defaults

const (
	Debug = false

	HubbleCAGenerate           = true
	HubbleCACommonName         = "hubble-ca.cilium.io"
	HubbleCAValidityDuration   = 3 * 365 * 24 * time.Hour
	HubbleCAConfigMapName      = "hubble-ca-cert"
	HubbleCAConfigMapNamespace = "kube-system"

	HubbleServerCertGenerate         = true
	HubbleServerCertCommonName       = "*.default.hubble-grpc.cilium.io"
	HubbleServerCertValidityDuration = 3 * 365 * 24 * time.Hour
	HubbleServerCertSecretName       = "hubble-server-certs"
	HubbleServerCertSecretNamespace  = "kube-system"

	HubbleRelayServerCertGenerate         = true
	HubbleRelayServerCertCommonName       = "*.hubble-relay.cilium.io"
	HubbleRelayServerCertValidityDuration = 3 * 365 * 24 * time.Hour
	HubbleRelayServerCertSecretName       = "hubble-relay-server-certs"
	HubbleRelayServerCertSecretNamespace  = "kube-system"

	HubbleRelayClientCertGenerate         = true
	HubbleRelayClientCertCommonName       = "*.hubble-relay.cilium.io"
	HubbleRelayClientCertValidityDuration = 3 * 365 * 24 * time.Hour
	HubbleRelayClientCertSecretName       = "hubble-relay-client-certs"
	HubbleRelayClientCertSecretNamespace  = "kube-system"

	CiliumNamespace = "kube-system"

	ExternalWorkloadCertsGenerate = true

	ExternalWorkloadCACertCommonName       = "externalworkload-ca.cilium.io"
	ExternalWorkloadCACertValidityDuration = 3 * 365 * 24 * time.Hour
	ExternalWorkloadCACertSecretName       = "externalworkload-ca-cert"

	ExternalWorkloadServerCertCommonName       = "clustermesh-apiserver.cilium.io"
	ExternalWorkloadServerCertValidityDuration = 3 * 365 * 24 * time.Hour
	ExternalWorkloadServerCertSecretName       = "externalworkload-server-certs"

	ExternalWorkloadAdminCertCommonName       = "root"
	ExternalWorkloadAdminCertValidityDuration = 3 * 365 * 24 * time.Hour
	ExternalWorkloadAdminCertSecretName       = "externalworkload-admin-certs"

	ExternalWorkloadClientCertCommonName       = "externalworkload"
	ExternalWorkloadClientCertValidityDuration = 3 * 365 * 24 * time.Hour
	ExternalWorkloadClientCertSecretName       = "externalworkload-client-certs"

	K8sRequestTimeout = 60 * time.Second
)