config

Documentation

Index

• type OperatorCliArgs
• type OperatorConfiguration
  • func LoadFrom(args *OperatorCliArgs) (OperatorConfiguration, error)
• type TokenPolicy

Types

type OperatorCliArgs

type OperatorCliArgs struct {
	config.CommonCliArgs
	config.LoggingCliArgs
	tokenstorage.VaultCliArgs
	EnableLeaderElection        bool          `` /* 166-byte string literal not displayed */
	TokenMetadataCacheTtl       time.Duration `arg:"--metadata-cache-ttl, env" default:"1h" help:"The maximum age of token metadata data cache"`
	TokenLifetimeDuration       time.Duration `` /* 170-byte string literal not displayed */
	BindingLifetimeDuration     time.Duration `` /* 176-byte string literal not displayed */
	AccessCheckLifetimeDuration time.Duration `arg:"--access-check-ttl, env" default:"30m" help:"the time after which SPIAccessCheck CR will be deleted by operator"`
	TokenMatchPolicy            TokenPolicy   `` /* 129-byte string literal not displayed */
	ApiExportName               string        `` /* 144-byte string literal not displayed */
	DeletionGracePeriod         time.Duration `` /* 185-byte string literal not displayed */
}

type OperatorConfiguration

type OperatorConfiguration struct {
	config.SharedConfiguration

	// TokenLookupCacheTtl is the time for which the lookup cache results are considered valid
	TokenLookupCacheTtl time.Duration

	// AccessCheckTtl is time after that SPIAccessCheck CR will be deleted.
	AccessCheckTtl time.Duration

	// AccessTokenTtl is time after that AccessToken will be deleted.
	AccessTokenTtl time.Duration

	// AccessTokenBindingTtl is time after that AccessTokenBinding will be deleted.
	AccessTokenBindingTtl time.Duration

	// The policy to match the token against the binding
	TokenMatchPolicy TokenPolicy

	// The time before a token without data and with no bindings is automatically deleted.
	DeletionGracePeriod time.Duration
}

func LoadFrom

func LoadFrom(args *OperatorCliArgs) (OperatorConfiguration, error)

type TokenPolicy

type TokenPolicy string

TokenPolicy specifies the policy to use when matching the tokens during the token lookup

const (
	AnyTokenPolicy   TokenPolicy = "any"
	ExactTokenPolicy TokenPolicy = "exact"
)