login

type LoginConfig struct {
	Token     string
	Endpoint  string
	MachineID string // optional: can be empty
	NodeGroup string // optional

	// MachineIDOverwrite, when true, allows an explicitly-supplied MachineID that
	// differs from the locally-persisted one to replace it: the persisted login
	// identity (machine ID + session token, in the metadata table) is discarded
	// and the next login checks in using the supplied MachineID. Health/system
	// state (reboot history, events) in other tables is preserved.
	//
	// When false (the default), a differing MachineID is rejected with an error
	// instead of silently retargeting the node. This is the safe default for
	// host/systemd installs; the container/DaemonSet pattern sets it true so a
	// node re-enrolled with a new machine object checks in automatically.
	MachineIDOverwrite bool

	// RefreshSessionToken, when true, forces a fresh login on every start even
	// when a machine ID is already persisted -- instead of taking the "skip login"
	// fast path and reusing the persisted session token.
	//
	// The control plane looks up the current workspace-scoped session token on
	// every successful login, so re-login persists the token currently served by
	// the control plane. Re-login requires the caller-provided registration token,
	// which GPUd does not persist. Keep this false outside BYOK deployments that
	// inject a valid registration token on every start.
	RefreshSessionToken bool

	DataDir string

	// GPUCount is the number of GPUs to be reported to the control plane.
	// If not specified, the control plane will use the detected number of GPUs.
	GPUCount string

	// NodeLabels contains Kubernetes label key/value pairs to attach during login.
	// Keys without the managed "user.node.lepton.ai/" prefix are normalized before validation and sending.
	// Nil means "leave labels unchanged"; an empty but non-nil map means "clear labels".
	NodeLabels map[string]string

	PublicIP  string // optional: overrides detected public IP
	PrivateIP string // optional: overrides detected private IP
}