core

type AuthProvider interface {
	Configure(map[interface{}]interface{}) error
	Configuration(bool) AuthProviderConfig
	WireUpTo(core *Core)

	ReferencedTenants() []string

	Initiate(*route.Request)
	HandleRedirect(*route.Request) *db.User
}

type AuthProviderBase struct {
	Name       string
	Identifier string
	Type       string
	// contains filtered or unexported fields
}

type AuthProviderConfig struct {
	Name       string `json:"name"`
	Identifier string `json:"identifier"`
	Type       string `json:"type"`

	WebEntry string `json:"web_entry"`
	CLIEntry string `json:"cli_entry"`
	Redirect string `json:"redirect"`

	Properties map[string]interface{} `json:"properties,omitempty"`
}

type Bearing struct {
	Tenant   *db.Tenant    `json:"tenant"`
	Archives []*db.Archive `json:"archives"`
	Jobs     []*db.Job     `json:"jobs"`
	Targets  []*db.Target  `json:"targets"`
	Stores   []*db.Store   `json:"stores"`
	Agents   []*db.Agent   `json:"agents"`
	Role     string        `json:"role"`

	Grants struct {
		Admin    bool `json:"admin"`
		Engineer bool `json:"engineer"`
		Operator bool `json:"operator"`
	} `json:"grants"`
}

type Config struct {
	Debug          bool     `yaml:"debug"          env:"SHIELD_DEBUG"`
	DataDir        string   `yaml:"data-dir"       env:"SHIELD_DATA_DIR"`
	WebRoot        string   `yaml:"web-root"       env:"SHIELD_WEB_ROOT"`
	PluginPaths    []string `yaml:"plugin_paths"`
	PluginPathsEnv string   `yaml:"-"              env:"SHIELD_PLUGIN_PATHS"`

	Scheduler struct {
		FastLoop duration `yaml:"fast-loop" env:"SHIELD_SCHEDULER_FAST_LOOP"`
		SlowLoop duration `yaml:"slow-loop" env:"SHIELD_SCHEDULER_SLOW_LOOP"`
		Threads  int      `yaml:"threads"   env:"SHIELD_SCHEDULER_THREADS"`
		Timeout  int      `yaml:"timeout"   env:"SHIELD_SCHEDULER_TIMEOUT"`
	} `yaml:"scheduler"`

	API struct {
		Bind    string `yaml:"bind"  env:"SHIELD_API_BIND"`
		PProf   string `yaml:"pprof" env:"SHIELD_API_PPROF"`
		Session struct {
			ClearOnBoot bool     `yaml:"clear-on-boot" env:"SHIELD_API_SESSION_CLEAR_ON_BOOT"`
			Timeout     duration `yaml:"timeout"       env:"SHIELD_API_SESSION_TIMEOUT"`
		} `yaml:"session"`

		Failsafe struct {
			Username string `yaml:"username" env:"SHIELD_API_FAILSAFE_USERNAME"`
			Password string `yaml:"password" env:"SHIELD_API_FAILSAFE_PASSWORD"`
		} `yaml:"failsafe"`

		Websocket struct {
			WriteTimeout duration `yaml:"write-timeout" env:"SHIELD_API_WEBSOCKET_WRITE_TIMEOUT"`
			PingInterval duration `yaml:"ping-interval" env:"SHIELD_API_WEBSOCKET_PING_INTERVAL"`
		} `yaml:"websocket"`

		Env   string `yaml:"env"   env:"SHIELD_API_ENV"`
		Color string `yaml:"color" env:"SHIELD_API_COLOR"`
		MOTD  string `yaml:"motd"  env:"SHIELD_API_MOTD"`
	} `yaml:"api"`

	Limit struct {
		Retention struct {
			Min int `yaml:"min" env:"SHIELD_LIMIT_RETENTION_MIN"`
			Max int `yaml:"max" env:"SHIELD_LIMIT_RETENTION_MAX"`
		} `yaml:"retention"`
	} `yaml:"limit"`

	Metadata struct {
		Retention struct {
			PurgedArchives duration `yaml:"purged_archives" env:"SHIELD_METADATA_RETENTION_PURGED_ARCHIVES"`
			TaskLogs       duration `yaml:"task_logs"       env:"SHIELD_METADATA_RETENTION_TASK_LOGS"`
		} `yaml:"retention"`
	} `yaml:"metadata"`

	Auth []struct {
		Name       string `yaml:"name"`
		Identifier string `yaml:"identifier"`
		Backend    string `yaml:"backend"`

		Properties map[interface{}]interface{} `yaml:"properties"`
	} `yaml:"auth"`

	LegacyAgents struct {
		Enabled     bool     `yaml:"enabled"      env:"SHIELD_LEGACY_AGENTS_ENABLED"`
		PrivateKey  string   `yaml:"private-key"  env:"SHIELD_LEGACY_AGENTS_PRIVATE_KEY"`
		DialTimeout duration `yaml:"dial-timeout" env:"SHIELD_LEGACY_AGENTS_DIAL_TIMEOUT"`
		MACs        []string `yaml:"macs"`
		// contains filtered or unexported fields
	} `yaml:"legacy-agents"`

	Vault struct {
		Address string `yaml:"address" env:"SHIELD_VAULT_ADDRESS"`
		CACert  string `yaml:"ca"      env:"SHIELD_VAULT_CA"`
	} `yaml:"vault"`

	Mbus struct {
		MaxSlots int `yaml:"max-slots" env:"SHIELD_MBUS_MAX_SLOTS"`
		Backlog  int `yaml:"backlog"   env:"SHIELD_MBUS_BACKLOG"`
	} `yaml:"mbus"`

	Prometheus struct {
		Namespace string `yaml:"namespace" env:"SHIELD_PROMETHEUS_NAMESPACE"`

		Username string `yaml:"username"   env:"SHIELD_PROMETHEUS_USERNAME"`
		Password string `yaml:"password"   env:"SHIELD_PROMETHEUS_PASSWORD"`
		Realm    string `yaml:"realm"      env:"SHIELD_PROMETHEUS_REALM"`
	} `yaml:"prometheus"`

	Cipher string `yaml:"cipher" env:"SHIELD_CIPHER"`

	Bootstrapper string `yaml:"bootstrapper" env:"SHIELD_BOOTSTRAPPER"`
}

type Core struct {
	Config Config
	// contains filtered or unexported fields
}

type GithubAuthProvider struct {
	AuthProviderBase

	ClientID         string `json:"client_id"`
	ClientSecret     string `json:"client_secret"`
	GithubEndpoint   string `json:"github_endpoint"`
	GithubAPI        string `json:"github_api"`
	GithubEnterprise bool   `json:"github_enterprise"`
	Mapping          []struct {
		Github string `json:"github"`
		Tenant string `json:"tenant"`
		Rights []struct {
			Team string `json:"team"`
			Role string `json:"role"`
		} `json:"rights"`
	} `json:"mapping"`
}

type Health struct {
	Health struct {
		Core    string `json:"core"`
		Storage bool   `json:"storage_ok"`
		Jobs    bool   `json:"jobs_ok"`
	} `json:"health"`

	Storage []StorageHealth `json:"storage"`
	Jobs    []JobHealth     `json:"jobs"`

	Stats struct {
		Jobs     int   `json:"jobs"`
		Systems  int   `json:"systems"`
		Archives int   `json:"archives"`
		Storage  int64 `json:"storage"`
		Daily    int64 `json:"daily"`
	} `json:"stats"`
}

type JobHealth struct {
	UUID    string `json:"uuid"`
	Target  string `json:"target"`
	Job     string `json:"job"`
	Healthy bool   `json:"healthy"`
}

type StorageHealth struct {
	UUID    string `json:"uuid"`
	Name    string `json:"name"`
	Healthy bool   `json:"healthy"`
}

type UAAAuthProvider struct {
	AuthProviderBase

	ClientID      string `json:"client_id"`
	ClientSecret  string `json:"client_secret"`
	UAAEndpoint   string `json:"uaa_endpoint"`
	SkipVerifyTLS bool   `json:"skip_verify_tls"`

	Mapping []struct {
		Tenant string `json:"tenant"`
		Rights []struct {
			SCIM string `json:"scim"`
			Role string `json:"role"`
		} `json:"rights"`
	} `json:"mapping"`
	// contains filtered or unexported fields
}