defaults

const (
	// AzureACRServicePrincipleBuildahSecretName name of the secret containing ACR authentication information, consumed by buildah
	AzureACRServicePrincipleBuildahSecretName = "radix-sp-buildah-azure"

	// AzureACRTokenPasswordAppRegistrySecretName name of the secret containing Cache ACR authentication information, consumed by buildah
	AzureACRTokenPasswordAppRegistrySecretName = "radix-app-registry"

	GitPrivateKeySecretName = "git-ssh-keys"
	GitPrivateKeySecretKey  = "id_rsa"

	// WebhookSharedSecretName is the name of the secret holding the shared secret used to validate GitHub webhook payloads
	WebhookSharedSecretName = "radix-webhook-shared-secret"
	// WebhookSharedSecretKey is the data key in the WebhookSharedSecret secret holding the shared secret value
	WebhookSharedSecretKey = "sharedSecret"
)

const (
	GitPublicKeyConfigMapName = "git-ssh-public-key"
	GitPublicKeyConfigMapKey  = "public_key"
)

const (
	// EnvironmentnameEnvironmentVariable The name of the environment for the application
	EnvironmentnameEnvironmentVariable = "RADIX_ENVIRONMENT"

	// PublicEndpointEnvironmentVariable The environment variable holding the public endpoint of the component
	PublicEndpointEnvironmentVariable = "RADIX_PUBLIC_DOMAIN_NAME"

	// CanonicalEndpointEnvironmentVariable Variable to hold the cluster spcific ingress
	CanonicalEndpointEnvironmentVariable = "RADIX_CANONICAL_DOMAIN_NAME"

	// RadixAppEnvironmentVariable The environment variable holding the name of the app
	RadixAppEnvironmentVariable = "RADIX_APP"

	// RadixComponentEnvironmentVariable The environment variable holding the name of the component
	RadixComponentEnvironmentVariable = "RADIX_COMPONENT"

	// RadixPortsEnvironmentVariable The environment variable holding the available ports of the component
	RadixPortsEnvironmentVariable = "RADIX_PORTS"

	// RadixPortNamesEnvironmentVariable The environment variable holding the available port names of the component
	RadixPortNamesEnvironmentVariable = "RADIX_PORT_NAMES"

	// RadixCommitHashEnvironmentVariable Contains the commit id of the build
	RadixCommitHashEnvironmentVariable = "RADIX_GIT_COMMIT_HASH"

	// RadixGitTagsEnvironmentVariable Contains a list of git tags which the RADIX_GIT_COMMIT_HASH points to
	RadixGitTagsEnvironmentVariable = "RADIX_GIT_TAGS"

	// RadixComponentEnvironmentVariable The environment variable holding the name of the scheduled job
	RadixScheduleJobNameEnvironmentVariable = "RADIX_JOB_NAME"

	// RadixRestartEnvironmentVariable Environment variable to indicate that a restart was triggered
	RadixRestartEnvironmentVariable = "RADIX_RESTART_TRIGGERED"

	// RadixDeploymentEnvironmentVariable Name of Radix Deployment
	RadixDeploymentEnvironmentVariable = "RADIX_DEPLOYMENT"
)

const (
	OAuthProxyPortName              = "http"
	OAuthProxyPortNumber      int32 = 4180
	OAuthProxyProviderOIDC          = "oidc"
	OAuthProxyProviderEntraId       = "entra-id"
)

const (
	// RadixPipelineJobPipelineContainerName The container name of the Radix pipeline orchestration job
	RadixPipelineJobPipelineContainerName = "radix-pipeline"

	// DefaultRadixConfigFileName Default name for the radix configuration file
	DefaultRadixConfigFileName = "radixconfig.yaml"

	//PipelineNameAnnotation Original pipeline name, overridden by unique generated name
	PipelineNameAnnotation = "radix.equinor.com/tekton-pipeline-name"

	//PipelineTaskNameAnnotation Original pipeline task name, overridden by unique generated name
	PipelineTaskNameAnnotation = "radix.equinor.com/tekton-pipeline-task-name"
)

const (
	// DefaultReplicas Hold the default replicas for the deployment if nothing is stated in the radix config
	DefaultReplicas int32 = 1
	// DefaultNodeSelectorArchitecture Hold the default architecture for the deployment if nothing is stated in the radix config
	DefaultNodeSelectorArchitecture = "amd64"
	// DefaultNodeSelectorOS Hold the default OS for the deployment if nothing is stated in the radix config
	DefaultNodeSelectorOS = "linux"
)

const (
	// AppAdminRoleName Name of role which grants access to manage the CI/CD of their applications
	AppAdminRoleName = "radix-app-admin"

	// AppReaderRoleName Name of role which grants read access to the CI/CD of their applications
	AppReaderRoleName = "radix-app-reader"

	// AppAdminEnvironmentRoleName Name of role which grants access to manage their running Radix applications
	AppAdminEnvironmentRoleName = "radix-app-admin-envs"

	// AppReaderEnvironmentsRoleName Name of role which grants read access to their running Radix applications
	AppReaderEnvironmentsRoleName = "radix-app-reader-envs"

	// PipelineServiceAccountName Service account name for the pipeline
	PipelineServiceAccountName = "radix-pipeline"

	// PipelineAppRoleName Role to update the radix config from repo and execute the outer pipeline
	PipelineAppRoleName = "radix-pipeline-app"

	// PipelineEnvRoleName Give radix-pipeline service account inside app namespace access to make deployments through radix-pipeline-runner clusterrole
	PipelineEnvRoleName = "radix-pipeline-env"

	// RadixPipelineRRRoleNamePrefix Role of to get RadixRegistrations for pipeline job
	RadixPipelineRRRoleNamePrefix = "radix-pipeline-rr"

	// RadixApplicationAdminRadixDNSAliasRoleNamePrefix Role of to get RadixDNSAliases for application admin
	RadixApplicationAdminRadixDNSAliasRoleNamePrefix = "radix-platform-user-rda"

	// RadixApplicationReaderRadixDNSAliasRoleNamePrefix Role of to get RadixDNSAliases for application reader
	RadixApplicationReaderRadixDNSAliasRoleNamePrefix = "radix-platform-user-rda-reader"

	// PlatformUserRoleName Name of platform user cluster role
	PlatformUserRoleName = "radix-platform-user"

	// RadixJobSchedulerRoleName Name of the cluster role with RBAC for radix-job-scheduler service account
	RadixJobSchedulerRoleName = "radix-job-scheduler"

	// RadixJobSchedulerServiceName Name of the service account representing the Radix Job Scheduler
	RadixJobSchedulerServiceName = "radix-job-scheduler"
)

const (
	// BuildSecretPrefix All build secrets will be mounted with this prefix
	BuildSecretPrefix = "BUILD_SECRET_"

	// BuildSecretsName Name of the secret in the app namespace holding all build secrets
	BuildSecretsName = "build-secrets"

	// BuildSecretDefaultData When the build secrets hold radix_undefined, it means they have not been set yet
	BuildSecretDefaultData = "radix_undefined"

	// BlobFuseCredsAccountKeyPartSuffix Account key suffix of secret listed
	BlobFuseCredsAccountKeyPartSuffix = "-accountkey"

	// BlobFuseCredsAccountNamePartSuffix Account name suffix of secret listed
	BlobFuseCredsAccountNamePartSuffix = "-accountname"

	// BlobFuseCredsAccountKeyPart Account key part of secret data
	BlobFuseCredsAccountKeyPart = "accountkey"

	// BlobFuseCredsAccountNamePart Account name part of secret data
	BlobFuseCredsAccountNamePart = "accountname"

	// CsiAzureCredsAccountKeyPartSuffix Account key suffix of secret listed
	CsiAzureCredsAccountKeyPartSuffix = "-accountkey"

	// CsiAzureCredsAccountNamePartSuffix Account name suffix of secret listed
	CsiAzureCredsAccountNamePartSuffix = "-accountname"

	// CsiAzureCredsAccountKeyPart Account key part of secret data
	CsiAzureCredsAccountKeyPart = "accountkey"

	// CsiAzureCredsAccountNamePart Account name part of secret data
	CsiAzureCredsAccountNamePart = "accountname"

	// OAuthCookieSecretKeyName defines the name of the key which holds the secret used by OAuth to encrypt the session cookie
	OAuthCookieSecretKeyName = "CookieSecret"

	// OAuthClientSecretKeyName defines the name of the key which holds the OAuth clientid secret
	OAuthClientSecretKeyName = "ClientSecret"

	// OAuthRedisPasswordKeyName defines the name of the key which holds the Redis password used by OAuth to store session data
	OAuthRedisPasswordKeyName = "RedisPassword"

	// CsiAzureKeyVaultCredsClientIdSuffix Client ID suffix of secret listed
	CsiAzureKeyVaultCredsClientIdSuffix = "-azkv-clientid"

	// CsiAzureKeyVaultCredsClientSecretSuffix Client secret suffix of secret listed
	CsiAzureKeyVaultCredsClientSecretSuffix = "-azkv-clientsecret"

	// CsiAzureKeyVaultCredsClientIdPart Client ID part of secret data for Azure Key Vault
	CsiAzureKeyVaultCredsClientIdPart = "clientid"

	// CsiAzureKeyVaultCredsClientSecretPart Client secret part of secret data for Azure Key Vault
	CsiAzureKeyVaultCredsClientSecretPart = "clientsecret"

	// CsiSecretProviderClassParameterKeyVaultName Azure Key vault parameter name for a CSI SecretProviderClass
	CsiSecretProviderClassParameterKeyVaultName = "keyvaultName"

	// TLSSecretName Secret name for the Radix wildcard TLS cert
	TLSSecretName = "radix-wildcard-tls-cert"

	// SecretDefaultData default secret content
	SecretDefaultData = "xx"

	// SecretUsedBySecretStoreDriverLabel Label used to mark secrets used by secret store driver
	SecretUsedBySecretStoreDriverLabel = "secrets-store.csi.k8s.io/used"
)

const PrivateImageHubReaderRoleName = "radix-private-image-hubs-reader"

const PrivateImageHubSecretName = "radix-private-image-hubs"

const RadixJobSchedulerPortName = "scheduler-port"

const RadixJobTimeLimitSeconds = int64(43200) // 12 hours