config

type Config struct {
	FGA struct {
		Target          string `mapstructure:"fga-target"`
		ObjectType      string `mapstructure:"fga-object-type" default:"core_platform-mesh_io_account"`
		ParentRelation  string `mapstructure:"fga-parent-relation" default:"parent"`
		CreatorRelation string `mapstructure:"fga-creator-relation" default:"owner"`
	} `mapstructure:",squash"`
	KCP struct {
		Kubeconfig string `mapstructure:"kcp-kubeconfig" default:"/api-kubeconfig/kubeconfig"`
	} `mapstructure:",squash"`
	APIExportEndpointSliceName       string `mapstructure:"api-export-endpoint-slice-name" default:"core.platform-mesh.io"`
	CoreModulePath                   string `mapstructure:"core-module-path"`
	BaseDomain                       string `mapstructure:"base-domain" default:"portal.dev.local:8443"`
	GroupClaim                       string `mapstructure:"group-claim" default:"groups"`
	UserClaim                        string `mapstructure:"user-claim" default:"email"`
	DevelopmentAllowUnverifiedEmails bool   `mapstructure:"development-allow-unverified-emails" default:"false"`
	WorkspacePath                    string `mapstructure:"workspace-path" default:"root"`
	WorkspaceTypeName                string `mapstructure:"workspace-type-name" default:"security"`
	DomainCALookup                   bool   `mapstructure:"domain-ca-lookup" default:"false"`
	MigrateAuthorizationModels       bool   `mapstructure:"migrate-authorization-models" default:"false"`
	HttpClientTimeoutSeconds         int    `mapstructure:"http-client-timeout-seconds" default:"30"`
	SetDefaultPassword               bool   `mapstructure:"set-default-password" default:"false"`
	AllowMemberTuplesEnabled         bool   `mapstructure:"allow-member-tuples-enabled" default:"false"`
	IDP                              struct {
		RealmDenyList []string `mapstructure:"idp-realm-deny-list"`

		// SMTP settings
		SMTPServer  string `mapstructure:"idp-smtp-server"`
		SMTPPort    int    `mapstructure:"idp-smtp-port"`
		FromAddress string `mapstructure:"idp-from-address"`

		// SSL settings
		SSL      bool `mapstructure:"idp-smtp-ssl" default:"false"`
		StartTLS bool `mapstructure:"idp-smtp-starttls" default:"false"`

		// Auth settings
		SMTPUser     string `mapstructure:"idp-smtp-user"`
		SMTPPassword string `mapstructure:"idp-smtp-password"`

		AdditionalRedirectURLs    []string `mapstructure:"idp-additional-redirect-urls"`
		KubectlClientRedirectURLs []string `mapstructure:"idp-kubectl-client-redirect-urls" default:"http://localhost:8000,http://localhost:18000"`

		AccessTokenLifespan int  `mapstructure:"idp-access-token-lifespan" default:"28800"`
		RegistrationAllowed bool `mapstructure:"idp-registration-allowed" default:"false"`
	} `mapstructure:",squash"`
	Invite      InviteConfig      `mapstructure:",squash"`
	Initializer InitializerConfig `mapstructure:",squash"`
	Webhooks    WebhooksConfig    `mapstructure:",squash"`
}

type InitContainerClientConfig struct {
	Name      string                 `mapstructure:"name" yaml:"name"`
	SecretRef corev1.SecretReference `mapstructure:"secretRef" yaml:"secretRef"`
}

type InitContainerConfig struct {
	ConfigFile string `mapstructure:"config-file" default:"/config/config.yaml"`
}

type InitContainerConfiguration struct {
	KeycloakBaseURL  string                      `mapstructure:"keycloakBaseURL"`
	KeycloakClientID string                      `mapstructure:"keycloakClientID" default:"admin-cli"`
	KeycloakUser     string                      `mapstructure:"keycloakUser" default:"admin"`
	PasswordFile     string                      `mapstructure:"passwordFile" default:"/secrets/keycloak-password"`
	Clients          []InitContainerClientConfig `mapstructure:"clients"`
}

type InitializerConfig struct {
	WorkspaceInitializerEnabled bool `mapstructure:"initializer-workspace-enabled" default:"true"`
	IDPEnabled                  bool `mapstructure:"initializer-idp-enabled" default:"true"`
	InviteEnabled               bool `mapstructure:"initializer-invite-enabled" default:"true"`
	WorkspaceAuthEnabled        bool `mapstructure:"initializer-workspace-auth-enabled" default:"true"`
}

type InviteConfig struct {
	KeycloakBaseURL      string `mapstructure:"invite-keycloak-base-url"`
	KeycloakClientID     string `mapstructure:"invite-keycloak-client-id" default:"security-operator"`
	KeycloakClientSecret string `mapstructure:"invite-keycloak-client-secret"`
}

type WebhooksConfig struct {
	Enabled bool   `mapstructure:"webhooks-enabled" default:"false"`
	Port    int    `mapstructure:"webhooks-port" default:"9443"`
	CertDir string `mapstructure:"webhooks-cert-dir" default:"/tmp/k8s-webhook-server/serving-certs"`
}