bootstrap

type AdminConfig struct {
	// Bootstrap seeds a superuser service account from config so automation (e.g.
	// GitOps) always has a superuser to log in as. See SuperUserBootstrapConfig.
	Bootstrap SuperUserBootstrapConfig `yaml:"bootstrap" mapstructure:"bootstrap"`
}

type AuthzEngine interface {
	WriteSchema(ctx context.Context, schema string) error
}

type BillingPlanRepository interface {
	Get(ctx context.Context) (plan.File, error)
}

type FileService interface {
	GetDefinition(ctx context.Context) (*schema.ServiceDefinition, error)
}

type NamespaceService interface {
	Upsert(ctx context.Context, ns namespace.Namespace) (namespace.Namespace, error)
}

type PermissionService interface {
	List(ctx context.Context, flt permission.Filter) ([]permission.Permission, error)
	Upsert(ctx context.Context, action permission.Permission) (permission.Permission, error)
}

type PlanService interface {
	UpsertPlans(ctx context.Context, planFile plan.File) error
}

type PolicyService interface {
	Create(ctx context.Context, pol policy.Policy) (policy.Policy, error)
	List(ctx context.Context, flt policy.Filter) ([]policy.Policy, error)
}

type RelationService interface {
	Create(ctx context.Context, rel relation.Relation) (relation.Relation, error)
	Delete(ctx context.Context, rel relation.Relation) error
}

type RoleService interface {
	Get(ctx context.Context, id string) (role.Role, error)
	List(ctx context.Context, f role.Filter) ([]role.Role, error)
	Upsert(ctx context.Context, toCreate role.Role) (role.Role, error)
	Update(ctx context.Context, toUpdate role.Role) (role.Role, error)
}

type Service struct {
	// contains filtered or unexported fields
}

type ServiceUserBackfiller interface {
	ListMissingOrgPolicy(ctx context.Context) ([]ServiceUserCandidate, error)
}

type ServiceUserCandidate struct {
	ServiceUserID string
	OrgID         string
}

type ServiceUserCreator interface {
	// GetByID returns serviceuser.ErrNotExist when absent, letting us reuse the
	// fixed-id bootstrap row instead of creating a duplicate.
	GetByID(ctx context.Context, id string) (serviceuser.ServiceUser, error)
	Create(ctx context.Context, su serviceuser.ServiceUser) (serviceuser.ServiceUser, error)
	// Delete rolls back a row this boot just created when the credential write fails.
	Delete(ctx context.Context, id string) error
}

type ServiceUserCredentialStore interface {
	Get(ctx context.Context, id string) (serviceuser.Credential, error)
	Create(ctx context.Context, cred serviceuser.Credential) (serviceuser.Credential, error)
	Delete(ctx context.Context, id string) error
}

type SuperUserBootstrapConfig struct {
	ClientID     string `yaml:"client_id" mapstructure:"client_id"`
	ClientSecret string `yaml:"client_secret" mapstructure:"client_secret"`
	Title        string `yaml:"title" mapstructure:"title"`
}

type SuperUserPromoter interface {
	Sudo(ctx context.Context, id, relationName string) error
}