controllers

type Clock interface {
	Now() time.Time
}

type ClusterReconciler struct {
	client.Client
	Scheme *runtime.Scheme

	VaultTokenSource    func() (*oauth2.Token, error)
	VaultAuthClient     VaultPartialAuthClient
	VaultSecretsClient  VaultPartialSecretsClient
	VaultRole           string
	VaultLoginMountPath string
	VaultKvPath         string

	KeycloakClient     PartialKeycloakClient
	KeycloakRealm      string
	KeycloakLoginRealm string
	KeycloakUser       string
	KeycloakPassword   string

	ClientTemplateFile            string
	ClientRoleMappingTemplateFile string
	JsonnetImportPaths            []string

	KeycloakClientIgnorePaths []string
}

type PartialKeycloakClient interface {
	LoginAdmin(ctx context.Context, username, password, realm string) (*gocloak.JWT, error)
	LogoutPublicClient(ctx context.Context, clientID, realm, accessToken, refreshToken string) error

	GetClients(ctx context.Context, accessToken, realm string, params gocloak.GetClientsParams) ([]*gocloak.Client, error)
	CreateClient(ctx context.Context, accessToken, realm string, newClient gocloak.Client) (string, error)
	UpdateClient(ctx context.Context, accessToken, realm string, updatedClient gocloak.Client) error
	DeleteClient(ctx context.Context, accessToken, realm, idOfClient string) error

	GetClientRoles(ctx context.Context, accessToken, realm, idOfClient string, params gocloak.GetRoleParams) ([]*gocloak.Role, error)
	AddClientRolesToGroup(ctx context.Context, token, realm, idOfClient, groupID string, roles []gocloak.Role) error
	CreateClientRole(ctx context.Context, accessToken, realm, idOfClient string, role gocloak.Role) (string, error)
	DeleteClientRole(ctx context.Context, token, realm, idOfClient, roleName string) error

	GetGroupByPath(ctx context.Context, token, realm, groupPath string) (*gocloak.Group, error)
	GetGroupsByClientRole(ctx context.Context, token, realm, roleName, clientID string) ([]*gocloak.Group, error)
	DeleteClientRoleFromGroup(ctx context.Context, token, realm, idOfClient, groupID string, roles []gocloak.Role) error
}

type VaultPartialAuthClient interface {
	KubernetesLogin(ctx context.Context, request schema.KubernetesLoginRequest, options ...vault.RequestOption) (*vault.Response[map[string]interface{}], error)
}

type VaultPartialSecretsClient interface {
	KvV2Read(ctx context.Context, path string, options ...vault.RequestOption) (*vault.Response[schema.KvV2ReadResponse], error)
	KvV2Write(ctx context.Context, path string, request schema.KvV2WriteRequest, options ...vault.RequestOption) (*vault.Response[schema.KvV2WriteResponse], error)
	KvV2Delete(ctx context.Context, path string, options ...vault.RequestOption) (*vault.Response[map[string]interface{}], error)
}