const (
    // DefaultWatchTimeout is the time to wait on watches against the Kubernetes
    // API before giving up and throwing an error.
    DefaultWatchTimeout = 90 * time.Second
)

const (
    SecretNamespace = "default"
)

var AllCerts = []Cert{
    APICert,
    AppOperatorAPICert,
    CalicoEtcdClientCert,
    ClusterOperatorAPICert,
    EtcdCert,
    FlanneldEtcdClientCert,
    NodeOperatorCert,
    PrometheusCert,
    ServiceAccountCert,
    WorkerCert,
}

type AppOperator struct {
    APIServer TLS
}

type Cert string

const (
    APICert                Cert = "api"
    AppOperatorAPICert     Cert = "app-operator-api"
    CalicoEtcdClientCert   Cert = "calico-etcd-client"
    ClusterOperatorAPICert Cert = "cluster-operator-api"
    EtcdCert               Cert = "etcd"
    FlanneldEtcdClientCert Cert = "flanneld-etcd-client"
    NodeOperatorCert       Cert = "node-operator"
    PrometheusCert         Cert = "prometheus"
    ServiceAccountCert     Cert = "service-account"
    WorkerCert             Cert = "worker"
)

type Cluster struct {
    APIServer        TLS
    CalicoEtcdClient TLS
    EtcdServer       TLS
    ServiceAccount   TLS
    Worker           TLS
}

type ClusterOperator struct {
    APIServer TLS
}

type Config struct {
    K8sClient kubernetes.Interface
    Logger    micrologger.Logger

    WatchTimeout time.Duration
}

type Draining struct {
    NodeOperator TLS
}

type File struct {
    AbsolutePath string
    Data         []byte
}

type Files []File

type Interface interface {
    // SearchAppOperator searches for secrets containing TLS certs
    // for managed catalogue service.
    SearchAppOperator(clusterID string) (AppOperator, error)
    // SearchCluster searches for secrets containing TLS certs for guest
    // clusters components.
    SearchCluster(clusterID string) (Cluster, error)
    // SearchClusterOperator searches for secrets containing TLS certs for
    // connecting to guest clusters.
    SearchClusterOperator(clusterID string) (ClusterOperator, error)
    // SearchDraining searches for secrets containing TLS certs for
    // draining nodes in guest clusters.
    SearchDraining(clusterID string) (Draining, error)
    // SearchMonitoring searches for secrets containing TLS certs for
    // monitoring guest clusters.
    SearchMonitoring(clusterID string) (Monitoring, error)
    // SearchTLS provides a dedicated way to lookup a single TLS asset for one
    // specific purpose. This might be used for e.g. granting guest cluster
    // access within operators.
    SearchTLS(clusterID string, cert Cert) (TLS, error)
}

type Monitoring struct {
    KubeStateMetrics TLS
    Prometheus       TLS
}

type Searcher struct {
    // contains filtered or unexported fields
}

type TLS struct {
    CA, Crt, Key []byte
}