builders

type IBuilder interface {
	// GetTemplate checks whether or not the TargetTemplate actually exists
	GetTemplate(
		ctx context.Context,
		client client.Client,
		req v1alpha1.IRequestResource,
	) (v1alpha1.ITemplateResource, error)

	// GetAccessDuration checks the durations of the Access Request against the Template.
	GetAccessDuration(
		req v1alpha1.IRequestResource,
		tmpl v1alpha1.ITemplateResource,
	) (duration time.Duration, decision string, err error)

	// SetRequestOwnerReference ensures that if the TargetTemplate is ever deleted,
	// that all of the Access Requests pointing to it are also automatically
	// deleted, which automatically cascades down to delete all of the access
	// resources.
	//
	// More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/owners-dependents/
	SetRequestOwnerReference(
		ctx context.Context,
		client client.Client,
		req v1alpha1.IRequestResource,
		tmpl v1alpha1.ITemplateResource,
	) error

	// CreateAccessResources is the heavy lifter in an Access Builder - it is
	// responsible for creating any access resources required to satisfy the
	// access request. All resources created by this function must have an
	// OwnerReference set to the Access Request to ensure proper cleanup.
	CreateAccessResources(
		ctx context.Context,
		client client.Client,
		req v1alpha1.IRequestResource,
		tmpl v1alpha1.ITemplateResource,
	) (string, error)

	// AccessResourcesAreReady returns an indication of whether the resources
	// are fully ready. For some this function may just return True right away
	// (in the case of creating only a Role/RoleBinding). In other cases there
	// may be work to check if the status of a resource is completed (eg,
	// waiting for a Pod to become Ready).
	AccessResourcesAreReady(
		ctx context.Context,
		client client.Client,
		req v1alpha1.IRequestResource,
		tmpl v1alpha1.ITemplateResource,
	) (bool, error)
}