orchestration

type Driver interface {
	GetVersion(reGetK8sVersion, reGetOcVersion bool) (string, string)
	SetIPAddrScope(ports map[string][]share.CLUSIPAddr, meta *container.ContainerMeta, nets map[string]*container.Network)
	GetServiceFromPodLabels(namespace, pod, node string, labels map[string]string) *Service
	GetService(meta *container.ContainerMeta, node string) *Service
	GetPlatformRole(meta *container.ContainerMeta) (string, bool) // return platform type and if container should be secured
	GetDomain(labels map[string]string) string
	GetServiceSubnet(envs []string) *net.IPNet
	GetHostTunnelIP(links map[string]sk.NetIface) []net.IPNet
	IgnoreConnectFromManagedHost() bool
	ConsiderHostsAsInternal() bool
	ApplyPolicyAtIngress() bool
	SupportKubeCISBench() bool
	CleanupHostPorts(hostPorts map[string][]share.CLUSIPAddr) error
	SetFlavor(flavor string) error // for Openshift & Rancher
}

type ResourceDriver interface {
	GetOEMVersion() (string, error)
	Login(username, password string) (string, string, error)
	Logout(username, token string) error
	GetAuthServerAlias() string
	GetUserRoles(username string, subjType uint8) (map[string]string, map[string]share.NvFedPermissions, error)
	ListUsers() []UserRBAC
	RegisterResource(rt string) error
	ListResource(rt, namespace string) ([]interface{}, error)
	StartWatchResource(rt, ns string, wcb WatchCallback, scb StateCallback) error
	StopWatchResource(rt string) error
	StopWatchAllResources() error
	GetResource(rt, namespace, name string) (interface{}, error)
	AddResource(rt string, res interface{}) error
	UpdateResource(rt string, res interface{}) error
	DeleteResource(rt string, res interface{}) error
	SetFlavor(flavor string) error                        // for Openshift & Rancher
	GetPlatformUserGroups(token string) ([]string, error) // for OpenShift
}

type Service struct {
	Name   string
	Domain string
}

type StateCallback func(state string, err error)

type UserRBAC struct {
	Name   string
	Domain string
	RBAC   map[string]string                 // domain -> nv role
	RBAC2  map[string]share.NvFedPermissions // domain -> nv permissions
}

type WatchCallback func(rt string, event string, object interface{}, old interface{})