config

type AirGap struct {
	Enabled   bool   `yaml:"enabled"`
	BundleDir string `yaml:"bundleDir"`
	ExportDir string `yaml:"exportDir"`
}

type Bytes int64

type Config struct {
	Role                string        `yaml:"role"`
	Endpoint            string        `yaml:"endpoint"`
	EndpointCAFile      string        `yaml:"endpointCAFile"`
	EnrollmentTokenFile string        `yaml:"enrollmentTokenFile"`
	StateDir            string        `yaml:"stateDir"`
	Capabilities        []string      `yaml:"capabilities"`
	Kubernetes          Kubernetes    `yaml:"kubernetes"`
	Coordinator         Coordinator   `yaml:"coordinator"`
	Spool               Spool         `yaml:"spool"`
	Node                Node          `yaml:"node"`
	Host                Host          `yaml:"host"`
	Lookback            []Lookback    `yaml:"lookback"`
	AirGap              AirGap        `yaml:"airgap"`
	Trust               Trust         `yaml:"trust"`
	Policy              Policy        `yaml:"policy"`
	Investigation       Investigation `yaml:"investigation"`
	Logging             Logging       `yaml:"logging"`
}

type Coordinator struct {
	Listen      string `yaml:"listen"`
	TLSCertFile string `yaml:"tlsCertFile"`
	TLSKeyFile  string `yaml:"tlsKeyFile"`
	ServiceURL  string `yaml:"serviceURL"`
	CAFile      string `yaml:"caFile"`
	Audience    string `yaml:"audience"`
	TokenFile   string `yaml:"tokenFile"`
	Namespace   string `yaml:"namespace"`
	PodName     string `yaml:"podName"`
}

type CustomResources struct {
	Enabled   *bool    `yaml:"enabled"`
	MaxKinds  int      `yaml:"maxKinds"`
	MaxScopes int      `yaml:"maxScopes"`
	Include   []string `yaml:"include"`
	Exclude   []string `yaml:"exclude"`
}

type Duration time.Duration

type Host struct {
	DiskCap          Bytes    `yaml:"diskCap"`
	SpoolReserve     Bytes    `yaml:"spoolReserve"`
	TSDBMax          Bytes    `yaml:"tsdbMax"`
	EvidenceRing     Bytes    `yaml:"evidenceRing"`
	ScrapeInterval   Duration `yaml:"scrapeInterval"`
	LogFiles         []string `yaml:"logFiles"`
	Journal          bool     `yaml:"journal"`
	JournalDir       string   `yaml:"journalDir"`
	MetricsEndpoints []string `yaml:"metricsEndpoints"`
	AllowNonLoopback bool     `yaml:"allowNonLoopback"`
}

type Investigation struct {
	MaxConcurrency int      `yaml:"maxConcurrency"`
	Timeout        Duration `yaml:"timeout"`
	MaxBytes       Bytes    `yaml:"maxBytes"`
	MaxLines       int      `yaml:"maxLines"`
	MaxSeries      int      `yaml:"maxSeries"`
	MaxSamples     int      `yaml:"maxSamples"`
	MaxWindow      Duration `yaml:"maxWindow"`
}

type Kubernetes struct {
	Scope               string          `yaml:"scope"`
	Namespaces          []string        `yaml:"namespaces"`
	ExcludeNamespaces   []string        `yaml:"excludeNamespaces"`
	LabelAllowlist      []string        `yaml:"labelAllowlist"`
	AnnotationAllowlist []string        `yaml:"annotationAllowlist"`
	Resources           []string        `yaml:"resources"`
	CustomResources     CustomResources `yaml:"customResources"`
	ClusterName         string          `yaml:"clusterName"`
}

type Logging struct {
	Level  string `yaml:"level"`
	Format string `yaml:"format"`
}

type Lookback struct {
	Name              string   `yaml:"name"`
	Type              string   `yaml:"type"`
	URL               string   `yaml:"url"`
	Tenant            string   `yaml:"tenant"`
	AccountID         string   `yaml:"accountID"`
	ProjectID         string   `yaml:"projectID"`
	BearerTokenFile   string   `yaml:"bearerTokenFile"`
	BasicUsernameFile string   `yaml:"basicUsernameFile"`
	BasicPasswordFile string   `yaml:"basicPasswordFile"`
	CAFile            string   `yaml:"caFile"`
	Timeout           Duration `yaml:"timeout"`
	Retention         Duration `yaml:"retention"`
}

type Node struct {
	Name           string   `yaml:"name"`
	DiskCap        Bytes    `yaml:"diskCap"`
	EvidenceRing   Bytes    `yaml:"evidenceRing"`
	LogsPath       string   `yaml:"logsPath"`
	ScrapeInterval Duration `yaml:"scrapeInterval"`
	MaxTargets     int      `yaml:"maxTargets"`
	MaxSeries      int      `yaml:"maxSeries"`
	MaxSamplesRate int      `yaml:"maxSamplesPerSecond"`
	KubeletTLS     string   `yaml:"kubeletTLS"`
	KubeletPort    int      `yaml:"kubeletPort"`
}

type Policy struct {
	MaxRuleEvalTime   Duration `yaml:"maxRuleEvalTime"`
	MaxRuleSamples    int      `yaml:"maxRuleSamples"`
	MaxRuleSeries     int      `yaml:"maxRuleSeries"`
	MaxCounterBytes   Bytes    `yaml:"maxCounterBytes"`
	MaxEvidenceBytes  Bytes    `yaml:"maxEvidenceBytes"`
	DisabledRules     []string `yaml:"disabledRules"`
	LateThreshold     Duration `yaml:"lateThreshold"`
	RedactionPatterns []string `yaml:"redactionPatterns"`
}

type Spool struct {
	Capacity   Bytes   `yaml:"capacity"`
	Window     Bytes   `yaml:"window"`
	CoalesceAt float64 `yaml:"coalesceAt"`
}

type Trust struct {
	// Roots are "<id>:<base64 ed25519 public key>" entries.
	Roots     []string `yaml:"roots"`
	RootsFile string   `yaml:"rootsFile"`
	Threshold int      `yaml:"threshold"`
}