externalgroups

type ExtGroupConfig struct {
	RegisterDummy bool `mapstructure:"register-dummy-external-group"`

	ExternalGroupSyncInterval time.Duration `mapstructure:"policy-external-group-sync-interval"`
}

type ExternalGroup struct {
	// ID is a unique identifier for this group.
	// This is currently the SHA256 hash of the group's JSON definition.
	// (We have to syntheize this as groups have no primary key)
	ID string

	// ExtGroup is the group definition
	// immutable!
	ExtGroup *api.Groups

	// CCGName is the name of the created CiliumCIDRGroup.
	// (It is generated by the APIServer so its useful to separate this for indexing purposes)
	CCGName string

	// CCG is the resulting CiliumCIDRGroup for this ExternalGroup
	CCG *apiv2.CiliumCIDRGroup

	// NextRefresh is the soft deadline for refreshing this group.
	NextRefresh time.Time

	// Owners is the set of upstream resources that reference this external group
	Owners part.Set[Owner]
}

type ExternalGroupManager interface {
	SetResourceGroups(gk schema.GroupKind, namespace, name string, groups []*api.Groups)

	// RegisterResource tells the group manager about a resource that may provide external groups.
	//
	// It will not delete potentially-stale groups until all resources are marked as synced.
	RegisterResourceKind(gk schema.GroupKind)

	// ResourceSynced tells the group manager that all groups for a given kind have been
	// provided, and that it may be safe to GC stale groups.
	ResourceKindSynced(gk schema.GroupKind)
}

type ExternalGroupManagerParams struct {
	cell.In

	Log *slog.Logger
	Cfg ExtGroupConfig

	DB      *statedb.DB
	EGTable statedb.RWTable[*ExternalGroup]

	Clientset   client.Clientset
	CCGResource resource.Resource[*cilium_v2.CiliumCIDRGroup]
	JG          job.Group
}

type Owner struct {
	Group     string // k8s api group
	Kind      string
	Namespace string
	Name      string
}

type ToGroupCtlParams struct {
	cell.In

	Logger *slog.Logger
	JG     job.Group
	GM     ExternalGroupManager

	CNPResource  resource.Resource[*cilium_v2.CiliumNetworkPolicy]
	CCNPResource resource.Resource[*cilium_v2.CiliumClusterwideNetworkPolicy]
}