flags

var (
	Application              = kingpin.New("kubesolo", "Ultra-lightweight, OCI-compliant, single-node Kubernetes built for constrained environments such as IoT or IIoT devices running in embedded environments.")
	Version                  = Application.Flag("version", "Show the version and exit.").Short('v').Bool()
	Path                     = Application.Flag("path", "Path to the directory containing the kubesolo configuration files. Defaults to /var/lib/kubesolo.").Envar("KUBESOLO_PATH").Default("/var/lib/kubesolo").String()
	APIServerExtraSANs       = Application.Flag("apiserver-extra-sans", "A comma-separated list of additional Subject Alternative Names (SANs) to include in the API server's TLS certificate. These SANs can be IP addresses or DNS names (e.g., 10.0.0.4,kubesolo.local).").Envar("KUBESOLO_APISERVER_EXTRA_SANS").Default("").String()
	NodeIP                   = Application.Flag("node-ip", "Override the auto-detected node IP. This IP is used for the API server advertise address, the generated kubeconfig, the kubelet node IP and the LoadBalancer EXTERNAL-IP. Useful on hosts with multiple NICs where auto-detection is ambiguous. When unset, kubesolo auto-detects and prefers a private (RFC 1918) address.").Envar("KUBESOLO_NODE_IP").Default("").String()
	MTU                      = Application.Flag("mtu", "Override the auto-detected network MTU used by the embedded CNI bridge (cni0) and pod veth interfaces. Useful on hosts whose primary interface has a reduced MTU (e.g. VPN/tunnel/PPPoE links). Defaults to 0, meaning auto-detect.").Envar("KUBESOLO_MTU").Default("0").Int()
	PortainerEdgeID          = Application.Flag("portainer-edge-id", "Portainer Edge ID. Defaults to empty string.").Envar("KUBESOLO_PORTAINER_EDGE_ID").Default("").String()
	PortainerEdgeKey         = Application.Flag("portainer-edge-key", "Portainer Edge Key. Defaults to empty string.").Envar("KUBESOLO_PORTAINER_EDGE_KEY").Default("").String()
	PortainerEdgeAsync       = Application.Flag("portainer-edge-async", "Enable Portainer Edge Async Mode. Defaults to false.").Envar("KUBESOLO_PORTAINER_EDGE_ASYNC").Default("false").Bool()
	PortainerEdgeImage       = Application.Flag("portainer-edge-image", "Full image reference deployed for the Portainer Edge Agent, including the tag. Any image other than the default is pulled from the registry rather than loaded from the embedded image. Defaults to docker.io/portainer/agent:lts.").Envar("KUBESOLO_PORTAINER_EDGE_IMAGE").Default("docker.io/portainer/agent:lts").String()
	LoadBalancer             = Application.Flag("load-balancer", "Enable load balancer. With this enabled, kubesolo sets the EXTERNAL-IP on services of type LoadBalancer, both when they are created and when an existing service is changed to that type. Defaults to true.").Envar("KUBESOLO_LOAD_BALANCER").Default("true").Bool()
	LoadBalancerIP           = Application.Flag("load-balancer-ip", "Override the IP published as the LoadBalancer EXTERNAL-IP. Useful on hosts with multiple NICs where services should be advertised on a different address than the node IP. When unset, the node IP is used.").Envar("KUBESOLO_LOAD_BALANCER_IP").Default("").String()
	LocalStorage             = Application.Flag("local-storage", "Enable local storage. Defaults to false.").Envar("KUBESOLO_LOCAL_STORAGE").Default("true").Bool()
	LocalStorageSharedPath   = Application.Flag("local-storage-shared-path", "Path to the shared file system for the local storage. Defaults to empty string.").Envar("KUBESOLO_LOCAL_STORAGE_SHARED_PATH").Default("").String()
	Debug                    = Application.Flag("debug", "Enable debug logging. Defaults to false.").Envar("KUBESOLO_DEBUG").Default("false").Bool()
	PprofServer              = Application.Flag("pprof-server", "Enable pprof server. Defaults to false.").Envar("KUBESOLO_PPROF_SERVER").Default("false").Bool()
	ContainerMode            = Application.Flag("container-mode", "Run in container mode with cgroupfs driver and relaxed eviction thresholds. Auto-detected when running inside a container.").Envar("KUBESOLO_CONTAINER_MODE").Bool()
	Full                     = Application.Flag("full", "Deprecated: has no effect. KubeSolo always uses upstream Kubernetes defaults. Retained for backwards compatibility and will be removed in a future release.").Envar("KUBESOLO_FULL").Default("false").Bool()
	DBWALRepair              = Application.Flag("db-wal-repair", "On startup, run an integrity check against the SQLite database and remove WAL artefacts (state.db-wal, state.db-shm) if corruption is detected. Recovers from unclean shutdowns caused by power loss. Defaults to false.").Envar("KUBESOLO_DB_WAL_REPAIR").Default("false").Bool()
	DisableIPv6              = Application.Flag("disable-ipv6", "Disable IPv6 support. When set, CoreDNS will not serve ip6.arpa reverse zones and kubelet will register with an explicit IPv4 node address. Defaults to false.").Envar("KUBESOLO_DISABLE_IPV6").Default("false").Bool()
	StartupTimeout           = Application.Flag("startup-timeout", "Maximum time in seconds to wait for each component to pass its health check during startup. Increase on slow storage such as SD cards. Defaults to 600.").Envar("KUBESOLO_STARTUP_TIMEOUT").Default("600").Int()
	D2K                      = Application.Flag("d2k", "Enable d2k integration. When set, kubesolo deploys the Portainer d2k Docker-to-Kubernetes translator into the target namespace and exposes a Docker-compatible API endpoint over mTLS on port 2376. Defaults to false.").Envar("KUBESOLO_D2K").Default("false").Bool()
	D2KNamespace             = Application.Flag("d2k-namespace", "Single namespace into which d2k is deployed and against which it translates Docker API calls. Only honoured when --d2k is set. Defaults to d2k.").Envar("KUBESOLO_D2K_NAMESPACE").Default("d2k").String()
	ContainerRuntimeEndpoint = Application.Flag("container-runtime-endpoint", "CRI endpoint of a host-managed container runtime, for example unix:///run/containerd/containerd.sock or unix:///run/crio/crio.sock. When set, KubeSolo does not start its own embedded containerd and instead attaches to the given runtime; the host is then responsible for the runtime itself, the OCI runtime, the CNI plugin binaries and the sandbox image. When unset, KubeSolo runs its own embedded containerd.").Envar("KUBESOLO_CONTAINER_RUNTIME_ENDPOINT").Default("").String()
	MetricsServer            = Application.Flag("metrics-server", "Enable the kubesolo Prometheus metrics endpoint. Exposes a /metrics HTTP endpoint with control plane health gauges. Defaults to false.").Envar("KUBESOLO_METRICS_SERVER").Default("false").Bool()
	MetricsBindAddress       = Application.Flag("metrics-bind-address", "Host:port the kubesolo metrics endpoint binds to. Defaults to 127.0.0.1:9105.").Envar("KUBESOLO_METRICS_BIND_ADDRESS").Default("127.0.0.1:9105").String()
	CPUManagerPolicy         = Application.Flag("cpu-manager-policy", "CPU manager policy used by the kubelet. Set to static to give Guaranteed-QoS pods that request whole CPUs exclusive access to those cores, which suits latency-sensitive workloads that must not be preempted by neighbours. Not supported in container mode. Defaults to none, meaning all pods share the CPU pool.").Envar("KUBESOLO_CPU_MANAGER_POLICY").Default("none").String()
	CPUManagerPolicyOptions  = Application.Flag("cpu-manager-policy-options", "Comma-separated key=value options that fine-tune the static CPU manager policy, for example full-pcpus-only=true,strict-cpu-reservation=true. Only honoured when --cpu-manager-policy=static. Defaults to empty.").Envar("KUBESOLO_CPU_MANAGER_POLICY_OPTIONS").Default("").String()
	SystemReserved           = Application.Flag("system-reserved", "Comma-separated ResourceName=Quantity pairs withheld from node allocatable for the host, for example cpu=1,memory=500Mi. Supports cpu, memory, ephemeral-storage and pid. With the static CPU manager policy, cpu= satisfies its reservation requirement but lets the kubelet choose which cores are held back; use --reserved-cpus to name them instead. Defaults to empty.").Envar("KUBESOLO_SYSTEM_RESERVED").Default("").String()
	ReservedCPUs             = Application.Flag("reserved-cpus", "Cpuset reserved for the host and kubesolo itself, for example 0 or 0-1. These CPUs are never given out as exclusive cores. Only honoured when --cpu-manager-policy=static, where it defaults to 0 because the static policy requires a non-empty reservation.").Envar("KUBESOLO_RESERVED_CPUS").Default("").String()
)