defaults

const (
	OAuthProxyAuxiliaryComponentType   = "oauth"
	OAuthProxyAuxiliaryComponentSuffix = "aux-oauth"
)

const (
	// SnykServiceAccountSecretName name of the secret containing SNYK access token used in pipeline scan steps
	SnykServiceAccountSecretName = "radix-snyk-service-account"
	// AzureACRServicePrincipleSecretName name of the secret containing ACR authentication information
	AzureACRServicePrincipleSecretName = "radix-sp-acr-azure"
)

const (
	RadixPipelineScanStepVulnerabilityListKey  = "vulnerability_list"
	RadixPipelineScanStepVulnerabilityCountKey = "vulnerability_count"
	RadixGitCommitHashKey                      = "git-commit-hash"
	RadixGitTagsKey                            = "git-commit-tags"
)

const (
	// OperatorDNSZoneEnvironmentVariable The DNS zone used fro creating ingress of the cluster
	OperatorDNSZoneEnvironmentVariable = "DNS_ZONE"

	// OperatorAppAliasBaseURLEnvironmentVariable The base url for any app alias of the cluster
	OperatorAppAliasBaseURLEnvironmentVariable = "APP_ALIAS_BASE_URL"

	// OperatorClusterTypeEnvironmentVariable The type of cluster dev|playground|prod
	OperatorClusterTypeEnvironmentVariable = "RADIXOPERATOR_CLUSTER_TYPE"

	// DeploymentsHistoryLimitEnvironmentVariable Controls the number of RDs we can have in a environment
	DeploymentsHistoryLimitEnvironmentVariable = "RADIX_DEPLOYMENTS_PER_ENVIRONMENT_HISTORY_LIMIT"

	// JobsHistoryLimitEnvironmentVariable Controls the number of RJs we can have in a app namespace
	JobsHistoryLimitEnvironmentVariable = "RADIX_JOBS_PER_APP_HISTORY_LIMIT"

	// ClusternameEnvironmentVariable The name of the cluster
	ClusternameEnvironmentVariable = "RADIX_CLUSTERNAME"

	// ContainerRegistryEnvironmentVariable The name of the container registry
	ContainerRegistryEnvironmentVariable = "RADIX_CONTAINER_REGISTRY"

	// EnvironmentnameEnvironmentVariable The name of the environment for the application
	EnvironmentnameEnvironmentVariable = "RADIX_ENVIRONMENT"

	// PublicEndpointEnvironmentVariable The environment variable holding the public endpoint of the component
	PublicEndpointEnvironmentVariable = "RADIX_PUBLIC_DOMAIN_NAME"

	// CanonicalEndpointEnvironmentVariable Variable to hold the cluster spcific ingress
	CanonicalEndpointEnvironmentVariable = "RADIX_CANONICAL_DOMAIN_NAME"

	// RadixAppEnvironmentVariable The environment variable holding the name of the app
	RadixAppEnvironmentVariable = "RADIX_APP"

	// RadixComponentEnvironmentVariable The environment variable holding the name of the component
	RadixComponentEnvironmentVariable = "RADIX_COMPONENT"

	// RadixPortsEnvironmentVariable The environment variable holding the available ports of the component
	RadixPortsEnvironmentVariable = "RADIX_PORTS"

	// RadixPortNamesEnvironmentVariable The environment variable holding the available port names of the component
	RadixPortNamesEnvironmentVariable = "RADIX_PORT_NAMES"

	// RadixDNSZoneEnvironmentVariable The environment variable on a radix app giving the dns zone. Will be equal to OperatorDNSZoneEnvironmentVariable
	RadixDNSZoneEnvironmentVariable = "RADIX_DNS_ZONE"

	// RadixClusterTypeEnvironmentVariable The type of cluster dev|playground|prod. Will be equal to OperatorClusterTypeEnvironmentVariable
	RadixClusterTypeEnvironmentVariable = "RADIX_CLUSTER_TYPE"

	// ActiveClusternameEnvironmentVariable The name of the active cluster. If ActiveClusternameEnvironmentVariable == ClusternameEnvironmentVariable, this is the active cluster
	ActiveClusternameEnvironmentVariable = "RADIX_ACTIVE_CLUSTERNAME"

	// RadixCommitHashEnvironmentVariable Contains the commit id of the build
	RadixCommitHashEnvironmentVariable = "RADIX_GIT_COMMIT_HASH"

	// RadixGitTagsEnvironmentVariable Contains a list of git tags which the RADIX_GIT_COMMIT_HASH points to
	RadixGitTagsEnvironmentVariable = "RADIX_GIT_TAGS"

	// RadixRestartEnvironmentVariable Environment variable to indicate that a restart was triggered
	RadixRestartEnvironmentVariable = "RADIX_RESTART_TRIGGERED"

	// RadixImageBuilderEnvironmentVariable Points to the image builder
	RadixImageBuilderEnvironmentVariable = "RADIX_IMAGE_BUILDER"

	// RadixImageScannerEnvironmentVariable Points to the image scanner
	RadixImageScannerEnvironmentVariable = "RADIX_IMAGE_SCANNER"

	// OperatorRadixJobSchedulerEnvironmentVariable Points to the image used to deploy job scheduler REST API for RD jobs
	OperatorRadixJobSchedulerEnvironmentVariable = "RADIXOPERATOR_JOB_SCHEDULER"

	// RadixDeploymentEnvironmentVariable Name of Radix Deployment
	RadixDeploymentEnvironmentVariable = "RADIX_DEPLOYMENT"

	// RadixPromoteDeploymentEnvironmentVariable Name of Radix Deployment for pipeline
	RadixPromoteDeploymentEnvironmentVariable = "DEPLOYMENT_NAME"

	// RadixPromoteFromEnvironmentEnvironmentVariable Name of Radix environment for pipeline promote from
	RadixPromoteFromEnvironmentEnvironmentVariable = "FROM_ENVIRONMENT"

	// RadixPromoteToEnvironmentEnvironmentVariable Name of Radix environment for pipeline promote to
	RadixPromoteToEnvironmentEnvironmentVariable = "TO_ENVIRONMENT"

	// RadixDeploymentForceNonRootContainers Controls the non-root configuration for component containers
	// true: all component containers are force to run as non-root
	// false: non-root for a component container is controlled by runAsNonRoot from radixconfig
	RadixDeploymentForceNonRootContainers = "RADIX_DEPLOYMENTS_FORCE_NON_ROOT_CONTAINER"

	// RadixActiveClusterEgressIpsEnvironmentVariable IPs assigned to the cluster
	RadixActiveClusterEgressIpsEnvironmentVariable = "RADIX_ACTIVE_CLUSTER_EGRESS_IPS"

	// RadixOAuthProxyDefaultOIDCIssuerURLEnvironmentVariable Default OIDC issuer URL for OAuth Proxy
	RadixOAuthProxyDefaultOIDCIssuerURLEnvironmentVariable = "RADIX_OAUTH_PROXY_DEFAULT_OIDC_ISSUER_URL"

	// RadixOAuthProxyImageEnvironmentVariable specifies the name and tag of the OAuth Proxy image
	RadixOAuthProxyImageEnvironmentVariable = "RADIX_OAUTH_PROXY_IMAGE"

	// RadixTektonPipelineImageEnvironmentVariable Points to the utility image for preparing radixconfig copying
	///config/file to/map and preparing Tekton resources
	RadixTektonPipelineImageEnvironmentVariable = "RADIX_TEKTON_IMAGE"

	// RadixConfigFileEnvironmentVariable Path to a radixconfig.yaml
	// to be loaded from Radix application config branch
	RadixConfigFileEnvironmentVariable = "RADIX_FILE_NAME"

	// RadixImageTagEnvironmentVariable Image tag for the built component
	RadixImageTagEnvironmentVariable = "IMAGE_TAG"

	// RadixPushImageEnvironmentVariable Push an image for the built component to an ACR
	RadixPushImageEnvironmentVariable = "PUSH_IMAGE"

	// RadixUseCacheEnvironmentVariable Use cache for the built component
	RadixUseCacheEnvironmentVariable = "USE_CACHE"

	// RadixPipelineJobEnvironmentVariable Radix pipeline job name
	RadixPipelineJobEnvironmentVariable = "JOB_NAME"

	// RadixConfigConfigMapEnvironmentVariable Name of a ConfigMap with loaded radixconfig.yaml
	RadixConfigConfigMapEnvironmentVariable = "RADIX_CONFIG_CONFIGMAP"

	// RadixGitConfigMapEnvironmentVariable Name of a ConfigMap with git commit hash and git tags
	RadixGitConfigMapEnvironmentVariable = "GIT_CONFIGMAP"

	// RadixBranchEnvironmentVariable Branch of the Radix application to process in a pipeline
	RadixBranchEnvironmentVariable = "BRANCH"

	// RadixCommitIdEnvironmentVariable Commit ID of the Radix application to process in a pipeline
	RadixCommitIdEnvironmentVariable = "COMMIT_ID"

	// RadixPipelineTypeEnvironmentVariable Pipeline type
	RadixPipelineTypeEnvironmentVariable = "PIPELINE_TYPE"

	// RadixPipelineTargetEnvironmentsVariable Pipeline target environments
	RadixPipelineTargetEnvironmentsVariable = "TARGET_ENVIRONMENTS"

	// RadixPipelineActionEnvironmentVariable Pipeline action: prepare, run
	RadixPipelineActionEnvironmentVariable = "RADIX_PIPELINE_ACTION"

	// OperatorTenantIdEnvironmentVariable Tenant-id of the subscription
	OperatorTenantIdEnvironmentVariable = "RADIXOPERATOR_TENANT_ID"

	// KubernetesApiPortEnvironmentVariable Port which the K8s API server listens to for HTTPS
	KubernetesApiPortEnvironmentVariable = "KUBERNETES_SERVICE_PORT"

	// LogLevel Log level: ERROR, INFO (default), DEBUG
	LogLevel = "LOG_LEVEL"
)

const (
	// RegistrationControllerThreadsEnvironmentVariable Number of parallel threads for registration controller
	RegistrationControllerThreadsEnvironmentVariable = "REGISTRATION_CONTROLLER_THREADS"

	// ApplicationControllerThreadsEnvironmentVariable Number of parallel threads for application controller
	ApplicationControllerThreadsEnvironmentVariable = "APPLICATION_CONTROLLER_THREADS"

	// EnvironmentControllerThreadsEnvironmentVariable Number of parallel threads for environment controller
	EnvironmentControllerThreadsEnvironmentVariable = "ENVIRONMENT_CONTROLLER_THREADS"

	// DeploymentControllerThreadsEnvironmentVariable Number of parallel threads for deployment controller
	DeploymentControllerThreadsEnvironmentVariable = "DEPLOYMENT_CONTROLLER_THREADS"

	// JobControllerThreadsEnvironmentVariable Number of parallel threads for job controller
	JobControllerThreadsEnvironmentVariable = "JOB_CONTROLLER_THREADS"

	// AlertControllerThreadsEnvironmentVariable Number of parallel threads for alert controller
	AlertControllerThreadsEnvironmentVariable = "ALERT_CONTROLLER_THREADS"

	// KubeClientRateLimitBurstEnvironmentVariable Rate limit for burst for k8s client
	KubeClientRateLimitBurstEnvironmentVariable = "KUBE_CLIENT_RATE_LIMIT_BURST"

	// KubeClientRateLimitQpsEnvironmentVariable Rate limit for queries per second for k8s client
	KubeClientRateLimitQpsEnvironmentVariable = "KUBE_CLIENT_RATE_LIMIT_QPS"
)

const (
	OperatorReadinessProbeInitialDelaySeconds = "RADIXOPERATOR_APP_READINESS_PROBE_INITIAL_DELAY_SECONDS"
	OperatorReadinessProbePeriodSeconds       = "RADIXOPERATOR_APP_READINESS_PROBE_PERIOD_SECONDS"
)

const (
	OperatorDefaultUserGroupEnvironmentVariable             = "RADIXOPERATOR_DEFAULT_USER_GROUP"
	OperatorEnvLimitDefaultMemoryEnvironmentVariable        = "RADIXOPERATOR_APP_ENV_LIMITS_DEFAULT_MEMORY"
	OperatorEnvLimitDefaultCPUEnvironmentVariable           = "RADIXOPERATOR_APP_ENV_LIMITS_DEFAULT_CPU"
	OperatorEnvLimitDefaultRequestMemoryEnvironmentVariable = "RADIXOPERATOR_APP_ENV_LIMITS_DEFAULT_REQUEST_MEMORY"
	OperatorEnvLimitDefaultReqestCPUEnvironmentVariable     = "RADIXOPERATOR_APP_ENV_LIMITS_DEFAULT_REQUEST_CPU"

	OperatorAppLimitDefaultMemoryEnvironmentVariable        = "RADIXOPERATOR_APP_LIMITS_DEFAULT_MEMORY"
	OperatorAppLimitDefaultCPUEnvironmentVariable           = "RADIXOPERATOR_APP_LIMITS_DEFAULT_CPU"
	OperatorAppLimitDefaultRequestMemoryEnvironmentVariable = "RADIXOPERATOR_APP_LIMITS_DEFAULT_REQUEST_MEMORY"
	OperatorAppLimitDefaultReqestCPUEnvironmentVariable     = "RADIXOPERATOR_APP_LIMITS_DEFAULT_REQUEST_CPU"
)

const (
	// RadixGithubWebhookRoleName Name of the cluster role with RBAC for radix-github-webhook service account
	RadixGithubWebhookRoleName = "radix-github-webhook"

	// RadixGithubWebhookServiceAccountName Name of the service account representing the webhook
	RadixGithubWebhookServiceAccountName = "radix-github-webhook"

	// RadixAPIRoleName Name of the cluster role with RBAC for radix-api service account
	RadixAPIRoleName = "radix-api"

	// RadixAPIServiceAccountName Name of the service account representing the Radix API
	RadixAPIServiceAccountName = "radix-api"

	// AppAdminRoleName Name of role which grants access to manage the CI/CD of their applications
	AppAdminRoleName = "radix-app-admin"

	// AppAdminEnvironmentRoleName Name of role which grants access to manage their running Radix applications
	AppAdminEnvironmentRoleName = "radix-app-admin-envs"

	// PipelineRoleName Role to update the radix config from repo and execute the outer pipeline
	PipelineRoleName = "radix-pipeline"

	// PipelineRunnerRoleName Give radix-pipeline service account inside app namespace access to creating namespaces and make deployments through radix-pipeline-runner clusterrole
	PipelineRunnerRoleName = "radix-pipeline-runner"

	// RadixTektonRoleName Role (service account name) of user to apply radixconfig to configmap and process Tekton objects
	RadixTektonRoleName = "radix-tekton"

	// ScanImageRunnerRoleName Role (service account name) of user to store vulnerability scan results to configmap
	ScanImageRunnerRoleName = "radix-scan-image-runner"

	// MachineUserPostfix Role (service account) of machine user will be <appName--machine-user> in default namespace
	MachineUserPostfix = "machine-user"

	// PlatformUserRoleName Name of platform user cluster role
	PlatformUserRoleName = "radix-platform-user"

	// RadixJobSchedulerServerRoleName Name of the cluster role with RBAC for radix-job-scheduler-server service account
	RadixJobSchedulerServerRoleName = "radix-job-scheduler-server"

	// RadixJobSchedulerServerServiceName Name of the service account representing the Radix Job Scheduler
	RadixJobSchedulerServerServiceName = "radix-job-scheduler-server"
)

const (
	OperatorRollingUpdateMaxUnavailable = "RADIXOPERATOR_APP_ROLLING_UPDATE_MAX_UNAVAILABLE"
	OperatorRollingUpdateMaxSurge       = "RADIXOPERATOR_APP_ROLLING_UPDATE_MAX_SURGE"
)

const (
	// BuildSecretPrefix All build secrets will be mounted with this prefix
	BuildSecretPrefix = "BUILD_SECRET_"

	// BuildSecretsName Name of the secret in the app namespace holding all build secrets
	BuildSecretsName = "build-secrets"

	// BuildSecretDefaultData When the build secrets hold radix_undefined, it means they have not been set yet
	BuildSecretDefaultData = "radix_undefined"

	// BlobFuseCredsAccountKeyPartSuffix Account key suffix of secret listed
	BlobFuseCredsAccountKeyPartSuffix = "-accountkey"

	// BlobFuseCredsAccountNamePartSuffix Account name suffix of secret listed
	BlobFuseCredsAccountNamePartSuffix = "-accountname"

	// BlobFuseCredsAccountKeyPart Account key part of secret data
	BlobFuseCredsAccountKeyPart = "accountkey"

	// BlobFuseCredsAccountNamePart Account name part of secret data
	BlobFuseCredsAccountNamePart = "accountname"

	// CsiAzureCredsAccountKeyPartSuffix Account key suffix of secret listed
	CsiAzureCredsAccountKeyPartSuffix = "-accountkey"

	// CsiAzureCredsAccountNamePartSuffix Account name suffix of secret listed
	CsiAzureCredsAccountNamePartSuffix = "-accountname"

	// CsiAzureCredsAccountKeyPart Account key part of secret data
	CsiAzureCredsAccountKeyPart = "accountkey"

	// CsiAzureCredsAccountNamePart Account name part of secret data
	CsiAzureCredsAccountNamePart = "accountname"

	// OAuthCookieSecretKeyName defines the name of the key which holds the secret used by OAuth to encrypt the session cookie
	OAuthCookieSecretKeyName = "CookieSecret"

	// OAuthClientSecretKeyName defines the name of the key which holds the OAuth clientid secret
	OAuthClientSecretKeyName = "ClientSecret"

	// OAuthRedisPasswordKeyName defines the name of the key which holds the Redis password used by OAuth to store session data
	OAuthRedisPasswordKeyName = "RedisPassword"

	// CsiAzureKeyVaultCredsClientIdSuffix Client ID suffix of secret listed
	CsiAzureKeyVaultCredsClientIdSuffix = "-azkv-clientid"

	// CsiAzureKeyVaultCredsClientSecretSuffix Client secret suffix of secret listed
	CsiAzureKeyVaultCredsClientSecretSuffix = "-azkv-clientsecret"

	// CsiAzureKeyVaultCredsClientIdPart Client ID part of secret data for Azure Key Vault
	CsiAzureKeyVaultCredsClientIdPart = "clientid"

	// CsiAzureKeyVaultCredsClientSecretPart Client secret part of secret data for Azure Key Vault
	CsiAzureKeyVaultCredsClientSecretPart = "clientsecret"
)

const PrivateImageHubSecretName = "radix-private-image-hubs"

const RadixJobSchedulerPortName = "scheduler-port"

const RadixJobTimeLimitSeconds = 43200 // 12 hours

const RadixPipelineJobPipelineContainerName = "radix-pipeline"

const RadixPipelineJobPreparePipelinesContainerName = "prepare-pipelines"

const RadixPipelineJobRunPipelinesContainerName = "run-pipelines"