config

type ACL struct {
	AllowedRDSTags TagList `mapstructure:"allowed_rds_tags"`
	BlockedRDSTags TagList `mapstructure:"blocked_rds_tags"`
}

type ConfigFile struct {
	Proxy           Proxy                   `mapstructure:"proxy"`
	Targets         map[string]*Target      `mapstructure:"targets"`
	ProxyTargets    map[string]*ProxyTarget `mapstructure:"upstream_proxies"`
	RDSTargets      map[string]*Target
	RedshiftTargets map[string]*Target
	HostMap         map[string]*Target
}

type PortForward struct {
	Namespace      string `mapstructure:"namespace"`
	DeploymentName string `mapstructure:"deployment"`
	RemotePort     string `mapstructure:"remote_port"`
	// Optional, if not set "0" is used
	LocalPort          *string `mapstructure:"local_port"`
	Context            string  `mapstructure:"context"`
	KubeConfigFilePath string  `mapstructure:"kube_config"`
}

type Proxy struct {
	ListenAddr string    `mapstructure:"listen_addr"`
	SSL        ServerSSL `mapstructure:"ssl"`
	ACL        ACL       `mapstructure:"target_acl"`
}

type ProxyTarget struct {
	Name string
	Host string `mapstructure:"host"`
	SSL  SSL    `mapstructure:"ssl"`
	// For tunneling the connection through a kubernetes port-forward, only useful
	// for client-side proxy targets
	PortForward *PortForward `mapstructure:"port_forward,omitempty"`
	AwsAuthOnly bool         `mapstructure:"aws_auth_only", default:false`
}

type SSL struct {
	// Optional client certificate to use
	ClientCertificatePath *string `mapstructure:"client_certificate,omitempty"`
	// Optional client private key to use
	ClientPrivateKeyPath *string `mapstructure:"client_private_key,omitempty"`
	// SSL mode to verify upstream connection, defaults to "verify-full"
	Mode pg.SSLMode `mapstructure:"mode,omitempty"`
	// Path to a root certificate if the certificate is
	// not already in the system roots
	RootCertificatePath *string `mapstructure:"root_certificate"`
}

type ServerSSL struct {
	Enabled               bool    `mapstructure:"enabled"`
	CertificatePath       *string `mapstructure:"certificate,omitempty"`
	PrivateKeyPath        *string `mapstructure:"private_key,omitempty"`
	ClientCertificatePath *string `mapstructure:"client_certificate,omitempty"`
	ClientPrivateKeyPath  *string `mapstructure:"client_private_key,omitempty"`
}

type Tag struct {
	Name  string `mapstructure:"name"`
	Value string `mapstructure:"value"`
}

type TagList []*Tag

type Target struct {
	Host string `mapstructure:"host"`
	SSL  SSL    `mapstructure:"ssl"`
	// Hint for showing the default database in the connection string
	DefaultDatabase *string `mapstructure:"database,omitempty"`
	// LocalPort to use instead of the proxy's default ListenAddr port
	LocalPort *string `mapstructure:"local_port,omitempty"`
	// Name in target list, or RDS db instance identifier
	Name string
	// Only set for RDS instances
	Region string
}