cli

type AuditResult int

type AuditVerdict struct {
	Result AuditResult
	Detail string
}

type ComponentVersions struct {
	Containerd string
	Runc       string
	KubeVip    string
	Cilium     string
	CoreDNS    string
	// Deprecated: konnectivity is not shipped, so nothing reads this. The
	// field stays only because released importers compile against it.
	Konnectivity string
}

type ErrExitCode struct{ Code int }

type ErrUsage struct {
	// contains filtered or unexported fields
}

type NodeEnv struct {
	Out       io.Writer
	Clientset kubernetes.Interface
}

type NodeLayout struct {
	ConfDir                      string
	DataDir                      string
	PKIDir                       string
	KubeconfigDir                string
	K8sConfigDir                 string
	StaticPodDir                 string
	KubeletConfig                string
	AdminConf                    string
	SuperAdminConf               string
	BinDir                       string
	ContainerdConfig             string
	ContainerdConfinedSinceStamp string
	SELinuxLabelStamp            string
	EtcdDataDir                  string
}

type NodeOperation[In any] func(ctx context.Context, env NodeEnv, in In) (NodeResult, error)

type NodeResult struct {
	Next     string
	Warnings []string
}

type Option func(*rootConfig)

type Profile struct {
	// Name selects the profile: a DNS-1123 label, unique in the binary.
	Name string
	// APIServerFlags are spliced into the apiserver's argv on control planes,
	// in order.
	APIServerFlags []ProfileFlag
	// KubeletSettings are rendered into kubelet.conf on every node, in order.
	KubeletSettings []ProfileSetting
	// ConfigFiles are written under the engine's config directory on control
	// planes before the apiserver renders, backed up across an upgrade and
	// restored first on a rollback.
	ConfigFiles []ProfileFile
	// SharedSecrets are minted once, on a cluster's first control plane,
	// carried to every later control plane in the join bundle, written 0600
	// and never regenerated.
	SharedSecrets []ProfileSecret
	// Sysctls are key=value lines written as a sysctl drop-in on every node.
	// A node that cannot apply them does not start.
	Sysctls []string
	// RequiresOperator refuses a control plane with spec.operator: false.
	RequiresOperator bool
	// RequiresSELinux refuses spec.selinux: false and treats a missing
	// SELinux policy as fatal.
	RequiresSELinux bool
	// KubeletServerTLSBootstrap makes every node, control planes included,
	// bootstrap its kubelet serving certificate through the CSR flow.
	KubeletServerTLSBootstrap bool
	// DisableNodeShell turns the dashboard's privileged node shell off by
	// default.
	DisableNodeShell bool
}

type ProfileContext struct {
	// KubernetesVersion is the version the binary runs, as vMAJOR.MINOR.PATCH
	// with any pre-release suffix the stamp carries.
	KubernetesVersion string
}

type ProfileFile struct {
	// Name is the file name; no directory, and not the name of a file the
	// engine keeps in its config directory, such as kubelet.conf.
	Name string
	Kind ProfileFileKind
	// Render returns the file's bytes.
	Render func(ProfileContext) ([]byte, error)
}

type ProfileFileKind int

type ProfileFlag struct {
	// Name is the flag with its leading --; the value goes in Value.
	Name  string
	Value string
	From  ProfileSource
}

type ProfileSecret struct {
	// Name is the file name; no directory.
	Name string
	// Mint returns the bytes a new cluster starts with.
	Mint func() ([]byte, error)
}

type ProfileSetting struct {
	// Key is the kubelet.conf key.
	Key string
	// Value is the setting's value, on one line.
	Value string
	From  ProfileSource
}

type ProfileSource int

type Registrar struct {
	// contains filtered or unexported fields
}

type StackContext struct {
	ClusterDomain string
	ServiceCIDR   string
}

type StackFunc func(StackContext) (map[string][]byte, error)

type Tier int

type ToolSet interface {
	Name() string
	Register(*Registrar)
}