orchestration

type Driver interface {
	GetVersion() (string, string)
	SetIPAddrScope(ports map[string][]share.CLUSIPAddr, meta *container.ContainerMeta, nets map[string]*container.Network)
	GetService(meta *container.ContainerMeta) *Service
	GetPlatformRole(meta *container.ContainerMeta) (string, bool) // return platform type and if container should be secured
	GetDomain(labels map[string]string) string
	GetServiceSubnet(envs []string) *net.IPNet
	GetHostTunnelIP(links map[string]sk.NetIface) []net.IPNet
	IgnoreConnectFromManagedHost() bool
	ConsiderHostsAsInternal() bool
	ApplyPolicyAtIngress() bool
	SupportKubeCISBench() bool
	CleanupHostPorts(hostPorts map[string][]share.CLUSIPAddr) error
}

type ResourceDriver interface {
	GetOEMVersion() (string, error)
	Login(username, password string) (string, string, error)
	Logout(username, token string) error
	GetAuthServerAlias() string
	GetUserRoles(username string) (map[string]string, error)
	ListUsers() []UserRBAC
	RegisterResource(rt string) error
	ListResource(rt string) ([]interface{}, error)
	StartWatchResource(rt string, wcb WatchCallback, scb StateCallback) error
	StopWatchResource(rt string) error
	StopWatchAllResources() error
	GetResource(rt, namespace, name string) (interface{}, error)
	AddResource(rt string, res interface{}) error
	UpdateResource(rt string, res interface{}) error
	DeleteResource(rt string, res interface{}) error
}

type Service struct {
	Name   string
	Domain string
}

type StateCallback func(state string, err error)

type UserRBAC struct {
	Name   string
	Domain string
	RBAC   map[string]string // domain -> nv role
}

type WatchCallback func(rt string, event string, object interface{}, old interface{})