config

type ClusterConfig struct {
	// BaseDomain is the base domain of the management cluster.
	BaseDomain string
	// Customer is the customer name of the management cluster.
	Customer string
	// CASecretNamespace is the namespace of the cert-manager CA Secret.
	CASecretNamespace string
	// CASecretName is the name of the cert-manager CA Secret (key: tls.crt).
	// Empty means public CA — Alloy uses the system trust store.
	CASecretName string
	// Name is the name of the management cluster.
	Name string
	// Pipeline is the pipeline name of the management cluster.
	Pipeline string
	// Region is the region of the management cluster.
	Region string
}

type Config struct {
	// Operator-level configuration
	Operator OperatorConfig

	// Subsystem configurations
	Logging    LoggingConfig
	Grafana    GrafanaConfig
	Monitoring MonitoringConfig
	Tracing    TracingConfig

	// HTTP client timeouts for external API calls
	HTTP HTTPConfig

	// OTLP batch processor settings written into Alloy agent ConfigMaps
	OTLP OTLPConfig

	// Management cluster configuration
	Cluster ClusterConfig

	// Environment and runtime settings (secrets from environment variables)
	Environment EnvironmentConfig

	// Cronitor heartbeat monitor operational settings
	Cronitor CronitorConfig

	// DefaultTenant is the tenant ID used when no organisation is specified.
	// Defaults to "giantswarm".
	DefaultTenant string
}

type CronitorConfig struct {
	// GraceSeconds is the number of seconds after a missed heartbeat before an alert is triggered.
	GraceSeconds int
	// Schedule is the expected heartbeat frequency (e.g. "every 30 minutes").
	Schedule string
	// RealertInterval controls how often Cronitor re-alerts if the issue persists (e.g. "every 24 hours").
	RealertInterval string
}

type DatasourcesConfig struct {
	// LokiURL is the URL of the Loki gateway service.
	LokiURL string
	// MimirURL is the URL of the Mimir query-frontend / gateway (Prometheus-compatible endpoint).
	MimirURL string
	// MimirAlertmanagerURL is the URL of the Mimir Alertmanager service.
	MimirAlertmanagerURL string
	// MimirCardinalityURL is the URL of the Mimir cardinality API (used for the JSON datasource).
	MimirCardinalityURL string
	// TempoURL is the URL of the Tempo query-frontend service.
	TempoURL string
}

type EnvironmentConfig struct {
	CronitorHeartbeatManagementKey string `env:"CRONITOR_HEARTBEAT_MANAGEMENT_KEY"`
	CronitorHeartbeatPingKey       string `env:"CRONITOR_HEARTBEAT_PING_KEY"`
}

type GatewayConfig struct {
	// Namespace is the Kubernetes namespace where the gateway secrets reside.
	Namespace string
	// IngressSecretName is the name of the secret used for Ingress-based auth.
	IngressSecretName string
	// HTTPRouteSecretName is the name of the secret used for HTTPRoute-based auth.
	HTTPRouteSecretName string
}

type GrafanaConfig struct {
	URL         *url.URL
	Datasources DatasourcesConfig

	// ClientRetries is the number of retries for Grafana HTTP API calls.
	ClientRetries int
	// AdminSecretNamespace is the Kubernetes namespace of the Grafana admin credentials secret.
	AdminSecretNamespace string
	// AdminSecretName is the name of the Kubernetes secret holding Grafana admin credentials.
	AdminSecretName string
	// GatewayTLSSecretNamespace is the namespace of the gateway TLS secret used for Grafana client mTLS.
	GatewayTLSSecretNamespace string
	// GatewayTLSSecretName is the name of the gateway TLS secret used for Grafana client mTLS.
	GatewayTLSSecretName string
}

type HTTPConfig struct {
	// RulerTimeout is the HTTP client timeout for Mimir/Loki ruler API calls.
	RulerTimeout time.Duration
	// AlertmanagerTimeout is the HTTP client timeout for the Mimir Alertmanager API.
	AlertmanagerTimeout time.Duration
	// MimirQueryTimeout is the timeout applied to Mimir instant-query requests.
	MimirQueryTimeout time.Duration
}

type LoggingConfig struct {
	// Enabled controls logging at the installation level
	Enabled bool

	// EnableNodeFiltering enables node filtering in Alloy logging configuration
	EnableNodeFiltering bool

	// DefaultNamespaces is the list of namespaces to collect logs from by default
	DefaultNamespaces []string

	// IncludeEventsNamespaces is the list of namespaces to collect events from
	// If empty, collect from all namespaces
	IncludeEventsNamespaces []string

	// ExcludeEventsNamespaces is the list of namespaces to exclude events from
	ExcludeEventsNamespaces []string

	// RulerURL is the URL to the Loki ruler API used to clean up rules on cluster deletion.
	// Leave empty to disable Loki ruler cleanup.
	RulerURL string

	// Gateway holds the namespace and secret names for the Loki gateway authentication secrets.
	Gateway GatewayConfig

	// LokiMaxBackoffPeriod is the maximum backoff period for Loki remote write retries in Alloy
	// agent ConfigMaps (e.g. "10m").
	LokiMaxBackoffPeriod string
	// LokiRemoteTimeout is the timeout for Loki remote write operations in Alloy agent ConfigMaps
	// (e.g. "60s").
	LokiRemoteTimeout string
}

type MonitoringConfig struct {
	// Enabled controls monitoring at the installation level
	Enabled bool

	// NetworkEnabled controls network monitoring at the installation level
	NetworkEnabled bool

	AlertmanagerSecretName string
	AlertmanagerURL        string
	AlertmanagerEnabled    bool

	DefaultShardingStrategy sharding.Strategy
	// WALTruncateFrequency is the frequency at which the WAL segments should be truncated.
	WALTruncateFrequency time.Duration
	MetricsQueryURL      string
	// RulerURL is the URL to the Mimir ruler API used to clean up rules on cluster deletion.
	// Leave empty to disable ruler cleanup.
	RulerURL    string
	QueueConfig QueueConfig
	// ExemplarsEnabled controls whether exemplars are forwarded in the remote write pipeline.
	// Uses opt-out model: enabled by default.
	ExemplarsEnabled bool

	// Gateway holds the namespace and secret names for the Mimir gateway authentication secrets.
	Gateway GatewayConfig

	// MimirRemoteWriteTimeout is the remote_timeout for the Mimir remote write endpoint in Alloy
	// agent ConfigMaps (e.g. "60s").
	MimirRemoteWriteTimeout string
}

type OTLPConfig struct {
	// BatchSendBatchSize is the number of items to accumulate before flushing
	// (must be ≤ BatchMaxSize).
	BatchSendBatchSize int
	// BatchMaxSize is the hard cap on batch size.
	BatchMaxSize int
	// BatchTimeout is the maximum wait before flushing an incomplete batch (e.g. "500ms").
	BatchTimeout string
}

type OperatorConfig struct {
	MetricsAddr          string
	EnableLeaderElection bool
	ProbeAddr            string
	SecureMetrics        bool
	EnableHTTP2          bool
	WebhookCertPath      string
	MetricsCertPath      string
	OperatorNamespace    string
}

type QueueConfig struct {
	BatchSendDeadline *string
	Capacity          *int
	MaxBackoff        *string
	MaxSamplesPerSend *int
	MaxShards         *int
	MinBackoff        *string
	MinShards         *int
	RetryOnHttp429    *bool
	SampleAgeLimit    *string
}

type TracingConfig struct {
	// Enabled controls tracing at the installation level
	Enabled bool

	// Gateway holds the namespace and secret names for the Tempo gateway authentication secrets.
	Gateway GatewayConfig
}