stacks

type TemplateInput struct {
	Install                    *app.Install             `validate:"required"`
	CloudFormationStackVersion *app.InstallStackVersion `validate:"required"`
	InstallState               *state.State             `validate:"required"`
	AppCfg                     *app.AppConfig           `validate:"required"`

	Runner   *app.Runner              `validate:"required"`
	Settings *app.RunnerGroupSettings `validate:"required"`
	APIToken string                   `validate:"required"`

	// runner env vars from runner.toml [env_vars] section, formatted as
	// newline-delimited "export key=value" pairs for injection into user-data.
	RunnerEnvVars string

	// subscripts and embedded templates
	RunnerInitScriptURL string `validate:"required"`
	PhonehomeScript     string `validate:"required"`

	// Custom template URLs for VPC/VNet and runner nested/linked deployments (AWS CloudFormation, Azure ARM)
	VPCNestedStackTemplateURL    string
	RunnerNestedStackTemplateURL string

	// Where the phone-home token map lives, for the Lambda to fetch at invocation
	// time. Never the token itself: the rendered template is fetched
	// unauthenticated from S3 via the quick-link, so it may only carry the secret's
	// location. Empty whenever phone-home auth is not active for the install, which
	// is why these are unvalidated — the GCP path shares this struct and never sets
	// them.
	PhoneHomeSecretARN    string
	PhoneHomeSecretRegion string
}