role

Documentation

Index

• func Setup(mgr ctrl.Manager, o controller.Options) error
• type NoOpService
• type Role
  • func (role *Role) Validate() error

Functions

func Setup

func Setup(mgr ctrl.Manager, o controller.Options) error

Setup adds a controller that reconciles Jwt managed resources.

Types

type NoOpService

type NoOpService struct{}

A NoOpService does nothing.

type Role

type Role struct {
	Name                 string                 `json:"role_name"`
	Namespace            string                 `json:"namespace"`
	RoleType             string                 `json:"role_type"`
	BoundAudiences       []interface{}          `json:"bound_audiences"`
	UserClaim            string                 `json:"user_claim"`
	UserClaimJSONPointer bool                   `json:"user_claim_json_pointer"`
	BoundSubject         string                 `json:"bound_subject"`
	BoundClaims          map[string]interface{} `json:"bound_claims"`
	BoundClaimsType      string                 `json:"bound_claims_type"`
	ClaimMappings        map[string]interface{} `json:"claim_mappings"`
	OIDCScopes           []interface{}          `json:"oidc_scopes"`
	GroupsClaim          string                 `json:"groups_claim"`
	AllowedRedirectURIs  []interface{}          `json:"allowed_redirect_uris"`
	ClockSkewLeeway      json.Number            `json:"clock_skew_leeway"`
	ExpirationLeeway     json.Number            `json:"expiration_leeway"`
	NotBeforeLeeway      json.Number            `json:"not_before_leeway"`
	VerboseOIDCLogging   bool                   `json:"verbose_oidc_logging"`
	MaxAge               json.Number            `json:"max_age"`
	TokenTTL             json.Number            `json:"token_ttl"`
	TokenMaxTTL          json.Number            `json:"token_max_ttl"`
	TokenPolicies        []interface{}          `json:"token_policies"`
	TokenBoundCIDRS      []interface{}          `json:"token_bound_cidrs"`
	TokenExplicitMaxTTL  json.Number            `json:"token_explicit_max_ttl"`
	TokenNoDefaultPolicy bool                   `json:"token_no_default_policy"`
	TokenNumUses         json.Number            `json:"token_num_uses"`
	TokenPeriod          json.Number            `json:"token_period"`
	TokenType            string                 `json:"token_type"`
}

Role is an helper struct to compare the data from the crossplane resource and with data from vault

func (*Role) Validate

func (role *Role) Validate() error

Validate validates if a role follow vault constraints Check https://developer.hashicorp.com/vault/api-docs/auth/jwt#create-role to see vault contraints for JWT/OIDC roles