server

type Auth interface {
	authenticator.Request
	authorizer.RequestAttributesGetter
	authorizer.Authorizer
}

type AuthFlags struct {
	ClientCAFile string
	Anonymous    bool
}

type AuthOptions struct {
	MachinePoolName string
	Authentication  AuthenticationOptions
	Authorization   AuthorizationOptions
}

type AuthenticationOptions struct {
	ClientCAFile string
}

type AuthorizationOptions struct {
	Anonymous bool
}

type Flags struct {
	Serving ServingFlags
	Auth    AuthFlags
}

type MachinePoolRequestAttr struct {
	MachinePoolName string
}

type Options struct {
	// MachineRuntime is the iri-machine runtime service.
	MachineRuntime irimachine.RuntimeService

	// Log is the logger to use in the server.
	// If unset, a package-global router will be used.
	Log logr.Logger

	// HostnameOverride is an optional hostname override to supply for self-signed certificate generation.
	HostnameOverride string

	// Address is the address to listen on.
	// Leave empty to auto-determine host / ephemeral port.
	Address string

	// CertDir is the directory that contains the server key and certificate.
	// If not set, the server would look up the key and certificate in
	// {TempDir}/ironcore-machinepool-server/serving-certs. The key and certificate
	// must be named tls.key and tls.crt, respectively.
	// If the files don't exist, a self-signed certificate is generated.
	CertDir string

	// Auth are options for authentication.
	Auth AuthOptions
	// DisableAuth will turn off authN/Z.
	DisableAuth bool

	StreamCreationTimeout time.Duration
	StreamIdleTimeout     time.Duration
	ShutdownTimeout       time.Duration
	CacheTTL              time.Duration
}

type Server struct {
	// contains filtered or unexported fields
}

type ServingFlags struct {
	DisableAuth      bool
	HostnameOverride string
	Address          string
	CertDir          string

	StreamCreationTimeout time.Duration
	StreamIdleTimeout     time.Duration
	ShutdownTimeout       time.Duration
}