+ GroqAPIKey string

+ Language string

+ Model string

+ Provider string

+ WhisperModel string

+ type TelemetryConfig struct

+ Enabled *bool

+ func (t TelemetryConfig) Effective() bool

type UIConfig

+ AutoResumeOnCapReset *bool

+ CI CIConfig

+ Telemetry TelemetryConfig

v0.0.1

Sep 13, 2026

Changes in this version

+ const AlertThresholdMax

+ const AlertThresholdMin

+ const AuditRetentionDaysLower

+ const AuditRetentionDaysUpper

+ const BackgroundGraceSecondsMax

+ const BackgroundWaitMinutesMax

+ const ContainerCPUsUpper

+ const ContainerDiskMBLower

+ const ContainerDiskMBUpper

+ const ContainerMemoryMBLower

+ const ContainerMemoryMBUpper

+ const ContainerPIDsLower

+ const ContainerPIDsUpper

+ const EgressDialTimeoutSecondsUpper

+ const EgressMaxSessionMinutesUpper

+ const EnvOIDCClientSecret

+ const GitProxySessionMinutesUpper

+ const KubernetesMaxConcurrentUpper

+ const KubernetesSecondsUpper

+ const MaxParallelLower

+ const MaxParallelUpper

+ const MaxRequestBodyBytesDefault

+ const MaxRequestBodyBytesLower

+ const MaxRequestBodyBytesUpper

+ const OIDCIdleTimeoutHoursDefault

+ const OIDCIdleTimeoutHoursLower

+ const OIDCIdleTimeoutHoursUpper

+ const OIDCRefreshIntervalMinutesDefault

+ const OIDCRefreshIntervalMinutesLower

+ const OIDCRefreshIntervalMinutesUpper

+ const OIDCSessionTTLHoursDefault

+ const OIDCSessionTTLHoursLower

+ const OIDCSessionTTLHoursUpper

+ const OrchestratorTaskTimeoutMinutesDefault

+ const OrchestratorTaskTimeoutMinutesLower

+ const OrchestratorTaskTimeoutMinutesUpper

+ const RateLimitBurstLower

+ const RateLimitRPSLower

+ const RetentionArchiveMaxAgeDaysLower

+ const RetentionArchiveMaxAgeDaysUpper

+ const RetentionArchiveMaxMBLower

+ const RetentionArchiveMaxMBUpper

+ const RetentionIntervalHoursLower

+ const RetentionIntervalHoursUpper

+ const RetentionKeepSnapshotsLower

+ const RetentionKeepSnapshotsUpper

+ const RetentionVacuumFreeRatioLower

+ const RetentionVacuumMaxInlineMBLower

+ const RetentionVacuumMaxInlineMBUpper

+ const RetentionVacuumMinFreeMBLower

+ const RetentionVacuumMinFreeMBUpper

+ const WebSocketConnsDefault

+ const WebSocketConnsLower

+ const WebSocketConnsPerIPDefault

+ const WebSocketConnsPerIPLower

+ const WebSocketConnsPerIPUpper

+ const WebSocketConnsUpper

+ var ErrMemoryTooLarge = ErrSizeTooLarge

+ var ErrSizeTooLarge = errors.New("config: size exceeds the maximum")

+ func ClampDiskMB(s string) (mb int, clamped bool, err error)

+ func ClampMemoryMB(s string) (mb int, clamped bool, err error)

+ func ConfigPath(workdir string) string

+ func ExecutorWarnings(e ExecutorsConfig) []string

+ func ParseDiskMB(s string) (int, error)

+ func ParseMemoryMB(s string) (int, error)

+ func SandboxWarnings(s SandboxConfig, executorsIsolated bool) []string

+ func Save(workdir string, cfg *Config) error

+ func ValidateContainerExecutor(c ContainerExecutorConfig) error

+ func ValidateEgressConfig(e EgressConfig) error

+ func ValidateExecutors(e ExecutorsConfig) error

+ func ValidateGitProxyConfig(g GitProxyConfig) error

+ func ValidateKubernetesExecutor(k KubernetesExecutorConfig) error

+ func ValidateSandbox(s SandboxConfig) error

+ func WriteDefault(workdir string) error

+ type AnthropicConfig struct

+ APIKey string

+ BaseURL string

+ MaxTokens int

+ Model string

+ Temperature *float64

+ TopP *float64

+ type AuditConfig struct

+ ExportDir string

+ PruneOnMaintain bool

+ RetentionDays int

+ type BackgroundConfig struct

+ Disabled bool

+ GraceSeconds int

+ KeepOrphans bool

+ WaitMinutes int

+ func (b *BackgroundConfig) Clamp() []string

+ type BackupConfig struct

+ AutoBackup bool

+ Dir string

+ IntervalHours int

+ KeepCount int

+ func (b BackupConfig) EffectiveIntervalHours() int

+ func (b BackupConfig) EffectiveKeepCount() int

+ type BudgetConfig struct

+ AlertThresholdPct int

+ BlockExtraUsage *bool

+ DailyTokenLimit int

+ DailyUSDLimit float64

+ GlobalTokenPct float64

+ GlobalUSDPct float64

+ MonthlyUSD float64

+ func (b BudgetConfig) ShouldBlockExtraUsage() bool

+ type ClaudeCodeConfig struct

+ Background BackgroundConfig

+ Effort string

+ MaxFiveHourPct float64

+ MaxWeeklyOpusPct float64

+ MaxWeeklyPct float64

+ MaxWeeklySonnetPct float64

+ Model string

+ type Config struct

+ Anthropic AnthropicConfig

+ Audit AuditConfig

+ Backup BackupConfig

+ Budget BudgetConfig

+ CalibrationFactor float64

+ ClaudeCode ClaudeCodeConfig

+ Executors ExecutorsConfig

+ GitHub GitHubConfig

+ Hooks HooksConfig

+ LogJSON bool

+ MaxParallel int

+ Mock MockConfig

+ Notify NotifyConfig

+ Ollama OllamaConfig

+ OpenAI OpenAIConfig

+ Orchestrator OrchestratorConfig

+ Provider string

+ RateLimit RateLimitConfig

+ Retention RetentionConfig

+ Router RouterConfig

+ Sandbox SandboxConfig

+ StepTimeout string

+ Sync SyncConfig

+ Tracing TracingConfig

+ UI UIConfig

+ Watch WatchConfig

+ Webhook WebhookConfig

+ func Default() *Config

+ func Load(workdir string) (*Config, error)

+ func (c *Config) ValidateNumeric() error

+ type ContainerEgressFilterConfig struct

+ AllowCIDRs []string

+ AllowPorts []int

+ AllowPublicInternet bool

+ Broker string

+ Enabled bool

+ HostPatterns []string

+ Internal bool

+ Resolvers []string

+ type ContainerExecutorConfig struct

+ AllowHosts []string

+ AllowRootUser bool

+ CPUs float64

+ EgressFilter ContainerEgressFilterConfig

+ Enabled bool

+ ExtraArgs []string

+ ID string

+ Image string

+ Memory string

+ Network string

+ OCIRuntime string

+ OrphanGracePeriodSeconds int64

+ PIDsLimit int

+ Runtime string

+ SELinuxLabel string

+ func (c ContainerExecutorConfig) DriverOptions() (container.Options, error)

+ type CosignIdentity struct

+ Issuer string

+ SubjectRegexp string

+ type EgressConfig struct

+ AdvertiseAddr string

+ DefaultMaxBytesDown string

+ DefaultMaxBytesUp string

+ DialTimeoutSeconds int

+ Enabled bool

+ ListenAddr string

+ MaxSessionMinutes int

+ type ExecutorsConfig struct

+ AllowHostProcess *bool

+ Container ContainerExecutorConfig

+ Egress EgressConfig

+ GitProxy GitProxyConfig

+ Kubernetes KubernetesExecutorConfig

+ func (e *ExecutorsConfig) SetHostProcessAllowed(allowed bool)

+ func (e ExecutorsConfig) HostProcessAllowed() bool

+ func (e ExecutorsConfig) HostProcessExplicit() bool

+ type GitHubConfig struct

+ Labels []string

+ Repo string

+ Token string

+ type GitProxyConfig struct

+ AdvertiseURL string

+ AllowDelete bool

+ AllowedRefs []string

+ CertFile string

+ Enabled bool

+ KeyFile string

+ ListenAddr string

+ MinTLSVersion string

+ SessionMinutes int

+ func (g GitProxyConfig) Policy() gitproxy.Policy

+ func (g GitProxyConfig) SessionTTLMinutes() int

+ type HooksConfig struct

+ PostPlan string

+ PostTask string

+ PostTaskReview bool

+ PrePlan string

+ PreTask string

+ Timeout string

+ type ImagePolicyConfig struct

+ AllowedRegistries []string

+ AllowedRepos []string

+ CosignIdentities []CosignIdentity

+ CosignPublicKeys []string

+ DefaultRegistry string

+ RequireDigest bool

+ RequireSignature bool

+ func (c ImagePolicyConfig) Policy() imagepolicy.Policy

+ type KubernetesEgressFilterConfig struct

+ AllowClusterDNS *bool

+ AllowPublicInternet bool

+ CIDRs []string

+ Enabled bool

+ Ports []int

+ Resolvers []string

+ type KubernetesExecutorConfig struct

+ ActiveDeadlineSeconds int64

+ CPULimit string

+ CPURequest string

+ Context string

+ EgressFilter KubernetesEgressFilterConfig

+ Enabled bool

+ EphemeralStorageLimit string

+ ID string

+ Image string

+ ImagePullPolicy string

+ ImagePullSecrets []string

+ InCluster bool

+ KeepCompletedPods bool

+ KillGracePeriodSeconds int64

+ KubeconfigSecret string

+ MaxConcurrent int

+ MemoryLimit string

+ MemoryRequest string

+ Namespace string

+ NodeSelector map[string]string

+ OrphanGracePeriodSeconds int64

+ RunAsGroup int64

+ RunAsUser int64

+ RuntimeClass string

+ ServiceAccount string

+ TerminationGracePeriodSeconds int64

+ Tolerations []kubernetes.Toleration

+ WorkspaceSizeLimit string

+ func (k KubernetesExecutorConfig) DriverOptions() (kubernetes.Options, error)

+ type MockConfig struct

+ Default string

+ ResponsesFile string

+ type NotifyConfig struct

+ CustomWebhook string

+ Desktop bool

+ DiscordWebhook string

+ SlackWebhook string

+ type OIDCConfig struct

+ AdminEmails []string

+ ClientID string

+ ClientSecret string

+ CookieSecure string

+ DefaultRole string

+ Enabled bool

+ IdleTimeoutHours int

+ Issuer string

+ RedirectURL string

+ RefreshIntervalMinutes int

+ RoleMappings []RoleMapping

+ Scopes []string

+ SessionTTLHours int

+ func (o OIDCConfig) EffectiveIdleTimeoutHours() int

+ func (o OIDCConfig) EffectiveRefreshIntervalMinutes() int

+ func (o OIDCConfig) EffectiveSessionTTLHours() int

+ type OllamaConfig struct

+ BaseURL string

+ MaxTokens int

+ Model string

+ Temperature *float64

+ TopP *float64

+ type OpenAIConfig struct

+ APIKey string

+ BaseURL string

+ FrequencyPenalty *float64

+ MaxTokens int

+ Model string

+ Temperature *float64

+ TopP *float64

+ type OrchestratorConfig struct

+ TaskTimeoutMinutes int

+ func (o OrchestratorConfig) EffectiveTaskTimeoutMinutes() int

+ type QuotaBinding struct

+ Claim string

+ Limits map[string]float64

+ Value string

+ type QuotasConfig struct

+ Bindings []QuotaBinding

+ Defaults map[string]float64

+ func (q QuotasConfig) Configured() bool

+ type RateLimitConfig struct

+ Burst int

+ RequestsPerSecond float64

+ type RetentionConfig struct

+ ArchiveMaxAgeDays int

+ ArchiveMaxMB int

+ Enabled *bool

+ IntervalHours int

+ KeepSnapshots int

+ VacuumFreeRatio float64

+ VacuumMaxInlineMB int

+ VacuumMinFreeMB int

+ func (r RetentionConfig) RetentionEnabled() bool

+ type RoleMapping struct

+ Claim string

+ Executor string

+ Project string

+ Role string

+ Value string

+ type RouterConfig struct

+ Routes map[string]string

+ type SandboxConfig struct

+ ImagePolicy ImagePolicyConfig

+ type SyncConfig struct

+ Branch string

+ Remote string

+ type TLSConfig struct

+ CertFile string

+ KeyFile string

+ MinVersion string

+ func (t TLSConfig) Enabled() bool

+ func (t TLSConfig) Validate() error

+ type TracingConfig struct

+ Enabled bool

+ Endpoint string

+ ServiceName string

+ type UIConfig struct

+ AllowedOrigins []string

+ AllowedWSOrigins []string

+ ExternalURL string

+ MaxRequestBodyBytes int64

+ MaxWebSocketConns int

+ MaxWebSocketConnsPerIP int

+ OIDC OIDCConfig

+ Quotas QuotasConfig

+ TLS TLSConfig

+ func (u UIConfig) EffectiveMaxRequestBodyBytes() int64

+ func (u UIConfig) EffectiveMaxWebSocketConns() int

+ func (u UIConfig) EffectiveMaxWebSocketConnsPerIP() int

+ type WatchConfig struct

+ Debounce string

+ Globs []string

+ type WebhookConfig struct

+ Events []string

+ Headers map[string]string

+ Secret string

+ URL string

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL