config

type Admission struct {
	PodSecurityPolicy                    PodSecurityPolicy                    `yaml:"podSecurityPolicy"`
	AlwaysPullImages                     AlwaysPullImages                     `yaml:"alwaysPullImages"`
	DenyEscalatingExec                   DenyEscalatingExec                   `yaml:"denyEscalatingExec"`
	Initializers                         Initializers                         `yaml:"initializers"`
	Priority                             Priority                             `yaml:"priority"`
	MutatingAdmissionWebhook             MutatingAdmissionWebhook             `yaml:"mutatingAdmissionWebhook"`
	ValidatingAdmissionWebhook           ValidatingAdmissionWebhook           `yaml:"validatingAdmissionWebhook"`
	OwnerReferencesPermissionEnforcement OwnerReferencesPermissionEnforcement `yaml:"ownerReferencesPermissionEnforcement"`
	PersistentVolumeClaimResize          PersistentVolumeClaimResize          `yaml:"persistentVolumeClaimResize"`
}

type AlwaysPullImages struct {
	Enabled bool `yaml:"enabled"`
}

type AmazonSsmAgent struct {
	Enabled     bool   `yaml:"enabled"`
	DownloadUrl string `yaml:"downloadUrl"`
	Sha1Sum     string `yaml:"sha1sum"`
}

type AuditLog struct {
	Enabled bool   `yaml:"enabled"`
	MaxAge  int    `yaml:"maxage"`
	LogPath string `yaml:"logpath"`
}

type Authentication struct {
	Webhook Webhook `yaml:"webhook"`
}

type AwsEnvironment struct {
	Enabled     bool              `yaml:"enabled"`
	Environment map[string]string `yaml:"environment"`
}

type AwsNodeLabels struct {
	Enabled bool `yaml:"enabled"`
}

type CachedEncryptor struct {
	// contains filtered or unexported fields
}

type CloudWatchLogging struct {
	Enabled         bool `yaml:"enabled"`
	RetentionInDays int  `yaml:"retentionInDays"`
	LocalStreaming  `yaml:"localStreaming"`
}

type Cluster struct {
	KubeClusterSettings    `yaml:",inline"`
	DeploymentSettings     `yaml:",inline"`
	DefaultWorkerSettings  `yaml:",inline"`
	ControllerSettings     `yaml:",inline"`
	EtcdSettings           `yaml:",inline"`
	FlannelSettings        `yaml:",inline"`
	AdminAPIEndpointName   string              `yaml:"adminAPIEndpointName,omitempty"`
	ServiceCIDR            string              `yaml:"serviceCIDR,omitempty"`
	RecordSetTTL           int                 `yaml:"recordSetTTL,omitempty"`
	TLSCADurationDays      int                 `yaml:"tlsCADurationDays,omitempty"`
	TLSCertDurationDays    int                 `yaml:"tlsCertDurationDays,omitempty"`
	HostedZoneID           string              `yaml:"hostedZoneId,omitempty"`
	PluginConfigs          model.PluginConfigs `yaml:"kubeAwsPlugins,omitempty"`
	ProvidedEncryptService EncryptService
	// SSHAccessAllowedSourceCIDRs is network ranges of sources you'd like SSH accesses to be allowed from, in CIDR notation
	SSHAccessAllowedSourceCIDRs model.CIDRRanges       `yaml:"sshAccessAllowedSourceCIDRs,omitempty"`
	CustomSettings              map[string]interface{} `yaml:"customSettings,omitempty"`
	KubeResourcesAutosave       `yaml:"kubeResourcesAutosave,omitempty"`
}

type CompactAssets struct {
	// PEM -> encrypted -> gzip -> base64 encoded TLS assets.
	CACert            string
	CAKey             string
	WorkerCACert      string
	WorkerCAKey       string
	APIServerCert     string
	APIServerKey      string
	WorkerCert        string
	WorkerKey         string
	AdminCert         string
	AdminKey          string
	EtcdCert          string
	EtcdClientCert    string
	EtcdClientKey     string
	EtcdKey           string
	EtcdTrustedCA     string
	KIAMServerCert    string
	KIAMServerKey     string
	KIAMAgentCert     string
	KIAMAgentKey      string
	KIAMCACert        string
	ServiceAccountKey string

	// Encrypted -> gzip -> base64 encoded assets.
	AuthTokens        string
	TLSBootstrapToken string
}

type ComputedDeploymentSettings struct {
	AMI string
}

type Config struct {
	Cluster

	AdminAPIEndpoint derived.APIEndpoint
	APIEndpoints     derived.APIEndpoints

	// EtcdNodes is the golang-representation of etcd nodes, which is used to differentiate unique etcd nodes
	// This is used to simplify templating of the control-plane stack template.
	EtcdNodes []derived.EtcdNode

	AssetsConfig *CompactAssets

	KubeAwsPlugins map[string]*pluginmodel.Plugin

	APIServerVolumes pluginmodel.APIServerVolumes
	APIServerFlags   pluginmodel.APIServerFlags
}

type ControllerSettings struct {
	model.Controller `yaml:"controller,omitempty"`
}

type CredentialsOptions struct {
	GenerateCA bool
	CaKeyPath  string
	CaCertPath string
	// KIAM is set to true when you want kube-aws to render TLS assets for uswitch/kiam
	KIAM bool
}

type DefaultWorkerSettings struct {
	WorkerCreateTimeout    string   `yaml:"workerCreateTimeout,omitempty"`
	WorkerInstanceType     string   `yaml:"workerInstanceType,omitempty"`
	WorkerRootVolumeType   string   `yaml:"workerRootVolumeType,omitempty"`
	WorkerRootVolumeIOPS   int      `yaml:"workerRootVolumeIOPS,omitempty"`
	WorkerRootVolumeSize   int      `yaml:"workerRootVolumeSize,omitempty"`
	WorkerSpotPrice        string   `yaml:"workerSpotPrice,omitempty"`
	WorkerSecurityGroupIds []string `yaml:"workerSecurityGroupIds,omitempty"`
	WorkerTenancy          string   `yaml:"workerTenancy,omitempty"`
	WorkerTopologyPrivate  bool     `yaml:"workerTopologyPrivate,omitempty"`
}

type DenyEscalatingExec struct {
	Enabled bool `yaml:"enabled"`
}

type DeploymentSettings struct {
	ComputedDeploymentSettings
	CloudFormation                        model.CloudFormation  `yaml:"cloudformation,omitempty"`
	ClusterName                           string                `yaml:"clusterName,omitempty"`
	S3URI                                 string                `yaml:"s3URI,omitempty"`
	DisableContainerLinuxAutomaticUpdates string                `yaml:"disableContainerLinuxAutomaticUpdates,omitempty"`
	KeyName                               string                `yaml:"keyName,omitempty"`
	Region                                model.Region          `yaml:",inline"`
	AvailabilityZone                      string                `yaml:"availabilityZone,omitempty"`
	ReleaseChannel                        string                `yaml:"releaseChannel,omitempty"`
	AmiId                                 string                `yaml:"amiId,omitempty"`
	DeprecatedVPCID                       string                `yaml:"vpcId,omitempty"`
	VPC                                   model.VPC             `yaml:"vpc,omitempty"`
	DeprecatedInternetGatewayID           string                `yaml:"internetGatewayId,omitempty"`
	InternetGateway                       model.InternetGateway `yaml:"internetGateway,omitempty"`
	// Required for validations like e.g. if instance cidr is contained in vpc cidr
	VPCCIDR                 string            `yaml:"vpcCIDR,omitempty"`
	InstanceCIDR            string            `yaml:"instanceCIDR,omitempty"`
	K8sVer                  string            `yaml:"kubernetesVersion,omitempty"`
	ContainerRuntime        string            `yaml:"containerRuntime,omitempty"`
	KMSKeyARN               string            `yaml:"kmsKeyArn,omitempty"`
	StackTags               map[string]string `yaml:"stackTags,omitempty"`
	Subnets                 model.Subnets     `yaml:"subnets,omitempty"`
	EIPAllocationIDs        []string          `yaml:"eipAllocationIDs,omitempty"`
	ElasticFileSystemID     string            `yaml:"elasticFileSystemId,omitempty"`
	SharedPersistentVolume  bool              `yaml:"sharedPersistentVolume,omitempty"`
	SSHAuthorizedKeys       []string          `yaml:"sshAuthorizedKeys,omitempty"`
	Addons                  model.Addons      `yaml:"addons"`
	Experimental            Experimental      `yaml:"experimental"`
	Kubelet                 Kubelet           `yaml:"kubelet"`
	ManageCertificates      bool              `yaml:"manageCertificates,omitempty"`
	WaitSignal              WaitSignal        `yaml:"waitSignal"`
	CloudWatchLogging       `yaml:"cloudWatchLogging,omitempty"`
	AmazonSsmAgent          `yaml:"amazonSsmAgent,omitempty"`
	CloudFormationStreaming bool `yaml:"cloudFormationStreaming,omitempty"`
	KubeProxy               `yaml:"kubeProxy,omitempty"`
	KubeDns                 `yaml:"kubeDns,omitempty"`
	KubernetesDashboard     `yaml:"kubernetesDashboard,omitempty"`
	// Images repository
	HyperkubeImage model.Image `yaml:"hyperkubeImage,omitempty"`
	AWSCliImage    model.Image `yaml:"awsCliImage,omitempty"`

	CalicoNodeImage                    model.Image `yaml:"calicoNodeImage,omitempty"`
	CalicoCniImage                     model.Image `yaml:"calicoCniImage,omitempty"`
	CalicoCtlImage                     model.Image `yaml:"calicoCtlImage,omitempty"`
	CalicoKubeControllersImage         model.Image `yaml:"calicoKubeControllersImage,omitempty"`
	ClusterAutoscalerImage             model.Image `yaml:"clusterAutoscalerImage,omitempty"`
	ClusterProportionalAutoscalerImage model.Image `yaml:"clusterProportionalAutoscalerImage,omitempty"`
	KIAMImage                          model.Image `yaml:"kiamImage,omitempty"`
	Kube2IAMImage                      model.Image `yaml:"kube2iamImage,omitempty"`
	KubeDnsImage                       model.Image `yaml:"kubeDnsImage,omitempty"`
	KubeDnsMasqImage                   model.Image `yaml:"kubeDnsMasqImage,omitempty"`
	KubeReschedulerImage               model.Image `yaml:"kubeReschedulerImage,omitempty"`
	DnsMasqMetricsImage                model.Image `yaml:"dnsMasqMetricsImage,omitempty"`
	ExecHealthzImage                   model.Image `yaml:"execHealthzImage,omitempty"`
	HelmImage                          model.Image `yaml:"helmImage,omitempty"`
	TillerImage                        model.Image `yaml:"tillerImage,omitempty"`
	HeapsterImage                      model.Image `yaml:"heapsterImage,omitempty"`
	MetricsServerImage                 model.Image `yaml:"metricsServerImage,omitempty"`
	AddonResizerImage                  model.Image `yaml:"addonResizerImage,omitempty"`
	KubernetesDashboardImage           model.Image `yaml:"kubernetesDashboardImage,omitempty"`
	PauseImage                         model.Image `yaml:"pauseImage,omitempty"`
	FlannelImage                       model.Image `yaml:"flannelImage,omitempty"`
	JournaldCloudWatchLogsImage        model.Image `yaml:"journaldCloudWatchLogsImage,omitempty"`
	Kubernetes                         Kubernetes  `yaml:"kubernetes,omitempty"`
}

type DeploymentValidationResult struct {
	// contains filtered or unexported fields
}

type EncryptService interface {
	Encrypt(*kms.EncryptInput) (*kms.EncryptOutput, error)
}

type EncryptedAssetsOnDisk struct {
	// Encrypted PEM encoded TLS assets.
	CACert            EncryptedCredentialOnDisk
	CAKey             EncryptedCredentialOnDisk
	WorkerCACert      EncryptedCredentialOnDisk
	WorkerCAKey       EncryptedCredentialOnDisk
	APIServerCert     EncryptedCredentialOnDisk
	APIServerKey      EncryptedCredentialOnDisk
	WorkerCert        EncryptedCredentialOnDisk
	WorkerKey         EncryptedCredentialOnDisk
	AdminCert         EncryptedCredentialOnDisk
	AdminKey          EncryptedCredentialOnDisk
	EtcdCert          EncryptedCredentialOnDisk
	EtcdClientCert    EncryptedCredentialOnDisk
	EtcdKey           EncryptedCredentialOnDisk
	EtcdClientKey     EncryptedCredentialOnDisk
	EtcdTrustedCA     EncryptedCredentialOnDisk
	KIAMServerCert    EncryptedCredentialOnDisk
	KIAMServerKey     EncryptedCredentialOnDisk
	KIAMAgentCert     EncryptedCredentialOnDisk
	KIAMAgentKey      EncryptedCredentialOnDisk
	KIAMCACert        EncryptedCredentialOnDisk
	ServiceAccountKey EncryptedCredentialOnDisk

	// Other encrypted assets.
	AuthTokens        EncryptedCredentialOnDisk
	TLSBootstrapToken EncryptedCredentialOnDisk
}

type EncryptedCredentialOnDisk struct {
	// contains filtered or unexported fields
}

type EphemeralImageStorage struct {
	Enabled    bool   `yaml:"enabled"`
	Disk       string `yaml:"disk"`
	Filesystem string `yaml:"filesystem"`
}

type EtcdSettings struct {
	model.Etcd `yaml:"etcd,omitempty"`
}

type Experimental struct {
	Admission      Admission      `yaml:"admission"`
	AuditLog       AuditLog       `yaml:"auditLog"`
	Authentication Authentication `yaml:"authentication"`
	AwsEnvironment AwsEnvironment `yaml:"awsEnvironment"`
	AwsNodeLabels  AwsNodeLabels  `yaml:"awsNodeLabels"`
	// When cluster-autoscaler support is enabled, not only controller nodes but this node pool is also given
	// a node label and IAM permissions to run cluster-autoscaler
	ClusterAutoscalerSupport    model.ClusterAutoscalerSupport `yaml:"clusterAutoscalerSupport"`
	TLSBootstrap                TLSBootstrap                   `yaml:"tlsBootstrap"`
	NodeAuthorizer              NodeAuthorizer                 `yaml:"nodeAuthorizer"`
	EphemeralImageStorage       EphemeralImageStorage          `yaml:"ephemeralImageStorage"`
	KIAMSupport                 KIAMSupport                    `yaml:"kiamSupport,omitempty"`
	Kube2IamSupport             Kube2IamSupport                `yaml:"kube2IamSupport,omitempty"`
	GpuSupport                  GpuSupport                     `yaml:"gpuSupport,omitempty"`
	KubeletOpts                 string                         `yaml:"kubeletOpts,omitempty"`
	LoadBalancer                LoadBalancer                   `yaml:"loadBalancer"`
	TargetGroup                 TargetGroup                    `yaml:"targetGroup"`
	NodeDrainer                 model.NodeDrainer              `yaml:"nodeDrainer"`
	Oidc                        model.Oidc                     `yaml:"oidc"`
	DisableSecurityGroupIngress bool                           `yaml:"disableSecurityGroupIngress"`
	NodeMonitorGracePeriod      string                         `yaml:"nodeMonitorGracePeriod"`
	model.UnknownKeys           `yaml:",inline"`
}

type FlannelSettings struct {
	PodCIDR string `yaml:"podCIDR,omitempty"`
}

type GpuSupport struct {
	Enabled      bool   `yaml:"enabled"`
	Version      string `yaml:"version"`
	InstallImage string `yaml:"installImage"`
}

type IPVSMode struct {
	Enabled       bool   `yaml:"enabled"`
	Scheduler     string `yaml:"scheduler"`
	SyncPeriod    string `yaml:"syncPeriod"`
	MinSyncPeriod string `yaml:"minSyncPeriod"`
}

type InfrastructureValidationResult struct {
	// contains filtered or unexported fields
}

type InitialConfig struct {
	AmiId            string
	AvailabilityZone string
	ClusterName      string
	ExternalDNSName  string
	HostedZoneID     string
	KMSKeyARN        string
	KeyName          string
	NoRecordSet      bool
	Region           model.Region
	S3URI            string
}

type Initializers struct {
	Enabled bool `yaml:"enabled"`
}

type KIAMSupport struct {
	Enabled bool `yaml:"enabled"`
}

type KMSConfig struct {
	Region         model.Region
	EncryptService EncryptService
	KMSKeyARN      string
}

type Kube2IamSupport struct {
	Enabled bool `yaml:"enabled"`
}

type KubeClusterSettings struct {
	APIEndpointConfigs model.APIEndpoints `yaml:"apiEndpoints,omitempty"`
	// Required by kubelet to locate the kube-apiserver
	ExternalDNSName string `yaml:"externalDNSName,omitempty"`
	// Required by kubelet to locate the cluster-internal dns hosted on controller nodes in the base cluster
	DNSServiceIP string `yaml:"dnsServiceIP,omitempty"`
	UseCalico    bool   `yaml:"useCalico,omitempty"`
}

type KubeDns struct {
	NodeLocalResolver   bool              `yaml:"nodeLocalResolver"`
	DeployToControllers bool              `yaml:"deployToControllers"`
	Autoscaler          KubeDnsAutoscaler `yaml:"autoscaler"`
}

type KubeDnsAutoscaler struct {
	CoresPerReplica int `yaml:"coresPerReplica"`
	NodesPerReplica int `yaml:"nodesPerReplica"`
	Min             int `yaml:"min"`
}

type KubeProxy struct {
	IPVSMode IPVSMode `yaml:"ipvsMode"`
}

type KubeResourcesAutosave struct {
	Enabled bool `yaml:"enabled"`
	S3Path  string
}

type Kubelet struct {
	RotateCerts RotateCerts `yaml:"rotateCerts"`
}

type Kubernetes struct {
	Networking Networking `yaml:"networking,omitempty"`
}

type KubernetesDashboard struct {
	AdminPrivileges bool `yaml:"adminPrivileges"`
	InsecureLogin   bool `yaml:"insecureLogin"`
}

type LoadBalancer struct {
	Enabled          bool     `yaml:"enabled"`
	Names            []string `yaml:"names"`
	SecurityGroupIds []string `yaml:"securityGroupIds"`
}

type LocalStreaming struct {
	Enabled bool   `yaml:"enabled"`
	Filter  string `yaml:"filter"`
	// contains filtered or unexported fields
}

type MutatingAdmissionWebhook struct {
	Enabled bool `yaml:"enabled"`
}

type Networking struct {
	SelfHosting SelfHosting `yaml:"selfHosting"`
}

type NodeAuthorizer struct {
	Enabled bool `yaml:"enabled"`
}

type OwnerReferencesPermissionEnforcement struct {
	Enabled bool `yaml:"enabled"`
}

type PersistentVolumeClaimResize struct {
	Enabled bool `yaml:"enabled"`
}

type PodSecurityPolicy struct {
	Enabled bool `yaml:"enabled"`
}

type Priority struct {
	Enabled bool `yaml:"enabled"`
}

type RawAssetsOnDisk struct {
	// PEM encoded TLS assets.
	CACert            RawCredentialOnDisk
	CAKey             RawCredentialOnDisk
	WorkerCACert      RawCredentialOnDisk
	WorkerCAKey       RawCredentialOnDisk
	APIServerCert     RawCredentialOnDisk
	APIServerKey      RawCredentialOnDisk
	WorkerCert        RawCredentialOnDisk
	WorkerKey         RawCredentialOnDisk
	AdminCert         RawCredentialOnDisk
	AdminKey          RawCredentialOnDisk
	EtcdCert          RawCredentialOnDisk
	EtcdClientCert    RawCredentialOnDisk
	EtcdKey           RawCredentialOnDisk
	EtcdClientKey     RawCredentialOnDisk
	EtcdTrustedCA     RawCredentialOnDisk
	KIAMServerCert    RawCredentialOnDisk
	KIAMServerKey     RawCredentialOnDisk
	KIAMAgentCert     RawCredentialOnDisk
	KIAMAgentKey      RawCredentialOnDisk
	KIAMCACert        RawCredentialOnDisk
	ServiceAccountKey RawCredentialOnDisk

	// Other assets.
	AuthTokens        RawCredentialOnDisk
	TLSBootstrapToken RawCredentialOnDisk
}

type RawAssetsOnMemory struct {
	// PEM encoded TLS assets.
	CACert            []byte
	CAKey             []byte
	WorkerCACert      []byte
	WorkerCAKey       []byte
	APIServerCert     []byte
	APIServerKey      []byte
	WorkerCert        []byte
	WorkerKey         []byte
	AdminCert         []byte
	AdminKey          []byte
	EtcdCert          []byte
	EtcdClientCert    []byte
	EtcdKey           []byte
	EtcdClientKey     []byte
	EtcdTrustedCA     []byte
	KIAMServerCert    []byte
	KIAMServerKey     []byte
	KIAMAgentCert     []byte
	KIAMAgentKey      []byte
	KIAMCACert        []byte
	ServiceAccountKey []byte

	// Other assets.
	AuthTokens        []byte
	TLSBootstrapToken []byte
}

type RawCredentialOnDisk struct {
	// contains filtered or unexported fields
}

type RotateCerts struct {
	Enabled bool `yaml:"enabled"`
}

type SelfHosting struct {
	Enabled         bool        `yaml:"enabled"`
	Type            string      `yaml:"type"`
	Typha           bool        `yaml:"typha"`
	CalicoNodeImage model.Image `yaml:"calicoNodeImage"`
	CalicoCniImage  model.Image `yaml:"calicoCniImage"`
	FlannelImage    model.Image `yaml:"flannelImage"`
	FlannelCniImage model.Image `yaml:"flannelCniImage"`
	TyphaImage      model.Image `yaml:"typhaImage"`
}

type StackConfig struct {
	*Config
	StackTemplateOptions
	UserDataController    model.UserData
	UserDataEtcd          model.UserData
	ControllerSubnetIndex int
	ExtraCfnResources     map[string]interface{}
}

type StackTemplateOptions struct {
	AssetsDir             string
	ControllerTmplFile    string
	EtcdTmplFile          string
	StackTemplateTmplFile string
	S3URI                 string
	PrettyPrint           bool
	SkipWait              bool
}

type TLSBootstrap struct {
	Enabled bool `yaml:"enabled"`
}

type TargetGroup struct {
	Enabled          bool     `yaml:"enabled"`
	Arns             []string `yaml:"arns"`
	SecurityGroupIds []string `yaml:"securityGroupIds"`
}

type ValidatingAdmissionWebhook struct {
	Enabled bool `yaml:"enabled"`
}

type WaitSignal struct {
	// WaitSignal is enabled by default. If you'd like to explicitly disable it, set this to `false`.
	// Keeping this `nil` results in the WaitSignal to be enabled.
	EnabledOverride      *bool `yaml:"enabled"`
	MaxBatchSizeOverride *int  `yaml:"maxBatchSize"`
}

type Webhook struct {
	Enabled  bool   `yaml:"enabled"`
	CacheTTL string `yaml:"cacheTTL"`
	Config   string `yaml:"configBase64"`
}