config

type Config struct {
	ListenAddr       string             `yaml:"listenAddr"`
	MetricsPath      string             `yaml:"metricsPath"`
	HistoryDB        string             `yaml:"historyDB"`
	SPIFFESocket     string             `yaml:"spiffeSocket"`
	OTelEndpoint     string             `yaml:"otelEndpoint"`
	ClusterName      string             `yaml:"clusterName"`
	Namespaces       []string           `yaml:"namespaces"`
	External         []ExternalTarget   `yaml:"external"`
	Remotes          []RemoteCluster    `yaml:"remotes"`
	CTDomains        []string           `yaml:"ctDomains"`
	CTAllowedIssuers []string           `yaml:"ctAllowedIssuers"`
	Notifications    NotificationConfig `yaml:"notifications"`
	RefreshEvery     time.Duration      `yaml:"refreshEvery"`
	WarnBefore       time.Duration      `yaml:"warnBefore"`
	CritBefore       time.Duration      `yaml:"critBefore"`
}

type ExternalTarget struct {
	URL string `yaml:"url"` // https://host:port or tcp://host:port?sni=name
}

type NotificationConfig struct {
	Webhooks   []WebhookConfig `yaml:"webhooks"`
	Severities []string        `yaml:"severities"`
	Cooldown   time.Duration   `yaml:"cooldown"`
	Enabled    bool            `yaml:"enabled"`
}

type RemoteCluster struct {
	Name string `yaml:"name"` // cluster label
	URL  string `yaml:"url"`  // base URL of remote trustwatch (e.g. http://trustwatch.staging:8080)
}

type WebhookConfig struct {
	URL          string `yaml:"url"`
	Type         string `yaml:"type"`         // "slack", "generic", "pagerduty", or "grafana"
	RoutingKey   string `yaml:"routingKey"`   // PagerDuty Events API v2 routing key
	APIKey       string `yaml:"apiKey"`       // Grafana API key (Bearer token)
	DashboardUID string `yaml:"dashboardUID"` // Grafana dashboard UID (optional)
}