sandboxrender

type Options struct {
	// Image overrides containers[0].image. Empty = no-op.
	Image string
	// InlineResources, when non-nil, replaces containers[0].resources with
	// the given ResourceRequirements. Used when a Member declares its own
	// resource sizing independent of the Template. Future work: when an
	// InstanceType catalog provider is wired in, the Reconciler will
	// resolve InstanceType + Multiplier to ResourceRequirements before
	// calling Apply, so this field stays the single resource-sizing knob
	// the renderer consumes.
	InlineResources *corev1.ResourceRequirements
	// Volumes are the Env-level PVC mounts. Grouped into corev1.Volume entries
	// by volume source (claimName + readOnly) and appended to
	// containers[0].volumeMounts only — never to init containers, and never to
	// an injected sidecar, which may hold brokered credentials.
	Volumes []agentsv1alpha1.EnvVolumeMount
	// ImageRegistry, when non-nil, supplies per-cluster registry rewriting.
	// Whether it is applied is decided by RewriteImages.
	ImageRegistry *RegistryRewrite
	// RewriteImages turns rewriting on for every image this render produces:
	// the Template's own (IdleImage, containers, initContainers) and the
	// caller-supplied Image override. Ignored when ImageRegistry is nil.
	//
	// Opt-in, and deliberately covering the override too. The rewrite is a bare
	// registry-host swap, so only the Template author knows whether the same
	// repository path exists in every region's mirror — and an Env that
	// deliberately points its override at another region's registry (because
	// that is where the image lives) must not have it silently redirected to a
	// mirror that may not carry it. The failure would surface minutes later as
	// ImagePullBackOff on the next claim, not as an error on write.
	RewriteImages bool
}

type RegistryRewrite struct {
	// LocalClusterID is the cluster the rendered Pool will run in. Empty
	// disables rewriting (the operator was started without --local-cluster-id).
	LocalClusterID string
	// Store resolves registry hosts to owning clusters and back. Nil disables
	// rewriting.
	Store RegistryStore
}

type RegistryStore interface {
	LookupRegistry(host string) (clusterID, typ string, ok bool)
	RegistryForType(clusterID, typ string) (host string, ok bool)
}

type RewriteSkipReason string