gatewayapi

type Reconciler struct {
	client.Client

	// APIReader is an uncached reader (mgr.GetAPIReader) used to fetch the
	// cluster-scoped GatewayClass for status (a cached Get on a cluster-scoped
	// resource can miss before its informer has synced and return NotFound).
	APIReader client.Reader

	// Sink receives the projected virtual hosts/certs and L4 routes (the snapshot cache).
	Sink RouteSink
	// Namespace is the edge's own namespace. It is used as the default namespace
	// for the TLS Secret provider's cert lookups and as the namespace of the edge
	// LoadBalancer Service (EdgeServiceName) from which the published Gateway
	// status.addresses is resolved; Gateways/Routes are listed and reconciled
	// CLUSTER-WIDE (namespace-agnostic), so this field does not scope the
	// route/Gateway lists.
	Namespace string
	// EdgeServiceName is the name of the edge's own LoadBalancer Service (in
	// Namespace). Its status.loadBalancer.ingress address is published as every
	// class-aether Gateway's status.addresses (proposal 021 Phase 1 — the shared
	// edge address), and is used as the base name for per-Gateway Services in Phase 2.
	// Empty disables address publication.
	EdgeServiceName string
	// GatewayClassName is the GatewayClass whose Gateways this edge serves.
	GatewayClassName string
	// Secrets resolves Gateway listener TLS cert material; nil disables TLS.
	Secrets *secret.Registry
	// MeshDomain is the mesh DNS domain used to build TCP cluster names.
	MeshDomain string
	Log        *slog.Logger
}

type RouteSink interface {
	SetVirtualHosts(vhosts []cache.VirtualHost)
	SetEdgeTLSSecrets(ctx context.Context, certs map[string]cache.EdgeTLSCert) error
	SetEdgeTCPRoutes(routes []proxy.EdgeL4TCPRoute)
	SetEdgeTLSRoutes(routes []proxy.EdgeL4TLSRoute)
	// SetEdgeHTTPRedirect controls whether the HTTP-port listener 301-redirects
	// to https (true) or serves routes directly (false). The reconciler sets this
	// on every reconcile based on whether any Gateway in the current set carries
	// the gateway.aether.io/http-redirect: "true" annotation.
	SetEdgeHTTPRedirect(enabled bool)
	// SetEdgeGateways replaces the per-Gateway routing set (proposal 021 Phase 2).
	// When non-empty, the snapshot emits per-Gateway listeners and route configs
	// (one per Gateway, bound on allocated internal ports) instead of the shared
	// Phase 1 listeners. When empty, falls back to Phase 1 behavior.
	SetEdgeGateways(gateways []cache.EdgeGatewayEntry)
	// HasRegistryService reports whether the named service is currently known to
	// the mesh registry (namespace-blind, bare service name). Used by the
	// backend-existence check to distinguish mesh/registry services (which need
	// no k8s Service object in the route namespace) from k8s-only Services.
	// Returns false when the registry does not implement ServiceCatalog or no
	// registry has been configured (safe default = not a registry service).
	HasRegistryService(name string) bool
}