options

type AdminAuthentication struct {
	KubeConfigPath string

	// TODO: move into Secret in-cluster, maybe by using an "in-cluster" string as value
	TokenHashFilePath string
}

type ApiResourceController = apiresource.Options

type Authorization struct {
	// AlwaysAllowPaths are HTTP paths which are excluded from authorization. They can be plain
	// paths or end in * in which case prefix-match is applied. A leading / is optional.
	AlwaysAllowPaths []string

	// AlwaysAllowGroups are groups which are allowed to take any actions.  In kube, this is system:masters.
	AlwaysAllowGroups []string
}

type CompletedOptions struct {
	// contains filtered or unexported fields
}

type Controllers struct {
	EnableAll           bool
	IndividuallyEnabled []string
	ApiResource         ApiResourceController
	SyncTargetHeartbeat SyncTargetHeartbeatController
	SAController        kcmoptions.SAControllerOptions
}

type EmbeddedEtcd struct {
	Enabled bool

	Directory         string
	PeerPort          string
	ClientPort        string
	ListenMetricsURLs []string
	WalSizeBytes      int64
	QuotaBackendBytes int64
	ForceNewCluster   bool
}

type ExtraOptions struct {
	RootDirectory            string
	ProfilerAddress          string
	ShardKubeconfigFile      string
	ShardBaseURL             string
	ShardExternalURL         string
	ShardName                string
	DiscoveryPollInterval    time.Duration
	ExperimentalBindFreePort bool
}

type Options struct {
	GenericControlPlane ServerRunOptions
	EmbeddedEtcd        EmbeddedEtcd
	Controllers         Controllers
	Authorization       Authorization
	AdminAuthentication AdminAuthentication
	Virtual             Virtual

	Extra ExtraOptions
}

type ServerRunOptions struct {
	options.ServerRunOptions
}

type SyncTargetHeartbeatController = heartbeat.Options

type Virtual struct {
	VirtualWorkspaces virtualworkspacesoptions.Options
	Enabled           bool

	// ExternalVirtualWorkspaceAddress holds a URL to redirect to for stand-alone virtual workspaces.
	ExternalVirtualWorkspaceAddress string
}