reassert

type ArtifactStatus struct {
	Artifact string `json:"artifact"`
	// Expected is true when the artifact is provisioned on this host.
	Expected bool `json:"expected"`
	// Present is true when the artifact is live in the kernel — after a repair
	// that is the re-probe's answer, not the state the run found.
	Present bool `json:"present"`
	// ProbeFailed means presence could not be determined: before a repair, so
	// nothing is repaired, or on the re-probe after one, so Recovered is unknown.
	ProbeFailed bool `json:"probe_failed,omitempty"`
	// Skipped means an operator apply held the lock, so this run left it alone.
	Skipped bool `json:"skipped,omitempty"`
	// Reasserted means a repair was attempted on this run.
	Reasserted bool `json:"reasserted,omitempty"`
	// Recovered means the re-probe after the repair found the artifact present.
	Recovered bool `json:"recovered,omitempty"`
	// Detail is the NIC, the probe error, or the skip reason.
	Detail string `json:"detail,omitempty"`
}

type Config struct {
	HostNftPath   string
	PolicyNftPath string
	NftLockPath   string
	ShapeLockPath string
	// Timeout bounds one Reassert run; zero means DefaultTimeout.
	Timeout time.Duration
	// AcquireLock takes one plane's apply lock without blocking. Its release func
	// must be safe to call even when the lock was not taken.
	AcquireLock    func(path string) (release func(), acquired bool, err error)
	FileExists     func(path string) bool
	NftBinary      func() (string, bool)
	FirewallExists func(ctx context.Context) (bool, error)
	PolicyExists   func(ctx context.Context) (bool, error)
	EgressNIC      func() (string, bool, error)
	QdiscExists    func(ctx context.Context, nic string) (bool, error)
	RestartNft     func(ctx context.Context) error
	RestartShaper  func(ctx context.Context) error
}

type Reasserter struct {
	// contains filtered or unexported fields
}

type Report struct {
	// Type is always ReportType.
	Type      string           `json:"type"`
	Artifacts []ArtifactStatus `json:"artifacts"`
}