auth

type ClusterCmd struct {
	Name       string `arg:"" help:"Name of the cluster to authenticate with. Also accepts 'name/namespace' format."`
	ExecPlugin bool   `help:"Automatically run exec plugin after writing the kubeconfig."`
}

type Cmd struct {
	Login   LoginCmd   `cmd:"" help:"Login to nineapis.ch."`
	Cluster ClusterCmd `cmd:"" help:"Authenticate with Kubernetes Cluster."`
	OIDC    OIDCCmd    `cmd:"" help:"Perform interactive OIDC login." hidden:""`
}

type LoginCmd struct {
	Organization string `arg:"" help:"Name of the organization to login to."`
	APIURL       string `help:"The URL of the Nine API" default:"https://nineapis.ch"`
	IssuerURL    string `help:"Issuer URL is the OIDC issuer URL of the API." default:"https://auth.nine.ch/auth/realms/pub"`
	ClientID     string `help:"Client ID is the OIDC client ID of the API." default:"nineapis.ch-f178254"`
	ExecPlugin   bool   `help:"Automatically run exec plugin after writing the kubeconfig." hidden:"" default:"true"`
}

type OIDCCmd struct {
	IssuerURL     string
	ClientID      string
	ClientSecret  string
	ExtraScopes   []string
	UsePKCE       bool
	TokenCacheDir string
}