controlplane

type AuthenticatedUser struct {
	// contains filtered or unexported fields
}

type Authn interface {
	// Configure provides the working directory to this authenticator,
	// and configures the given API server arguments to make use of this authenticator.
	//
	// Should be called first.
	Configure(workDir string, args *process.Arguments) error
	// Start runs this authenticator.  Will be called just before API server start.
	//
	// Must be called after Configure.
	Start() error
	// AddUser provisions a user, returning a copy of the given base rest.Config
	// configured to authenticate as that users.
	//
	// May only be called while the authenticator is "running".
	AddUser(user User, baseCfg *rest.Config) (*rest.Config, error)
	// Stop shuts down this authenticator.
	Stop() error
}

type CertAuthn struct {
	// contains filtered or unexported fields
}

type EmbeddedEtcd struct {
	// PeerPort is the etcd peer port.
	PeerPort string
	// ClientPort is the etcd client port.
	ClientPort string
}

type Kcp struct {
	RootShard *Shard

	// Kubectl will override the default asset search path for kubectl
	KubectlPath string
	// contains filtered or unexported fields
}

type KubeCtl struct {
	// Path where the kubectl binary can be found.
	//
	// If this is left empty, we will attempt to locate a binary, by checking for
	// the TEST_ASSET_KUBECTL environment variable, and the default test assets
	// directory. See the "Binaries" section above (in doc.go) for details.
	Path string

	// Opts can be used to configure additional flags which will be used each
	// time the wrapped binary is called.
	//
	// For example, you might want to use this to set the URL of the Shard to
	// connect to.
	Opts []string
}

type SecureServing struct {
	// ListenAddr contains the host & port to serve on.
	//
	// Configurable.  If unset, it will be defaulted.
	process.ListenAddr
	// CA contains the CA that signed the API server's serving certificates.
	//
	// Read-only.
	CA []byte
	// Authn can be used to provision users, and override what type of
	// authentication is used to provision users.
	//
	// Configurable.  If unset, it will be defaulted.
	Authn
}

type Shard struct {
	// SecureServing indicates how the kcp shard will serve on the secure port.
	//
	// Some parts are configurable.  Will be defaulted if unset.
	SecureServing

	// EmbeddedEtcd configures the embedded etcd.
	EmbeddedEtcd EmbeddedEtcd

	// Path is the path to the kcp binary.
	//
	// If this is left as the empty string, we will attempt to locate a binary,
	// by checking for the TEST_ASSET_KCP environment variable, and
	// the default test assets directory. See the "Binaries" section above (in
	// doc.go) for details.
	Path string

	// RootDir is a path to a directory containing certificates the
	// Shard will need, the Shard's embedded etcd data and the admin kubeconfig.
	//
	// If left unspecified, then the Start() method will create a fresh temporary
	// directory, and the Stop() method will clean it up.
	RootDir string

	// StartTimeout, StopTimeout specify the time the Shard is allowed to
	// take when starting and stoppping before an error is emitted.
	//
	// If not specified, these default to 1 min and 20 seconds respectively.
	StartTimeout time.Duration
	StopTimeout  time.Duration

	// Out, Err specify where Shard should write its StdOut, StdErr to.
	//
	// If not specified, the output will be discarded.
	Out io.Writer
	Err io.Writer
	// contains filtered or unexported fields
}

type User struct {
	// Name is the user's Name.
	Name string
	// Groups are the groups to which the user belongs.
	Groups []string
}