common

Documentation

Index

• func ValidNamespacePolicy(policy NamespacePolicy) bool
• type NamespacePolicy

Functions

func ValidNamespacePolicy

func ValidNamespacePolicy(policy NamespacePolicy) bool

ValidNamespacePolicy checks if policy is a valid namespace policy.

Types

type NamespacePolicy

type NamespacePolicy string

NamespacePolicy indicates whether a requester is authorized to request a certificate with principal under another namespace.

const (
	// NoNamespace indicates the ssh principal should start with the requested principal.
	// For example, user1 is authorized to request a cert with touch principal "user1:touch".
	NoNamespace NamespacePolicy = "NONS"
	// NamespaceOK indicates the ssh principal can be included in another principal.
	// For example, user1 is authorized to request a principal for jenkins usage: "jenkins:user1".
	NamespaceOK NamespacePolicy = "NSOK"
)