configuration

Documentation

Index

• type AuthConfig
• type BasicAuthenticationConfig
• type KerberosAuthenticationConfig
• type KubernetesAuthConfig
• type LDAPConfig
• type OpenIdAuthenticationConfig
• type UserInfo

Types

type AuthConfig

type AuthConfig struct {
	AnonymousAuth bool

	BasicAuth      BasicAuthenticationConfig
	KubernetesAuth KubernetesAuthConfig
	OpenIdAuth     OpenIdAuthenticationConfig
	Kerberos       KerberosAuthenticationConfig

	PermissionGroupMapping map[permission.Permission][]string
	PermissionScopeMapping map[permission.Permission][]string
	PermissionClaimMapping map[permission.Permission][]string
}

type BasicAuthenticationConfig

type BasicAuthenticationConfig struct {
	Users map[string]UserInfo
}

type KerberosAuthenticationConfig

type KerberosAuthenticationConfig struct {
	KeytabLocation  string
	PrincipalName   string
	UserNameSuffix  string
	GroupNameSuffix string
	LDAP            LDAPConfig
}

type KubernetesAuthConfig

type KubernetesAuthConfig struct {
	KidMappingFileLocation string
	InvalidTokenExpiry     int64
}

type LDAPConfig

type LDAPConfig struct {
	URL             string
	Username        string
	Password        string
	GroupSearchBase string
	CacheExpiry     time.Duration
}

type OpenIdAuthenticationConfig

type OpenIdAuthenticationConfig struct {
	ProviderUrl string
	GroupsClaim string

	// If your OIDC provider signs token with key intended solely for this application and audience claim does not
	// contain any clientId, you can disable client ID check.
	// Otherwise clientId is required
	SkipClientIDCheck bool
	ClientId          string
}

type UserInfo

type UserInfo struct {
	Password string
	Groups   []string
}