assets

type ClusterConfig struct {
	API string `yaml:"api"`
}

type ClusterRoleBindings struct {
	ClusterRoles []string `yaml:"clusterRoles,omitempty"`
}

type Clusters struct {
	Host    ClusterConfig   `yaml:"host"`
	Members []MemberCluster `yaml:"members"`
}

type DefaultServiceAccountsNamespace struct {
	Host   string `yaml:"host"`
	Member string `yaml:"member"`
}

type FS interface {
	fs.FS
	fs.ReadDirFS
	fs.ReadFileFS
}

type FilenameMatcher func(string) bool

type KubeSawAdmins struct {
	Clusters                        Clusters                        `yaml:"clusters"`
	ServiceAccounts                 []ServiceAccount                `yaml:"serviceAccounts"`
	Users                           []User                          `yaml:"users"`
	DefaultServiceAccountsNamespace DefaultServiceAccountsNamespace `yaml:"defaultServiceAccountsNamespace"`
}

type MemberCluster struct {
	Name          string `yaml:"name"`
	ClusterConfig `yaml:",inline"`
	// SeparateKustomizeComponent when set to true, then the manifests for the member cluster will be generated in a separate
	// Kustomize component (a directory structure that will contain all the generated manifests including the kustomization.yaml files).
	// The name of the root folder will have the same name as the name of the member cluster.
	SeparateKustomizeComponent bool `yaml:"separateKustomizeComponent"`
}

type PermissionBindings struct {
	RoleBindings        []RoleBindings      `yaml:"roleBindings"`
	ClusterRoleBindings ClusterRoleBindings `yaml:"clusterRoleBindings"`
}

type PermissionsPerClusterType map[string]PermissionBindings

type RoleBindings struct {
	Namespace    string   `yaml:"namespace"`
	Roles        []string `yaml:"roles,omitempty"`
	ClusterRoles []string `yaml:"clusterRoles,omitempty"`
}

type Selector struct {
	// SkipMembers can contain a list of member cluster names the entity shouldn't be applied for
	SkipMembers []string `yaml:"skipMembers,omitempty"`
	// MemberClusters defines a list of member cluster names the entity should be applied for
	MemberClusters []string `yaml:"memberClusters,omitempty"`
}

type ServiceAccount struct {
	Name                      string   `yaml:"name"`
	Namespace                 string   `yaml:"namespace,omitempty"`
	Selector                  Selector `yaml:"selector"`
	PermissionsPerClusterType `yaml:",inline"`
}

type User struct {
	Name                      string   `yaml:"name"`
	ID                        []string `yaml:"id"`
	AllClusters               bool     `yaml:"allClusters,omitempty"` // force user and identity manifest generation on all clusters, even if no permissions are specified
	Groups                    []string `yaml:"groups"`
	Selector                  Selector `yaml:"selector"`
	PermissionsPerClusterType `yaml:",inline,omitempty"`
}