gateway

type Configuration struct {
	Hostname         string
	GatewayNamespace string
	GatewayClassName string

	BackendServiceName           string
	BackendPort                  int32
	BackendNamespace             string
	BackendCABundleConfigMapName string

	TLSKeyPair certificatemanagement.KeyPairInterface

	// ResourcePrefix names all generated resources, e.g. "calico-manager" produces
	// "calico-manager-gateway", "calico-manager-route", etc.
	ResourcePrefix string

	// Enterprise controls whether the proxy SA, RoleBinding, and NetworkPolicy
	// are rendered. They are only rendered when the Gateway is placed in the
	// backend (install) namespace: the GatewayAPI controller skips
	// calico-system (lifecycle guard), so this component fills that gap. For
	// custom gateway namespaces the GatewayAPI controller creates the
	// SA/RoleBinding itself and no NetworkPolicy is rendered, matching
	// user-brought Gateways.
	Enterprise bool

	OpenShift bool
}

type DeletionConfiguration struct {
	ResourcePrefix   string
	GatewayNamespace string
	BackendNamespace string
	TLSSecretName    string
	Enterprise       bool

	// MoveTargetNamespace, when set, marks this as cleanup after the gateway
	// moved to that namespace while spec.ingressGateway stayed configured. The
	// Backend is kept — it lives in the backend namespace and the new render
	// still routes to it. The ReferenceGrant is deleted only when the target
	// is the backend namespace, where the render no longer emits it; for any
	// other target the render updates it in place.
	MoveTargetNamespace string
}