api

const (
	// GroupName for greenhouse API resources.
	GroupName = "greenhouse.sap"

	// SecretTypeKubeConfig specifies a secret containing the kubeconfig for a cluster.
	SecretTypeKubeConfig corev1.SecretType = "greenhouse.sap/kubeconfig"

	// SecretTypeOIDCConfig specifies a secret containing the OIDC configuration for a cluster.
	SecretTypeOIDCConfig corev1.SecretType = "greenhouse.sap/oidc"

	// SecretTypeOrganization specifies a secret containing the kubeconfig for an organization.
	SecretTypeOrganization corev1.SecretType = "greenhouse.sap/orgsecret"

	// LabelKeyOrgConfigMap is used to identify organizational config map.
	LabelKeyOrgConfigMap = "greenhouse.sap/orgconfigmap"

	// KubeConfigKey is the key for the user-provided kubeconfig in the secret of type greenhouse.sap/kubeconfig.
	KubeConfigKey = "kubeconfig"

	// GreenHouseKubeConfigKey is the key for the kubeconfig in the secret of type greenhouse.sap/kubeconfig used by Greenhouse.
	// This kubeconfig should be used by Greenhouse controllers and their kubernetes clients to access the remote cluster.
	GreenHouseKubeConfigKey = "greenhousekubeconfig"

	// LabelKeyPluginPreset is used to identify the PluginPreset managing the plugin.
	LabelKeyPluginPreset = "greenhouse.sap/pluginpreset"

	// LabelKeyPlugin is used to identify corresponding PluginDefinition for the resource.
	LabelKeyPlugin = "greenhouse.sap/plugin"

	// LabelKeyPluginDefinition is used to identify corresponding PluginDefinition for the resource.
	LabelKeyPluginDefinition = "greenhouse.sap/plugindefinition"

	// LabelKeyClusterPluginDefinition is used to identify the corresponding ClusterPluginDefinition for the resource.
	LabelKeyClusterPluginDefinition = "greenhouse.sap/clusterplugindefinition"

	// LabelKeyCluster is used to identify corresponding Cluster for the resource.
	LabelKeyCluster = "greenhouse.sap/cluster"

	// AnnotationKeyExpose marks services and ingresses for exposure via Plugin status.
	// For services: set to "true" or specify a named port to be exposed via service-proxy.
	// For ingresses: set to "true" to expose the ingress URL directly.
	AnnotationKeyExpose = "greenhouse.sap/expose"

	// AnnotationKeyExposedNamedPort specifies which service port to expose by name when AnnotationKeyExpose is set.
	// Only applies to services. Defaults to the first port if the named port is not found.
	AnnotationKeyExposedNamedPort = "greenhouse.sap/exposed-named-port"

	// AnnotationKeyExposedIngressHost specifies which host to expose when an ingress has multiple host rules.
	// Only applies to ingresses with AnnotationKeyExpose set. Defaults to the first host if not specified.
	AnnotationKeyExposedIngressHost = "greenhouse.sap/exposed-host"

	// LabelKeyOwnedBy is used to identify the owning support-group team of a resource.
	LabelKeyOwnedBy = "greenhouse.sap/owned-by"

	// LabelKeyMetadataPrefix is the prefix for cluster metadata labels that are transferred to Plugin template data.
	LabelKeyMetadataPrefix = "metadata.greenhouse.sap/"

	// LabelKeyCatalog is used to identify the owning catalog resource of (Cluster)PluginDefinitions.
	LabelKeyCatalog = "greenhouse.sap/catalog"

	// LabelKeyCatalogSource is used to identify the source of the owning catalog resource of (Cluster)PluginDefinitions.
	LabelKeyCatalogSource = "greenhouse.sap/catalog-source"
)

const (
	// LabelKeyRoleBinding is the key of the label that is used to identify the RoleBinding.
	LabelKeyRoleBinding = "greenhouse.sap/rolebinding"

	// LabelKeyRole is the key of the label that is used to identify the Role.
	LabelKeyRole = "greenhouse.sap/role"

	// RBACPrefix is the prefix for the Role and RoleBinding names.
	RBACPrefix = "greenhouse:"

	// PluginClusterNameField is the field in the Plugin spec mapping it to a Cluster.
	PluginClusterNameField = ".spec.clusterName"

	// RolebindingTeamRoleRefField is the field in the RoleBinding spec that references the TeamRole.
	RolebindingTeamRoleRefField = ".spec.teamRoleRef"

	// RolebindingTeamRefField is the field in the RoleBinding spec that references the Team.
	RolebindingTeamRefField = ".spec.teamRef"

	// ConfigMapRefField is the field in the Organization spec that references the ConfigMap containing organizational configuration data.
	ConfigMapRefField = ".spec.configMapRef"

	// KindClusterPluginDefinitionPlural is the plural form of ClusterPluginDefinition kind.
	KindClusterPluginDefinitionPlural = "clusterplugindefinitions"
	// KindPluginDefinitionPlural is the plural form of PluginDefinition kind.
	KindPluginDefinitionPlural = "plugindefinitions"
)

const (
	// DeletionPolicyRetain means owned resources will be retained on deletion.
	DeletionPolicyRetain = "Retain"
	// DeletionPolicyDelete means owned resources will be deleted on deletion.
	DeletionPolicyDelete = "Delete"
)

const (
	// MarkClusterDeletionAnnotation is used to mark a cluster for deletion.
	MarkClusterDeletionAnnotation = "greenhouse.sap/delete-cluster"
	// ScheduleClusterDeletionAnnotation is used to schedule a cluster for deletion.
	// Timestamp is set by mutating webhook if cluster is marked for deletion.
	ScheduleClusterDeletionAnnotation = "greenhouse.sap/deletion-schedule"
	ClusterConnectivityAnnotation     = "greenhouse.sap/cluster-connectivity"
	ClusterConnectivityKubeconfig     = "kubeconfig"
	ClusterConnectivityOIDC           = "oidc"
	GreenhouseHelmDeliveryToolLabel   = "greenhouse.sap/deployment-tool"
	GreenhouseHelmDeliveryToolFlux    = "flux"
	FluxReconcileRequestAnnotation    = "reconcile.fluxcd.io/requestedAt"
)

const (
	SecretAPIServerURLAnnotation          = "oidc.greenhouse.sap/api-server-url"
	SecretAPIServerCAKey                  = "ca.crt"
	OIDCAudience                          = "greenhouse"
	SecretOIDCConfigGeneratedOnAnnotation = "oidc.greenhouse.sap/oidc-token-last-updated"
)

const (
	// LabelKeySupportGroup is the key of the label that is used to mark a Team as a support group (greenhouse.sap/support-group:true).
	LabelKeySupportGroup = "greenhouse.sap/support-group"
)