# Arguments for xin-gateway, read by xin-gateway.service.
#
# This file is the whole of xin-gateway's local configuration. Everything it
# serves comes from Gateway API objects in the cluster; what has to be known
# before it can reach the API server is here.
#
#   --controller-name NAME   the GatewayClass.spec.controllerName to claim.
#                            Default xin.dev/gateway-controller. A cluster
#                            running two controllers must give them different
#                            names, or both will claim the same GatewayClass.
#   --address-pool A,B,C     addresses to hand out, one per Gateway. Each must
#                            already exist on this host: the controller binds
#                            <address>:<listener port> for every Gateway it
#                            accepts, which is what lets several Gateways all
#                            declare port 80. In a real cluster this is what an
#                            L2 address pool (MetalLB) provides.
#   --cert-dir DIR           where certificateRef material is written. The unit
#                            sets StateDirectory=xin-gateway, so
#                            /var/lib/xin-gateway is the durable choice; the
#                            binary's own default is under /tmp, which
#                            PrivateTmp=yes would discard on every restart.
#
# Kubernetes credentials are NOT configured here. The binary uses the standard
# client resolution: in-cluster ServiceAccount when it finds one, otherwise
# $KUBECONFIG or ~/.kube/config. A packaged install on a host outside the
# cluster needs KUBECONFIG set, which is what the second line below is for.
#
# Unquoted and word-split by systemd, so this is a list of arguments.

XIN_GATEWAY_ARGS="--cert-dir /var/lib/xin-gateway/certs"
#KUBECONFIG=/etc/xin-gateway/kubeconfig
