const (
    // default service account to use for remote cluster access.
    DefaultServiceAccountName = "istio-reader-service-account"
)

type CACerts struct {
    // contains filtered or unexported fields
}

type Cluster struct {
    ClusterDesc

    // Current context referenced by the MeshDesc. This context corresponds to the `context` in
    // the current kubeconfig file. It is essentially the human friendly display
    // name. It can be changed by the user with`kubectl config rename-context`.
    Context string
    // contains filtered or unexported fields
}

type ClusterDesc struct {
    // Name of the cluster's network
    Network string `json:"network,omitempty"`

    // Optional Namespace override of the Istio control plane. `istio-system` if not set.
    Namespace string `json:"namespace,omitempty"`

    // Optional service account to use for cross-cluster authentication. `istio-multi` if not set.
    ServiceAccountReader string `json:"serviceAccountReader"`

    // When true, disables linking the service registry of this cluster with other clustersByContext in the mesh.
    DisableRegistryJoin bool `json:"disableRegistryJoin,omitempty"`
}

type ConditionFunc func() (done bool, err error)

type Environment interface {
    GetConfig() *api.Config
    CreateClientSet(context string) (kubernetes.Interface, error)
    Stdout() io.Writer
    Stderr() io.Writer
    ReadFile(filename string) ([]byte, error)
    Printf(format string, a ...interface{})
    Errorf(format string, a ...interface{})
    Poll(interval, timeout time.Duration, condition ConditionFunc) error
}

type Gateway struct {
    RegistryServiceName string
    Address             string
    Port                uint32
    Locality            string
    Cluster             *Cluster
}

type KubeEnvironment struct {
    // contains filtered or unexported fields
}

type KubeOptions struct {
    Kubeconfig string
    Context    string
    Namespace  string
}

type Mesh struct {
    // contains filtered or unexported fields
}

type MeshDesc struct {
    // Mesh Identifier.
    MeshID string `json:"mesh_id,omitempty"`

    // Collection of clusters in the multi-cluster mesh. Clusters are indexed by context name and
    // reference clusters defined in the Kubeconfig following kubectl precedence rules.
    Clusters map[string]ClusterDesc `json:"contexts,omitempty"`
}

type RemoteSecretAuthType string

const (
    // Use a bearer token for authentication to the remote kubernetes cluster.
    RemoteSecretAuthTypeBearerToken RemoteSecretAuthType = "bearer-token"

    // User a custom custom authentication plugin for the remote kubernetes cluster.
    RemoteSecretAuthTypePlugin RemoteSecretAuthType = "plugin"
)

type RemoteSecretOptions struct {
    KubeOptions

    // Name of the local cluster whose credentials are stored in the secret. Must be
    // DNS1123 label as it will be used for the k8s secret name.
    ClusterName string

    // Create a secret with this service account's credentials.
    ServiceAccountName string

    // Authentication method for the remote Kubernetes cluster.
    AuthType RemoteSecretAuthType

    // Authenticator plugin configuration
    AuthPluginName   string
    AuthPluginConfig map[string]string
}