controllers

const (
	// AllowGlobalImportAnnotation allow import from other namespaces annotation
	AllowGlobalImportAnnotation = "kcertifier.atteg.com/allow-global-import"
	// GlobalPasswordSecretAnnotation secret containing keystore password annotation
	GlobalPasswordSecretAnnotation = "kcertifier.atteg.com/global-password-secret"
	// KcertifierSpecHashAnnotation kcertifier spec hash value annotation
	KcertifierSpecHashAnnotation = "kcertifier.atteg.com/kcertifier-spec-hash"
	// KcertifierNamespaceNameAnnotation kcertifier namespace/name annotation
	KcertifierNamespaceNameAnnotation = "kcertifier.atteg.com/kcertifier-namespace-name"
	// KcertifierCertExpirationAnnotation certificate expiration (notAfter)
	KcertifierCertExpirationAnnotation = "kcertifier.atteg.com/certificate-not-after"

	// DefaultKeyLength default key length
	DefaultKeyLength = 2048
	// DefaultPemKeyDataKey default pem data key
	DefaultPemKeyDataKey = "key.pem"
	// DefaultPemCertDataKey default pem cert key
	DefaultPemCertDataKey = "cert.pem"
	// DefaultPkcs12DataKey default pkcs12 data key
	DefaultPkcs12DataKey = "keystore.p12"
	// DefaultJksDataKey default jks data key
	DefaultJksDataKey = "keystore.jks"
	// DefaultKeystoreAlias default keystore alias
	DefaultKeystoreAlias = "1"

	// PrivateKeyPemType type header for private key pem block
	PrivateKeyPemType = "PRIVATE KEY"
	// CertificateRequestPemType type header for csr
	CertificateRequestPemType = "CERTIFICATE REQUEST"

	// NormalEventType normal event
	NormalEventType = "Normal"
	// WarningEventType warning event
	WarningEventType = "Warning"
	// BuildingPackageEvent building package event
	BuildingPackageEvent = "BuildingPackage"
	// CreatingCSREvent creating csr event
	CreatingCSREvent = "CreatingCSR"
	// AnnotatingCSREvent annotating csr event
	AnnotatingCSREvent = "AnnotatingCSR"
	// CreatingKeySecretEvent creating key secret event
	CreatingKeySecretEvent = "CreatingKeySecret"
	// DeletingKeySecretEvent deleting key secret event
	DeletingKeySecretEvent = "DeletingKeySecret"
	// DeletingCsrEvent deleting csr event
	DeletingCsrEvent = "DeletingCSR"
	// InvalidKcertifierEvent invalid kcertifier event
	InvalidKcertifierEvent = "InvalidKcertifier"
	// InvalidImportSecretEvent invalid import secret event
	InvalidImportSecretEvent = "InvalidImportSecret"
	// InvalidPasswordSecretEvent invalid password secret event
	InvalidPasswordSecretEvent = "InvalidPasswordSecret"
	// ImportKcertifierNotAllowedEvent import kcertifier not allowed event
	ImportKcertifierNotAllowedEvent = "ImportKcertifierNotAllowed"

	// KeySecretGenerateName key secret generate name
	KeySecretGenerateName = "kcertifier-key-"
	// KeySecretKey key secret data key
	KeySecretKey = "key"
	// CsrGenerateName csr generate name
	CsrGenerateName = "kcertifier-csr-"

	// CertDataKeyOption cert data key option
	CertDataKeyOption = "certDataKey"
	// KeyDataKeyOption key data key option
	KeyDataKeyOption = "keyDataKey"
	// KeystoreDataKeyOption keystore data key option
	KeystoreDataKeyOption = "keystoreDataKey"
	// KeystoreAliasOption keystore alias option
	KeystoreAliasOption = "alias"
	// PasswordSecretNamespaceNameOption password secret namespace name option
	PasswordSecretNamespaceNameOption = "passwordSecretNamespaceName"
	// PasswordSecretKeyOption password secret key option
	PasswordSecretKeyOption = "passwordSecretKey"
)

const (
	// ImportKcertifierNamespaceNameAnnotation annotation indicating which kcertifier to import
	ImportKcertifierNamespaceNameAnnotation = "kcertifier.atteg.com/import-kcertifier"
	// ImportKcertifierOverrideCommonNameAnnotation override common name annotation
	ImportKcertifierOverrideCommonNameAnnotation = "kcertifier.atteg.com/override-common-name"
	// ImportKcertifierOverrideSansAnnotation override sans annotation
	ImportKcertifierOverrideSansAnnotation = "kcertifier.atteg.com/override-sans"

	// ImportKcertifierNotFoundEvent event when indicated kcertifier not found
	ImportKcertifierNotFoundEvent = "ImportKcertifierNotFound"
	// ImportKcertifierNotAnnotated event when indicated kcertifier does not have annotation to allow import
	ImportKcertifierNotAnnotated = "ImportKcertifierNotAnnotated"
)

const (
	// FriendlyNameHeader keystore attribute for alias/friendlyName
	FriendlyNameHeader = "friendlyName"
)

const (
	// KcertifierNotFoundForCSREvent event for indicated csr not found
	KcertifierNotFoundForCSREvent = "KcertifierNotFoundForCSR"
)