consensus

const (
	// ReasonDaemonSucceeded marks a successful condition (DaemonResult=True,
	// ConfigCRsApplied=True).
	ReasonDaemonSucceeded ConditionReason = "Succeeded"

	// ReasonDaemonFileDownloadFailed / ReasonDaemonFileHashMismatch report a fatal
	// external-files failure on DaemonResult=False.
	ReasonDaemonFileDownloadFailed ConditionReason = "FileDownloadFailed"
	ReasonDaemonFileHashMismatch   ConditionReason = "FileHashMismatch"

	// ReasonDaemonInfraUpgradeFailed reports a fatal infra-upgrade failure. It is
	// also the generic fallback reason for an unclassified fatal execute failure,
	// mirroring the UC provisioner-proxy's fallback (provisioner_proxy.go).
	ReasonDaemonInfraUpgradeFailed ConditionReason = "InfraUpgradeFailed"

	// ReasonDaemonSelfUpgradeFailed reports a fatal daemon self-upgrade failure.
	ReasonDaemonSelfUpgradeFailed ConditionReason = "SelfUpgradeFailed"

	// ReasonDaemonDeadlineExceeded is written on DaemonResult=False when the handoff
	// deadline (anchored to status.startTime) elapses before a terminal outcome, so
	// a stuck-transient operation terminates rather than hanging (HIP-1496).
	ReasonDaemonDeadlineExceeded ConditionReason = "DeadlineExceeded"
)

const (
	ConditionTrue  ConditionStatus = "True"
	ConditionFalse ConditionStatus = "False"
)

const (
	// DaemonResultCondition gates ReadyForProvisionerDaemon → PendingInfraUpgrade
	// (True) or → Failed (False).
	DaemonResultCondition ConditionType = "DaemonResult"

	// ConfigCRsAppliedCondition gates PendingInfraUpgrade → PendingNodeUpgrade once
	// the daemon has applied the upgrade package's config CRs.
	ConfigCRsAppliedCondition ConditionType = "ConfigCRsApplied"
)

const (
	// PhasePending is the initial phase set by the reconciler when the CR is created.
	PhasePending Phase = "Pending"

	// PhaseReadyForProvisionerDaemon is set by the reconciler to hand the operation
	// to the daemon. The daemon's upgrade monitor triggers handleExecute on this phase.
	PhaseReadyForProvisionerDaemon Phase = "ReadyForProvisionerDaemon"

	// PhasePendingInfraUpgrade is written by the daemon — durably, in etcd —
	// before it performs any infra-mutating work. It is the single crash-recovery
	// anchor: on restart the daemon re-reads the CR, sees this phase, and resumes
	// the infra upgrade from here (#709 / #717).
	PhasePendingInfraUpgrade Phase = "PendingInfraUpgrade"

	// PhasePendingNodeUpgrade is the daemon's final phase write. The daemon sets
	// the DaemonResult condition (True/False) and then transitions the CR to this
	// phase, handing control back to the reconciler.
	PhasePendingNodeUpgrade Phase = "PendingNodeUpgrade"

	// PhaseSucceeded is a terminal phase written ONLY by the reconciler.
	PhaseSucceeded Phase = "Succeeded"

	// PhaseFailed is a terminal phase written ONLY by the reconciler.
	PhaseFailed Phase = "Failed"
)