logexporter

const (
	// Port is the push endpoint mirrored requests arrive on. It must match the chart's
	// extraPorts entry and the mirror backendRef.
	Port = 3100

	// WALDirectory holds the persistent sending queue. It sits under WALMountPath, which
	// is a per-replica PVC: the WAL is what carries buffered records across a pod restart.
	WALMountPath = "/var/lib/alloy"
	WALDirectory = WALMountPath + "/wal"

	// RunAsUser is the chart's Alloy user, needed as fsGroup so a fresh PVC is writable.
	RunAsUser = 473

	// QueueSize is in items because the queue holds one entry per Loki entry. The default
	// of 1000 requests is under a second of buffer at installation scale and overflows
	// silently.
	QueueSize      = 200000
	QueueConsumers = 4

	// Batching is mandatory: otelcol.receiver.loki calls ConsumeLogs once per entry, so
	// without it every log line becomes its own object. BatchMinSize sets object size and
	// BatchFlushTimeout sets the worst-case latency to the archive.
	BatchMinSize      = 1000
	BatchMaxSize      = 10000
	BatchFlushTimeout = "60s"

	// Retries within the export timeout. Once it elapses the exporter gives up, so
	// raising these past the configured timeout buys nothing.
	RetryMaxAttempts = 10
	RetryMaxBackoff  = "5m"
)

const (
	// Environment variable names for static S3 credentials. otelcol.exporter.awss3 has no
	// credential arguments at all -- it reads the AWS SDK's default chain -- so these are
	// the names the SDK defined, not a choice of ours.
	//
	// They double as the keys a credentialsRef Secret has to carry, which is documented on
	// LogExport.spec.destination.s3.credentialsRef and published in the CRD schema.
	AccessKeyIDEnv     = "AWS_ACCESS_KEY_ID"
	SecretAccessKeyEnv = "AWS_SECRET_ACCESS_KEY" //nolint:gosec // G101: an environment variable name, not a credential.
)