upstreamwatchers

Documentation

Index

• Constants
• func EvaluateConditions(conditions GradatedConditions, config *upstreamldap.ProviderConfig) (provider.UpstreamLDAPIdentityProviderI, bool)
• func TestConnection(ctx context.Context, bindSecretName string, ...) *v1alpha1.Condition
• func ValidateSecret(secretInformer corev1informers.SecretInformer, secretName string, ...) (*v1alpha1.Condition, string)
• func ValidateTLSConfig(tlsSpec *v1alpha1.TLSSpec, config *upstreamldap.ProviderConfig) *v1alpha1.Condition
• type GradatedCondition
• type GradatedConditions
  • func ValidateGenericLDAP(ctx context.Context, upstream UpstreamGenericLDAPIDP, ...) GradatedConditions
  • func (g *GradatedConditions) Append(condition *v1alpha1.Condition, isFatal bool)
  • func (g *GradatedConditions) Conditions() []*v1alpha1.Condition
• type SecretVersionCache
  • func (s *SecretVersionCache) Get(upstreamName, resourceVersion string, generation int64) (ValidatedSettings, bool)
  • func (s *SecretVersionCache) Set(upstreamName, resourceVersion string, generation int64, ...)
• type SecretVersionCacheI
  • func NewSecretVersionCache() SecretVersionCacheI
• type UpstreamGenericLDAPGroupSearch
• type UpstreamGenericLDAPIDP
• type UpstreamGenericLDAPSpec
• type UpstreamGenericLDAPStatus
• type UpstreamGenericLDAPUserSearch
• type ValidatedSettings

Constants

const (
	ReasonNotFound         = "SecretNotFound"
	ReasonWrongType        = "SecretWrongType"
	ReasonMissingKeys      = "SecretMissingKeys"
	ReasonSuccess          = "Success"
	ReasonInvalidTLSConfig = "InvalidTLSConfig"

	ErrNoCertificates = constable.Error("no certificates found")

	LDAPBindAccountSecretType = corev1.SecretTypeBasicAuth

	TypeSearchBaseFound = "SearchBaseFound"

	ReasonUsingConfigurationFromSpec = "UsingConfigurationFromSpec"
	ReasonErrorFetchingSearchBase    = "ErrorFetchingSearchBase"
)

Functions

func EvaluateConditions

func EvaluateConditions(conditions GradatedConditions, config *upstreamldap.ProviderConfig) (provider.UpstreamLDAPIdentityProviderI, bool)

func TestConnection

func TestConnection(
	ctx context.Context,
	bindSecretName string,
	config *upstreamldap.ProviderConfig,
	currentSecretVersion string,
) *v1alpha1.Condition

func ValidateSecret

func ValidateSecret(secretInformer corev1informers.SecretInformer, secretName string, secretNamespace string, config *upstreamldap.ProviderConfig) (*v1alpha1.Condition, string)

func ValidateTLSConfig

func ValidateTLSConfig(tlsSpec *v1alpha1.TLSSpec, config *upstreamldap.ProviderConfig) *v1alpha1.Condition

Types

type GradatedCondition

type GradatedCondition struct {
	// contains filtered or unexported fields
}

A condition and a boolean that tells you whether it's fatal or just a warning.

type GradatedConditions

type GradatedConditions struct {
	// contains filtered or unexported fields
}

func ValidateGenericLDAP

func ValidateGenericLDAP(ctx context.Context, upstream UpstreamGenericLDAPIDP, secretInformer corev1informers.SecretInformer, validatedSecretVersionsCache SecretVersionCacheI, config *upstreamldap.ProviderConfig) GradatedConditions

func (*GradatedConditions) Append

func (g *GradatedConditions) Append(condition *v1alpha1.Condition, isFatal bool)

func (*GradatedConditions) Conditions

func (g *GradatedConditions) Conditions() []*v1alpha1.Condition

type SecretVersionCache

type SecretVersionCache struct {
	ValidatedSettingsByName map[string]ValidatedSettings
}

func (*SecretVersionCache) Get

func (s *SecretVersionCache) Get(upstreamName, resourceVersion string, generation int64) (ValidatedSettings, bool)

func (*SecretVersionCache) Set

func (s *SecretVersionCache) Set(upstreamName, resourceVersion string, generation int64, settings ValidatedSettings)

type SecretVersionCacheI

type SecretVersionCacheI interface {
	Get(upstreamName, resourceVersion string, generation int64) (ValidatedSettings, bool)
	Set(upstreamName, resourceVersion string, generation int64, settings ValidatedSettings)
}

An in-memory cache with an entry for each ActiveDirectoryIdentityProvider, to keep track of which ResourceVersion of the bind Secret, which TLS/StartTLS setting was used and which search base was found during the most recent successful validation.

func NewSecretVersionCache

func NewSecretVersionCache() SecretVersionCacheI

type UpstreamGenericLDAPGroupSearch

type UpstreamGenericLDAPGroupSearch interface {
	Base() string
	Filter() string
	GroupNameAttribute() string
}

type UpstreamGenericLDAPIDP

type UpstreamGenericLDAPIDP interface {
	Spec() UpstreamGenericLDAPSpec
	Name() string
	Namespace() string
	Generation() int64
	Status() UpstreamGenericLDAPStatus
}

read only interface for sharing between ldap and active directory.

type UpstreamGenericLDAPSpec

type UpstreamGenericLDAPSpec interface {
	Host() string
	TLSSpec() *v1alpha1.TLSSpec
	BindSecretName() string
	UserSearch() UpstreamGenericLDAPUserSearch
	GroupSearch() UpstreamGenericLDAPGroupSearch
	DetectAndSetSearchBase(ctx context.Context, config *upstreamldap.ProviderConfig) *v1alpha1.Condition
}

type UpstreamGenericLDAPStatus

type UpstreamGenericLDAPStatus interface {
	Conditions() []v1alpha1.Condition
}

type UpstreamGenericLDAPUserSearch

type UpstreamGenericLDAPUserSearch interface {
	Base() string
	Filter() string
	UsernameAttribute() string
	UIDAttribute() string
}

type ValidatedSettings

type ValidatedSettings struct {
	Generation                int64
	BindSecretResourceVersion string
	LDAPConnectionProtocol    upstreamldap.LDAPConnectionProtocol
	UserSearchBase            string
	GroupSearchBase           string
}