kubernetes

type Backend struct {
	// contains filtered or unexported fields
}

type Config struct {
	// Namespace is the Kubernetes namespace for execution pods.
	// Default: default
	Namespace string

	// Image is the container image to use for execution.
	// Default: toolruntime-sandbox:latest
	Image string

	// RuntimeClassName is the optional runtime class for stronger isolation.
	// Examples: gvisor, kata
	RuntimeClassName string

	// ServiceAccount is the service account for execution pods.
	ServiceAccount string

	// Client executes pod specs.
	// Required. Provide a PodRunner from an integration package.
	Client PodRunner

	// ImageResolver optionally resolves images before execution.
	ImageResolver ImageResolver

	// HealthChecker optionally verifies cluster availability.
	HealthChecker HealthChecker

	// Logger is an optional logger for backend events.
	Logger Logger
}

type HealthChecker interface {
	Ping(ctx context.Context) error
}

type ImageResolver interface {
	Resolve(ctx context.Context, image string) (string, error)
}

type Logger interface {
	Info(msg string, args ...any)
	Warn(msg string, args ...any)
	Error(msg string, args ...any)
}

type PodResult struct {
	ExitCode int
	Stdout   string
	Stderr   string
	Duration time.Duration
}

type PodRunner interface {
	Run(ctx context.Context, spec PodSpec) (PodResult, error)
}

type PodSpec struct {
	Namespace        string
	Image            string
	Command          []string
	Args             []string
	WorkingDir       string
	Env              []string
	RuntimeClassName string
	ServiceAccount   string
	Resources        ResourceSpec
	Security         SecuritySpec
	Timeout          time.Duration
	Labels           map[string]string
}

type ResourceSpec struct {
	MemoryBytes int64
	CPUQuota    int64
	PidsLimit   int64
	DiskBytes   int64
}

type SecuritySpec struct {
	User           string
	ReadOnlyRootfs bool
	NetworkMode    string
}