Documentation
¶
Overview ¶
Package v1alpha1 contains API Schema definitions for the v1alpha1 API group +kubebuilder:object:generate=true +groupName=accounts.nats.io
Index ¶
- Constants
- Variables
- func Resource(resource string) schema.GroupResource
- type Account
- type AccountExport
- type AccountImport
- type AccountLimits
- type AccountList
- type AccountServiceLatency
- type AccountSpec
- type AccountStatus
- func (in *AccountStatus) DeepCopy() *AccountStatus
- func (in *AccountStatus) DeepCopyInto(out *AccountStatus)
- func (s *AccountStatus) GetCondition(t apis.ConditionType) *apis.Condition
- func (s *AccountStatus) InitializeConditions()
- func (s *AccountStatus) IsReady() bool
- func (s *AccountStatus) MarkIssuerResolveFailed(reason, messageFormat string, messageA ...interface{})
- func (s *AccountStatus) MarkIssuerResolveUnknown(reason, messageFormat string, messageA ...interface{})
- func (s *AccountStatus) MarkIssuerResolved()
- func (s *AccountStatus) MarkJWTPushFailed(reason, messageFormat string, messageA ...interface{})
- func (s *AccountStatus) MarkJWTPushUnknown(reason, messageFormat string, messageA ...interface{})
- func (s *AccountStatus) MarkJWTPushed()
- func (s *AccountStatus) MarkJWTSecretFailed(reason, messageFormat string, messageA ...interface{})
- func (s *AccountStatus) MarkJWTSecretReady()
- func (s *AccountStatus) MarkJWTSecretUnknown(reason, messageFormat string, messageA ...interface{})
- func (s *AccountStatus) MarkOperatorResolveFailed(reason, messageFormat string, messageA ...interface{})
- func (s *AccountStatus) MarkOperatorResolveUnknown(reason, messageFormat string, messageA ...interface{})
- func (s *AccountStatus) MarkOperatorResolved(ref InferredObjectReference)
- func (s *AccountStatus) MarkSeedSecretFailed(reason, messageFormat string, messageA ...interface{})
- func (s *AccountStatus) MarkSeedSecretReady(kp KeyPair)
- func (s *AccountStatus) MarkSeedSecretUnknown(reason, messageFormat string, messageA ...interface{})
- func (s *AccountStatus) MarkSigningKeysUpdateFailed(reason, messageFormat string, messageA ...interface{})
- func (s *AccountStatus) MarkSigningKeysUpdateUnknown(reason, messageFormat string, messageA ...interface{})
- func (s *AccountStatus) MarkSigningKeysUpdated(signingKeys []SigningKeyEmbeddedStatus)
- type ConditionSetAccessor
- type Identity
- type ImportExportType
- type InferredObjectReference
- type IssuerReference
- type JetStreamLimits
- type KeyPair
- type KeyPairReference
- type KeyPairable
- type NatsLimits
- type NatsSecretType
- type Operator
- type OperatorLimits
- type OperatorList
- type OperatorRef
- type OperatorSpec
- type OperatorStatus
- func (in *OperatorStatus) DeepCopy() *OperatorStatus
- func (in *OperatorStatus) DeepCopyInto(out *OperatorStatus)
- func (os *OperatorStatus) GetCondition(t apis.ConditionType) *apis.Condition
- func (os *OperatorStatus) GetConditions() apis.Conditions
- func (os *OperatorStatus) InitializeConditions()
- func (os *OperatorStatus) IsReady() bool
- func (os *OperatorStatus) MarkJWTSecretFailed(reason, messageFormat string, messageA ...interface{})
- func (os *OperatorStatus) MarkJWTSecretReady()
- func (os *OperatorStatus) MarkJWTSecretUnknown(reason, messageFormat string, messageA ...interface{})
- func (os *OperatorStatus) MarkSeedSecretFailed(reason, messageFormat string, messageA ...interface{})
- func (os *OperatorStatus) MarkSeedSecretReady(kp KeyPair)
- func (os *OperatorStatus) MarkSeedSecretUnknown(reason, messageFormat string, messageA ...interface{})
- func (os *OperatorStatus) MarkSigningKeysUpdateFailed(reason, messageFormat string, messageA ...interface{})
- func (os *OperatorStatus) MarkSigningKeysUpdateUnknown(reason, messageFormat string, messageA ...interface{})
- func (os *OperatorStatus) MarkSigningKeysUpdated(signingKeys []SigningKeyEmbeddedStatus)
- func (os *OperatorStatus) MarkSystemAccountResolveFailed(reason, messageFormat string, messageA ...interface{})
- func (os *OperatorStatus) MarkSystemAccountResolveUnknown(reason, messageFormat string, messageA ...interface{})
- func (os *OperatorStatus) MarkSystemAccountResolved(ref KeyPairReference)
- func (os *OperatorStatus) SetConditions(conditions apis.Conditions)
- type Permission
- type RespPermission
- type ResponseType
- type SigningKey
- type SigningKeyEmbeddedStatus
- type SigningKeyList
- type SigningKeyOwnerReference
- type SigningKeySpec
- type SigningKeyStatus
- func (in *SigningKeyStatus) DeepCopy() *SigningKeyStatus
- func (in *SigningKeyStatus) DeepCopyInto(out *SigningKeyStatus)
- func (s *SigningKeyStatus) GetCondition(t apis.ConditionType) *apis.Condition
- func (s *SigningKeyStatus) InitializeConditions()
- func (s *SigningKeyStatus) IsReady() bool
- func (s *SigningKeyStatus) MarkOwnerResolveFailed(reason, messageFormat string, messageA ...interface{})
- func (s *SigningKeyStatus) MarkOwnerResolveUnknown(reason, messageFormat string, messageA ...interface{})
- func (s *SigningKeyStatus) MarkOwnerResolved(ref TypedObjectReference)
- func (s *SigningKeyStatus) MarkSeedSecretFailed(reason, messageFormat string, messageA ...interface{})
- func (s *SigningKeyStatus) MarkSeedSecretReady(publicKey, seedSecretName string)
- func (s *SigningKeyStatus) MarkSeedSecretUnknown(reason, messageFormat string, messageA ...interface{})
- type SigningKeyType
- type StartEndTime
- type Status
- type StatusAccessor
- type TLSConfig
- type TypedObjectReference
- type User
- type UserLimits
- type UserList
- type UserPermissions
- type UserSpec
- type UserStatus
- func (in *UserStatus) DeepCopy() *UserStatus
- func (in *UserStatus) DeepCopyInto(out *UserStatus)
- func (s *UserStatus) GetCondition(t apis.ConditionType) *apis.Condition
- func (s *UserStatus) GetConditions() apis.Conditions
- func (s *UserStatus) InitializeConditions()
- func (s *UserStatus) IsReady() bool
- func (s *UserStatus) MarkAccountResolveFailed(reason, messageFormat string, messageA ...interface{})
- func (s *UserStatus) MarkAccountResolveUnknown(reason, messageFormat string, messageA ...interface{})
- func (s *UserStatus) MarkAccountResolved(ref InferredObjectReference)
- func (s *UserStatus) MarkCredentialsSecretFailed(reason, messageFormat string, messageA ...interface{})
- func (s *UserStatus) MarkCredentialsSecretReady()
- func (s *UserStatus) MarkCredentialsSecretUnknown(reason, messageFormat string, messageA ...interface{})
- func (s *UserStatus) MarkIssuerResolveFailed(reason, messageFormat string, messageA ...interface{})
- func (s *UserStatus) MarkIssuerResolveUnknown(reason, messageFormat string, messageA ...interface{})
- func (s *UserStatus) MarkIssuerResolved()
- func (s *UserStatus) MarkJWTSecretFailed(reason, messageFormat string, messageA ...interface{})
- func (s *UserStatus) MarkJWTSecretReady()
- func (s *UserStatus) MarkJWTSecretUnknown(reason, messageFormat string, messageA ...interface{})
- func (s *UserStatus) MarkSeedSecretFailed(reason, messageFormat string, messageA ...interface{})
- func (s *UserStatus) MarkSeedSecretReady(kp KeyPair)
- func (s *UserStatus) MarkSeedSecretUnknown(reason, messageFormat string, messageA ...interface{})
- func (s *UserStatus) SetConditions(conditions apis.Conditions)
Constants ¶
const ( AccountConditionReady = apis.ConditionReady AccountConditionOperatorResolved = "OperatorResolved" AccountConditionIssuerResolved = "IssuerResolved" AccountConditionSigningKeysUpdated = "SigningKeysUpdated" AccountConditionJWTSecretReady = "JWTSecretReady" AccountConditionJWTPushed = "JWTPushed" )
const ( NatsSecretJWTKey = "nats.jwt" NatsSecretCredsKey = "nats.creds" NatsCAKey = "ca.crt" NatsSecretSeedKey = "seed.nk" NatsSecretPublicKeyKey = "public.nk" )
const ( ReasonUnsupportedIssuer = "UnsupportedIssuer" ReasonInvalidSigningKeyOwner = "InvalidSigningKeyOwner" ReasonNotReady = "NotReady" ReasonNotFound = "NotFound" ReasonNotAllowed = "NotAllowed" ReasonUnknownError = "UnknownError" ReasonMalformedSeedSecret = "MalformedSeedSecret" ReasonIssuerSeedError = "IssuerSeedError" ReasonPublicKeyMismatch = "PublicKeyMismatch" ReasonInvalidSeedSecret = "InvalidSeedSecret" ReasonInvalidJWTSecret = "InvalidJWTSecret" ReasonInvalidCredentialsSecret = "InvalidCredentialsSecret" ReasonJWTPushError = "JWTPushError" )
const ( OperatorConditionReady = apis.ConditionReady OperatorConditionSystemAccountResolved = "SystemAccountResolved" OperatorConditionSigningKeysUpdated = "SigningKeysUpdated" OperatorConditionJWTSecretReady = "JWTSecretReady" OperatorConditionSeedSecretReady = "SeedSecretReady" )
const ( SigningKeyConditionReady = apis.ConditionReady SigningKeyConditionSeedSecretReady = "SeedSecretReady" SigningKeyConditionOwnerResolved = "OwnerResolved" )
const ( SigningKeyTypeOperator = "Operator" SigningKeyTypeAccount = "Account" )
const ( UserConditionReady = apis.ConditionReady UserConditionAccountResolved = "AccountResolved" UserConditionIssuerResolved = "IssuerResolved" UserConditionJWTSecretReady = "JWTSecretReady" UserConditionCredentialsSecretReady = "CredentialsSecretReady" )
const ( // KeyPairableConditionSeedSecretReady is a condition type which should apply to all KeyPairable resources, and denotes // whether the SeedSecret is ready and the .status.keyPair field is populated. KeyPairableConditionSeedSecretReady = "SeedSecretReady" )
Variables ¶
var ( // GroupVersion is group version used to register these objects GroupVersion = schema.GroupVersion{Group: "accounts.nats.io", Version: "v1alpha1"} // SchemeBuilder is used to add go types to the GroupVersionKind scheme SchemeBuilder = &scheme.Builder{GroupVersion: GroupVersion} // AddToScheme adds the types in this group-version to the given scheme. AddToScheme = SchemeBuilder.AddToScheme )
var SchemeGroupVersion = GroupVersion
Functions ¶
func Resource ¶
func Resource(resource string) schema.GroupResource
Types ¶
type Account ¶
type Account struct { metav1.TypeMeta `json:",inline"` metav1.ObjectMeta `json:"metadata,omitempty"` Spec AccountSpec `json:"spec,omitempty"` Status AccountStatus `json:"status,omitempty"` }
Account is the Schema for the accounts API
func (*Account) DeepCopy ¶
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Account.
func (*Account) DeepCopyInto ¶
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*Account) DeepCopyObject ¶
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*Account) GetConditionSet ¶
func (*Account) GetConditionSet() apis.ConditionSet
func (*Account) GetKeyPair ¶
type AccountExport ¶
type AccountExport struct { Name string `json:"name"` Subject string `json:"subject"` // Type is the type of export. This must be one of "stream" or "service". Type ImportExportType `json:"type"` TokenReq bool `json:"tokenReq"` // ResponseType is the type of response that will be sent to the requestor. This must be one of // "singleton", "stream" or "chunked" if Type is "service". If Type is "stream", this must be left as an empty string. ResponseType ResponseType `json:"responseType"` ServiceLatency *AccountServiceLatency `json:"serviceLatency,omitempty"` AccountTokenPosition uint `json:"accountTokenPosition"` }
func (*AccountExport) DeepCopy ¶
func (in *AccountExport) DeepCopy() *AccountExport
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccountExport.
func (*AccountExport) DeepCopyInto ¶
func (in *AccountExport) DeepCopyInto(out *AccountExport)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type AccountImport ¶
type AccountImport struct { Name string `json:"name"` Subject string `json:"subject"` Account string `json:"account"` Token string `json:"token"` To string `json:"to"` Type ImportExportType `json:"type"` }
func (*AccountImport) DeepCopy ¶
func (in *AccountImport) DeepCopy() *AccountImport
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccountImport.
func (*AccountImport) DeepCopyInto ¶
func (in *AccountImport) DeepCopyInto(out *AccountImport)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type AccountLimits ¶
type AccountLimits struct { Imports *int64 `json:"imports,omitempty"` // Max number of imports Exports *int64 `json:"exports,omitempty"` // Max number of exports WildcardExports *bool `json:"wildcards,omitempty"` // Are wildcards allowed in exports DisallowBearer bool `json:"disallowBearer,omitempty"` // User JWT can't be bearer token Conn *int64 `json:"conn,omitempty"` // Max number of active connections LeafNodeConn *int64 `json:"leaf,omitempty"` // Max number of active leaf node connections }
func (*AccountLimits) DeepCopy ¶
func (in *AccountLimits) DeepCopy() *AccountLimits
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccountLimits.
func (*AccountLimits) DeepCopyInto ¶
func (in *AccountLimits) DeepCopyInto(out *AccountLimits)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type AccountList ¶
type AccountList struct { metav1.TypeMeta `json:",inline"` metav1.ListMeta `json:"metadata,omitempty"` Items []Account `json:"items"` }
AccountList contains a list of Account
func (*AccountList) DeepCopy ¶
func (in *AccountList) DeepCopy() *AccountList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccountList.
func (*AccountList) DeepCopyInto ¶
func (in *AccountList) DeepCopyInto(out *AccountList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*AccountList) DeepCopyObject ¶
func (in *AccountList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
type AccountServiceLatency ¶
type AccountServiceLatency struct { Sampling int `json:"sampling"` Results string `json:"results"` }
func (*AccountServiceLatency) DeepCopy ¶
func (in *AccountServiceLatency) DeepCopy() *AccountServiceLatency
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccountServiceLatency.
func (*AccountServiceLatency) DeepCopyInto ¶
func (in *AccountServiceLatency) DeepCopyInto(out *AccountServiceLatency)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type AccountSpec ¶
type AccountSpec struct { // SigningKey is the reference to the SigningKey that will be used to sign JWTs for this Account. The controller // will check the owner of the SigningKey is an Operator, and that this Account can be managed by that Operator // following its namespace and label selector restrictions. Issuer IssuerReference `json:"issuer"` // UsersNamespaceSelector defines which namespaces are allowed to contain Users managed by this Account. The default // restricts to the same namespace as the Account, it can be set to an empty selector `{}` to allow all namespaces. UsersNamespaceSelector *metav1.LabelSelector `json:"usersNamespaceSelector,omitempty"` // UsersSelector defines which Users are allowed to be managed by this Account. The default implies no label // selector and all User resources will be allowed (subject to the UsersNamespaceSelector above). UsersSelector *metav1.LabelSelector `json:"usersSelector,omitempty"` // JWTSecretName is the name of the Secret that will be created to hold the JWT signing key for this Account. JWTSecretName string `json:"jwtSecretName"` // SeedSecretName is the name of the Secret that will be created to hold the seed for this Account. SeedSecretName string `json:"seedSecretName"` // SigningKeysSelector is the label selector to restrict which SigningKeys can be used to sign JWTs for this // Account. SigningKeys must be in the same namespace as the Account. SigningKeysSelector *metav1.LabelSelector `json:"signingKeysSelector,omitempty"` // Imports is a JWT claim for the Account. Imports []AccountImport `json:"imports,omitempty"` // Exports is a JWT claim for the Account. Exports []AccountExport `json:"exports,omitempty"` // Limits is a JWT claim for the Account. Limits *OperatorLimits `json:"limits,omitempty"` }
AccountSpec defines the desired state of Account
func (*AccountSpec) DeepCopy ¶
func (in *AccountSpec) DeepCopy() *AccountSpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccountSpec.
func (*AccountSpec) DeepCopyInto ¶
func (in *AccountSpec) DeepCopyInto(out *AccountSpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type AccountStatus ¶
type AccountStatus struct { Status `json:",inline"` KeyPair *KeyPair `json:"keyPair,omitempty"` SigningKeys []SigningKeyEmbeddedStatus `json:"signingKeys,omitempty"` OperatorRef *InferredObjectReference `json:"operatorRef,omitempty"` }
AccountStatus defines the observed state of Account
func (*AccountStatus) DeepCopy ¶
func (in *AccountStatus) DeepCopy() *AccountStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AccountStatus.
func (*AccountStatus) DeepCopyInto ¶
func (in *AccountStatus) DeepCopyInto(out *AccountStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*AccountStatus) GetCondition ¶
func (s *AccountStatus) GetCondition(t apis.ConditionType) *apis.Condition
GetCondition returns the condition currently associated with the given type, or nil.
func (*AccountStatus) InitializeConditions ¶
func (s *AccountStatus) InitializeConditions()
InitializeConditions sets relevant unset conditions to Unknown state.
func (*AccountStatus) IsReady ¶
func (s *AccountStatus) IsReady() bool
IsReady returns true if the resource is ready overall.
func (*AccountStatus) MarkIssuerResolveFailed ¶
func (s *AccountStatus) MarkIssuerResolveFailed(reason, messageFormat string, messageA ...interface{})
func (*AccountStatus) MarkIssuerResolveUnknown ¶
func (s *AccountStatus) MarkIssuerResolveUnknown(reason, messageFormat string, messageA ...interface{})
func (*AccountStatus) MarkIssuerResolved ¶
func (s *AccountStatus) MarkIssuerResolved()
func (*AccountStatus) MarkJWTPushFailed ¶
func (s *AccountStatus) MarkJWTPushFailed(reason, messageFormat string, messageA ...interface{})
func (*AccountStatus) MarkJWTPushUnknown ¶
func (s *AccountStatus) MarkJWTPushUnknown(reason, messageFormat string, messageA ...interface{})
func (*AccountStatus) MarkJWTPushed ¶
func (s *AccountStatus) MarkJWTPushed()
func (*AccountStatus) MarkJWTSecretFailed ¶
func (s *AccountStatus) MarkJWTSecretFailed(reason, messageFormat string, messageA ...interface{})
func (*AccountStatus) MarkJWTSecretReady ¶
func (s *AccountStatus) MarkJWTSecretReady()
func (*AccountStatus) MarkJWTSecretUnknown ¶
func (s *AccountStatus) MarkJWTSecretUnknown(reason, messageFormat string, messageA ...interface{})
func (*AccountStatus) MarkOperatorResolveFailed ¶
func (s *AccountStatus) MarkOperatorResolveFailed(reason, messageFormat string, messageA ...interface{})
func (*AccountStatus) MarkOperatorResolveUnknown ¶
func (s *AccountStatus) MarkOperatorResolveUnknown(reason, messageFormat string, messageA ...interface{})
func (*AccountStatus) MarkOperatorResolved ¶
func (s *AccountStatus) MarkOperatorResolved(ref InferredObjectReference)
func (*AccountStatus) MarkSeedSecretFailed ¶
func (s *AccountStatus) MarkSeedSecretFailed(reason, messageFormat string, messageA ...interface{})
func (*AccountStatus) MarkSeedSecretReady ¶
func (s *AccountStatus) MarkSeedSecretReady(kp KeyPair)
func (*AccountStatus) MarkSeedSecretUnknown ¶
func (s *AccountStatus) MarkSeedSecretUnknown(reason, messageFormat string, messageA ...interface{})
func (*AccountStatus) MarkSigningKeysUpdateFailed ¶
func (s *AccountStatus) MarkSigningKeysUpdateFailed(reason, messageFormat string, messageA ...interface{})
func (*AccountStatus) MarkSigningKeysUpdateUnknown ¶
func (s *AccountStatus) MarkSigningKeysUpdateUnknown(reason, messageFormat string, messageA ...interface{})
func (*AccountStatus) MarkSigningKeysUpdated ¶
func (s *AccountStatus) MarkSigningKeysUpdated(signingKeys []SigningKeyEmbeddedStatus)
type ConditionSetAccessor ¶
type ConditionSetAccessor interface {
GetConditionSet() apis.ConditionSet
}
ConditionSetAccessor provides a way to access a resource's ConditionSet.
type Identity ¶
func (*Identity) DeepCopy ¶
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Identity.
func (*Identity) DeepCopyInto ¶
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ImportExportType ¶
type ImportExportType string
const ( ImportExportTypeStream ImportExportType = "stream" ImportExportTypeService ImportExportType = "service" )
type InferredObjectReference ¶
type InferredObjectReference struct { Namespace string `json:"namespace,omitempty"` Name string `json:"name"` }
InferredObjectReference is an object reference without the APIVersion and Kind fields. The APIVersion and Kind are inferred based on where the reference is used.
func (*InferredObjectReference) DeepCopy ¶
func (in *InferredObjectReference) DeepCopy() *InferredObjectReference
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new InferredObjectReference.
func (*InferredObjectReference) DeepCopyInto ¶
func (in *InferredObjectReference) DeepCopyInto(out *InferredObjectReference)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type IssuerReference ¶
type IssuerReference struct {
Ref TypedObjectReference `json:"ref"`
}
IssuerReference provides the means to look up a signing key for generating an Account or User.
func (*IssuerReference) DeepCopy ¶
func (in *IssuerReference) DeepCopy() *IssuerReference
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IssuerReference.
func (*IssuerReference) DeepCopyInto ¶
func (in *IssuerReference) DeepCopyInto(out *IssuerReference)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type JetStreamLimits ¶
type JetStreamLimits struct { MemoryStorage int64 `json:"memoryStorage,omitempty"` // Max number of bytes stored in memory across all streams. (0 means disabled) DiskStorage int64 `json:"diskStorage,omitempty"` // Max number of bytes stored on disk across all streams. (0 means disabled) Streams int64 `json:"streams,omitempty"` // Max number of streams Consumer int64 `json:"consumer,omitempty"` // Max number of consumers MaxAckPending int64 `json:"maxAckPending,omitempty"` // Max ack pending of a Stream MemoryMaxStreamBytes int64 `json:"memoryMaxStreamBytes,omitempty"` // Max bytes a memory backed stream can have. (0 means disabled/unlimited) DiskMaxStreamBytes int64 `json:"diskMaxStreamBytes,omitempty"` // Max bytes a disk backed stream can have. (0 means disabled/unlimited) MaxBytesRequired bool `json:"maxBytesRequired,omitempty"` // Max bytes required by all Streams }
func (*JetStreamLimits) DeepCopy ¶
func (in *JetStreamLimits) DeepCopy() *JetStreamLimits
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new JetStreamLimits.
func (*JetStreamLimits) DeepCopyInto ¶
func (in *JetStreamLimits) DeepCopyInto(out *JetStreamLimits)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type KeyPair ¶
type KeyPair struct { PublicKey string `json:"publicKey"` SeedSecretName string `json:"seedSecretName"` }
KeyPair is the reference to the KeyPair that will be used to sign JWTs for Accounts and Users.
func (*KeyPair) DeepCopy ¶
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KeyPair.
func (*KeyPair) DeepCopyInto ¶
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type KeyPairReference ¶ added in v0.3.0
type KeyPairReference struct { InferredObjectReference `json:",inline"` PublicKey string `json:"publicKey"` }
func (*KeyPairReference) DeepCopy ¶ added in v0.3.0
func (in *KeyPairReference) DeepCopy() *KeyPairReference
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KeyPairReference.
func (*KeyPairReference) DeepCopyInto ¶ added in v0.3.0
func (in *KeyPairReference) DeepCopyInto(out *KeyPairReference)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type KeyPairable ¶
type KeyPairable interface { metav1.Object schema.ObjectKind StatusAccessor ConditionSetAccessor GetKeyPair() *KeyPair }
KeyPairable is an interface which should be implemented by all resources which have a KeyPair to sign JWTs.
type NatsLimits ¶
type NatsLimits struct { Subs *int64 `json:"subs,omitempty"` // Max number of subscriptions Data *int64 `json:"data,omitempty"` // Max number of bytes Payload *int64 `json:"payload,omitempty"` // Max message payload }
func (*NatsLimits) DeepCopy ¶
func (in *NatsLimits) DeepCopy() *NatsLimits
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NatsLimits.
func (*NatsLimits) DeepCopyInto ¶
func (in *NatsLimits) DeepCopyInto(out *NatsLimits)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type NatsSecretType ¶
type NatsSecretType string
const ( NatsSecretTypeSeed NatsSecretType = "seed" NatsSecretTypeJWT NatsSecretType = "jwt" NatsSecretTypeSKey NatsSecretType = "skey" )
type Operator ¶
type Operator struct { metav1.TypeMeta `json:",inline"` metav1.ObjectMeta `json:"metadata,omitempty"` Spec OperatorSpec `json:"spec,omitempty"` Status OperatorStatus `json:"status,omitempty"` }
Operator is the Schema for the operators API
func (*Operator) DeepCopy ¶
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Operator.
func (*Operator) DeepCopyInto ¶
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*Operator) DeepCopyObject ¶
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*Operator) GetConditionSet ¶
func (*Operator) GetConditionSet() apis.ConditionSet
func (*Operator) GetKeyPair ¶
type OperatorLimits ¶
type OperatorLimits struct { Nats NatsLimits `json:"nats,omitempty"` Account AccountLimits `json:"account,omitempty"` JetStream JetStreamLimits `json:"jetStream,omitempty"` }
OperatorLimits are used to limit access by an account
func (*OperatorLimits) DeepCopy ¶
func (in *OperatorLimits) DeepCopy() *OperatorLimits
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OperatorLimits.
func (*OperatorLimits) DeepCopyInto ¶
func (in *OperatorLimits) DeepCopyInto(out *OperatorLimits)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type OperatorList ¶
type OperatorList struct { metav1.TypeMeta `json:",inline"` metav1.ListMeta `json:"metadata,omitempty"` Items []Operator `json:"items"` }
OperatorList contains a list of Operator
func (*OperatorList) DeepCopy ¶
func (in *OperatorList) DeepCopy() *OperatorList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OperatorList.
func (*OperatorList) DeepCopyInto ¶
func (in *OperatorList) DeepCopyInto(out *OperatorList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*OperatorList) DeepCopyObject ¶
func (in *OperatorList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
type OperatorRef ¶
func (*OperatorRef) DeepCopy ¶
func (in *OperatorRef) DeepCopy() *OperatorRef
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OperatorRef.
func (*OperatorRef) DeepCopyInto ¶
func (in *OperatorRef) DeepCopyInto(out *OperatorRef)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type OperatorSpec ¶
type OperatorSpec struct { // JWTSecretName is the name of the secret containing the self-signed Operator JWT. JWTSecretName string `json:"jwtSecretName"` // SeedSecretName is the name of the secret containing the seed for this Operator. SeedSecretName string `json:"seedSecretName"` // AccountsNamespaceSelector defines which namespaces are allowed to contain Accounts managed by this Operator. By // default, the Operator will manage Accounts in the same namespace as the Operator, it can be set to an empty // selector `{}` to allow all namespaces. AccountsNamespaceSelector *metav1.LabelSelector `json:"accountsNamespaceSelector,omitempty"` // AccountsSelector allows the Operator to restrict the Accounts it manages to those matching the selector. The // default (`null`) and `{}` selectors are equivalent and match all Accounts. This is used in combination to the // AccountsNamespaceSelector. AccountsSelector *metav1.LabelSelector `json:"accountsSelector,omitempty"` // SigningKeysSelector allows the Operator to restrict the SigningKeys it manages to those matching the selector. // Only SigningKeys in the same namespace as the Operator are considered. The default (`null`) and `{}` selectors // are equivalent and match all SigningKeys. SigningKeysSelector *metav1.LabelSelector `json:"signingKeysSelector,omitempty"` // SystemAccountRef is a reference to the Account that this Operator will use as it's system account. It must exist // in the same namespace as the Operator, the AccountsNamespaceSelector and AccountsSelector are ignored. SystemAccountRef v1.LocalObjectReference `json:"systemAccountRef"` // TLSConfig is the TLS configuration for communicating to the NATS server for pushing/deleting account JWTs. TLSConfig *TLSConfig `json:"tlsConfig,omitempty"` // AccountServerURL is a JWT claim for the Operator AccountServerURL string `json:"accountServerURL,omitempty"` // OperatorServiceURLs is a JWT claim for the Operator OperatorServiceURLs []string `json:"operatorServiceURLs,omitempty"` }
OperatorSpec defines the desired state of Operator
func (*OperatorSpec) DeepCopy ¶
func (in *OperatorSpec) DeepCopy() *OperatorSpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OperatorSpec.
func (*OperatorSpec) DeepCopyInto ¶
func (in *OperatorSpec) DeepCopyInto(out *OperatorSpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type OperatorStatus ¶
type OperatorStatus struct { Status `json:",inline"` // KeyPair is the public/private key pair for the Operator. This is created by the controller when an Operator is // created. KeyPair *KeyPair `json:"keyPair,omitempty"` // SigningKeys is the list of additional SigningKey resources which are owned by this Operator. Accounts may be // created using the default KeyPair or any of these SigningKeys. SigningKeys []SigningKeyEmbeddedStatus `json:"signingKeys,omitempty"` // ResolvedSystemAccount is the Account that this Operator will use as it's system account. This is the same as the // resource defined in OperatorSpec.SystemAccountRef, but validated that the resource exists. ResolvedSystemAccount *KeyPairReference `json:"resolvedSystemAccount,omitempty"` }
OperatorStatus defines the observed state of Operator
func (*OperatorStatus) DeepCopy ¶
func (in *OperatorStatus) DeepCopy() *OperatorStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OperatorStatus.
func (*OperatorStatus) DeepCopyInto ¶
func (in *OperatorStatus) DeepCopyInto(out *OperatorStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*OperatorStatus) GetCondition ¶
func (os *OperatorStatus) GetCondition(t apis.ConditionType) *apis.Condition
GetCondition returns the condition currently associated with the given type, or nil.
func (*OperatorStatus) GetConditions ¶
func (os *OperatorStatus) GetConditions() apis.Conditions
func (*OperatorStatus) InitializeConditions ¶
func (os *OperatorStatus) InitializeConditions()
InitializeConditions sets relevant unset conditions to Unknown state.
func (*OperatorStatus) IsReady ¶
func (os *OperatorStatus) IsReady() bool
IsReady returns true if the resource is ready overall.
func (*OperatorStatus) MarkJWTSecretFailed ¶
func (os *OperatorStatus) MarkJWTSecretFailed(reason, messageFormat string, messageA ...interface{})
func (*OperatorStatus) MarkJWTSecretReady ¶
func (os *OperatorStatus) MarkJWTSecretReady()
func (*OperatorStatus) MarkJWTSecretUnknown ¶
func (os *OperatorStatus) MarkJWTSecretUnknown(reason, messageFormat string, messageA ...interface{})
func (*OperatorStatus) MarkSeedSecretFailed ¶
func (os *OperatorStatus) MarkSeedSecretFailed(reason, messageFormat string, messageA ...interface{})
func (*OperatorStatus) MarkSeedSecretReady ¶
func (os *OperatorStatus) MarkSeedSecretReady(kp KeyPair)
func (*OperatorStatus) MarkSeedSecretUnknown ¶
func (os *OperatorStatus) MarkSeedSecretUnknown(reason, messageFormat string, messageA ...interface{})
func (*OperatorStatus) MarkSigningKeysUpdateFailed ¶
func (os *OperatorStatus) MarkSigningKeysUpdateFailed(reason, messageFormat string, messageA ...interface{})
func (*OperatorStatus) MarkSigningKeysUpdateUnknown ¶
func (os *OperatorStatus) MarkSigningKeysUpdateUnknown(reason, messageFormat string, messageA ...interface{})
func (*OperatorStatus) MarkSigningKeysUpdated ¶
func (os *OperatorStatus) MarkSigningKeysUpdated(signingKeys []SigningKeyEmbeddedStatus)
func (*OperatorStatus) MarkSystemAccountResolveFailed ¶
func (os *OperatorStatus) MarkSystemAccountResolveFailed(reason, messageFormat string, messageA ...interface{})
func (*OperatorStatus) MarkSystemAccountResolveUnknown ¶
func (os *OperatorStatus) MarkSystemAccountResolveUnknown(reason, messageFormat string, messageA ...interface{})
func (*OperatorStatus) MarkSystemAccountResolved ¶
func (os *OperatorStatus) MarkSystemAccountResolved(ref KeyPairReference)
func (*OperatorStatus) SetConditions ¶
func (os *OperatorStatus) SetConditions(conditions apis.Conditions)
type Permission ¶
type Permission struct { Allow []string `json:"allow,omitempty"` Deny []string `json:"deny,omitempty"` }
func (*Permission) DeepCopy ¶
func (in *Permission) DeepCopy() *Permission
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Permission.
func (*Permission) DeepCopyInto ¶
func (in *Permission) DeepCopyInto(out *Permission)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type RespPermission ¶
func (*RespPermission) DeepCopy ¶
func (in *RespPermission) DeepCopy() *RespPermission
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RespPermission.
func (*RespPermission) DeepCopyInto ¶
func (in *RespPermission) DeepCopyInto(out *RespPermission)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ResponseType ¶
type ResponseType string
const ( ResponseTypeSingleton ResponseType = "singleton" ResponseTypeStream ResponseType = "stream" ResponseTypeChunked ResponseType = "chunked" )
type SigningKey ¶
type SigningKey struct { metav1.TypeMeta `json:",inline"` metav1.ObjectMeta `json:"metadata,omitempty"` Spec SigningKeySpec `json:"spec,omitempty"` Status SigningKeyStatus `json:"status,omitempty"` }
SigningKey is the Schema for the signingkeys API
func (*SigningKey) DeepCopy ¶
func (in *SigningKey) DeepCopy() *SigningKey
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SigningKey.
func (*SigningKey) DeepCopyInto ¶
func (in *SigningKey) DeepCopyInto(out *SigningKey)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*SigningKey) DeepCopyObject ¶
func (in *SigningKey) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*SigningKey) GetConditionSet ¶
func (*SigningKey) GetConditionSet() apis.ConditionSet
func (*SigningKey) GetKeyPair ¶
func (s *SigningKey) GetKeyPair() *KeyPair
func (*SigningKey) GetStatus ¶
func (s *SigningKey) GetStatus() *Status
type SigningKeyEmbeddedStatus ¶
type SigningKeyEmbeddedStatus struct { Name string `json:"name"` KeyPair KeyPair `json:"keyPair,omitempty"` }
func (*SigningKeyEmbeddedStatus) DeepCopy ¶
func (in *SigningKeyEmbeddedStatus) DeepCopy() *SigningKeyEmbeddedStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SigningKeyEmbeddedStatus.
func (*SigningKeyEmbeddedStatus) DeepCopyInto ¶
func (in *SigningKeyEmbeddedStatus) DeepCopyInto(out *SigningKeyEmbeddedStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type SigningKeyList ¶
type SigningKeyList struct { metav1.TypeMeta `json:",inline"` metav1.ListMeta `json:"metadata,omitempty"` Items []SigningKey `json:"items"` }
SigningKeyList contains a list of SigningKey
func (*SigningKeyList) DeepCopy ¶
func (in *SigningKeyList) DeepCopy() *SigningKeyList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SigningKeyList.
func (*SigningKeyList) DeepCopyInto ¶
func (in *SigningKeyList) DeepCopyInto(out *SigningKeyList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*SigningKeyList) DeepCopyObject ¶
func (in *SigningKeyList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
type SigningKeyOwnerReference ¶
type SigningKeyOwnerReference struct { APIVersion string `json:"apiVersion"` Kind string `json:"kind"` Name string `json:"name"` }
SigningKeyOwnerReference provides the means to reference the owning object for a signing key. This should be one of Operator or Account.
func (*SigningKeyOwnerReference) DeepCopy ¶
func (in *SigningKeyOwnerReference) DeepCopy() *SigningKeyOwnerReference
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SigningKeyOwnerReference.
func (*SigningKeyOwnerReference) DeepCopyInto ¶
func (in *SigningKeyOwnerReference) DeepCopyInto(out *SigningKeyOwnerReference)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type SigningKeySpec ¶
type SigningKeySpec struct { // SeedSecretName is the name of the secret containing the seed for this signing key. // +required SeedSecretName string `json:"seedSecretName"` // OwnerRef references the owning object for this signing key. This should be one of Operator or Account. The // controller will validate that this SigningKey is allowed to be owned by the referenced resource by evaluating its // label selectors. OwnerRef SigningKeyOwnerReference `json:"ownerRef"` }
SigningKeySpec defines the desired state of SigningKey
func (*SigningKeySpec) DeepCopy ¶
func (in *SigningKeySpec) DeepCopy() *SigningKeySpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SigningKeySpec.
func (*SigningKeySpec) DeepCopyInto ¶
func (in *SigningKeySpec) DeepCopyInto(out *SigningKeySpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type SigningKeyStatus ¶
type SigningKeyStatus struct { Status `json:",inline"` // KeyPair contains the public and private key information for this signing key. KeyPair *KeyPair `json:"keyPair,omitempty"` // OwnerRef references the owning object for this signing key. This should be one of Operator or Account. OwnerRef *TypedObjectReference `json:"ownerRef,omitempty"` }
SigningKeyStatus defines the observed state of SigningKey
func (*SigningKeyStatus) DeepCopy ¶
func (in *SigningKeyStatus) DeepCopy() *SigningKeyStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SigningKeyStatus.
func (*SigningKeyStatus) DeepCopyInto ¶
func (in *SigningKeyStatus) DeepCopyInto(out *SigningKeyStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*SigningKeyStatus) GetCondition ¶
func (s *SigningKeyStatus) GetCondition(t apis.ConditionType) *apis.Condition
GetCondition returns the condition currently associated with the given type, or nil.
func (*SigningKeyStatus) InitializeConditions ¶
func (s *SigningKeyStatus) InitializeConditions()
InitializeConditions sets relevant unset conditions to Unknown state.
func (*SigningKeyStatus) IsReady ¶
func (s *SigningKeyStatus) IsReady() bool
IsReady returns true if the resource is ready overall.
func (*SigningKeyStatus) MarkOwnerResolveFailed ¶
func (s *SigningKeyStatus) MarkOwnerResolveFailed(reason, messageFormat string, messageA ...interface{})
func (*SigningKeyStatus) MarkOwnerResolveUnknown ¶
func (s *SigningKeyStatus) MarkOwnerResolveUnknown(reason, messageFormat string, messageA ...interface{})
func (*SigningKeyStatus) MarkOwnerResolved ¶
func (s *SigningKeyStatus) MarkOwnerResolved(ref TypedObjectReference)
func (*SigningKeyStatus) MarkSeedSecretFailed ¶
func (s *SigningKeyStatus) MarkSeedSecretFailed(reason, messageFormat string, messageA ...interface{})
func (*SigningKeyStatus) MarkSeedSecretReady ¶
func (s *SigningKeyStatus) MarkSeedSecretReady(publicKey, seedSecretName string)
func (*SigningKeyStatus) MarkSeedSecretUnknown ¶
func (s *SigningKeyStatus) MarkSeedSecretUnknown(reason, messageFormat string, messageA ...interface{})
type SigningKeyType ¶
type SigningKeyType string
type StartEndTime ¶
func (*StartEndTime) DeepCopy ¶
func (in *StartEndTime) DeepCopy() *StartEndTime
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new StartEndTime.
func (*StartEndTime) DeepCopyInto ¶
func (in *StartEndTime) DeepCopyInto(out *StartEndTime)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type Status ¶
type Status struct { // Conditions the latest available observations of a resource's current state. // +optional // +patchMergeKey=type // +patchStrategy=merge Conditions apis.Conditions `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"` }
func (*Status) DeepCopy ¶
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Status.
func (*Status) DeepCopyInto ¶
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*Status) GetConditions ¶
func (s *Status) GetConditions() apis.Conditions
func (*Status) SetConditions ¶
func (s *Status) SetConditions(conditions apis.Conditions)
type StatusAccessor ¶
type StatusAccessor interface {
GetStatus() *Status
}
StatusAccessor provides a way to access our standard Status subresource which contains Conditions.
type TLSConfig ¶ added in v0.1.1
type TLSConfig struct { // CAFile is a reference to a secret containing the CA certificate to use for TLS connections. CAFile *v1.SecretKeySelector `json:"caFile,omitempty"` }
TLSConfig is the TLS configuration for communicating to the NATS server for pushing/deleting account JWTs. Initially this only supports defining server-side TLS verification by defining a CA certificate within a secret, in the future we will support mutual-TLS authentication by defining a client certificate and key within a secret.
func (*TLSConfig) DeepCopy ¶ added in v0.1.1
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TLSConfig.
func (*TLSConfig) DeepCopyInto ¶ added in v0.1.1
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type TypedObjectReference ¶
type TypedObjectReference struct { APIVersion string `json:"apiVersion"` Kind string `json:"kind"` Name string `json:"name"` Namespace string `json:"namespace,omitempty"` UID types.UID `json:"uid,omitempty"` }
func (*TypedObjectReference) DeepCopy ¶
func (in *TypedObjectReference) DeepCopy() *TypedObjectReference
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TypedObjectReference.
func (*TypedObjectReference) DeepCopyInto ¶
func (in *TypedObjectReference) DeepCopyInto(out *TypedObjectReference)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*TypedObjectReference) GetGroupVersionKind ¶
func (r *TypedObjectReference) GetGroupVersionKind() schema.GroupVersionKind
type User ¶
type User struct { metav1.TypeMeta `json:",inline"` metav1.ObjectMeta `json:"metadata,omitempty"` Spec UserSpec `json:"spec,omitempty"` Status UserStatus `json:"status,omitempty"` }
User is the Schema for the users API
func (*User) DeepCopy ¶
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new User.
func (*User) DeepCopyInto ¶
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*User) DeepCopyObject ¶
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*User) GetConditionSet ¶
func (*User) GetConditionSet() apis.ConditionSet
type UserLimits ¶
type UserLimits struct { NatsLimits `json:",inline"` // Src is a list of CIDR blocks Src []string `json:"src,omitempty"` // Times is a list of start/end times in the format "15:04:05". Times []StartEndTime `json:"times,omitempty"` Locale string `json:"locale,omitempty"` }
func (*UserLimits) DeepCopy ¶
func (in *UserLimits) DeepCopy() *UserLimits
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new UserLimits.
func (*UserLimits) DeepCopyInto ¶
func (in *UserLimits) DeepCopyInto(out *UserLimits)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type UserList ¶
type UserList struct { metav1.TypeMeta `json:",inline"` metav1.ListMeta `json:"metadata,omitempty"` Items []User `json:"items"` }
UserList contains a list of User
func (*UserList) DeepCopy ¶
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new UserList.
func (*UserList) DeepCopyInto ¶
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*UserList) DeepCopyObject ¶
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
type UserPermissions ¶
type UserPermissions struct { Pub Permission `json:"pub,omitempty"` Sub Permission `json:"sub,omitempty"` Resp *RespPermission `json:"resp,omitempty"` }
func (*UserPermissions) DeepCopy ¶
func (in *UserPermissions) DeepCopy() *UserPermissions
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new UserPermissions.
func (*UserPermissions) DeepCopyInto ¶
func (in *UserPermissions) DeepCopyInto(out *UserPermissions)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type UserSpec ¶
type UserSpec struct { // Issuer is the reference to the Issuer that will be used to sign JWTs for this User. The controller // will check the owner of the Issuer is an Account, and that this User can be managed by that Account // following its namespace and label selector restrictions. Issuer IssuerReference `json:"issuer"` // JWTSecretName is the name of the Secret that will be created to store the JWT for this User. JWTSecretName string `json:"jwtSecretName"` // SeedSecretName is the name of the Secret that will be created to store the seed for this User. SeedSecretName string `json:"seedSecretName"` // CredentialsSecretName is the name of the Secret that will be created to store the credentials for this User. CredentialsSecretName string `json:"credentialsSecretName"` // Permissions is a JWT claim for the User. // +optional Permissions *UserPermissions `json:"permissions,omitempty"` // Limits is a JWT claim for the User. // +optional Limits UserLimits `json:"limits,omitempty"` // BearerToken is a JWT claim for the User. // +optional BearerToken *bool `json:"bearerToken,omitempty"` }
UserSpec defines the desired state of User
func (*UserSpec) DeepCopy ¶
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new UserSpec.
func (*UserSpec) DeepCopyInto ¶
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type UserStatus ¶
type UserStatus struct { Status `json:",inline"` KeyPair *KeyPair `json:"keyPair,omitempty"` AccountRef *InferredObjectReference `json:"accountRef,omitempty"` }
UserStatus defines the observed state of User
func (*UserStatus) DeepCopy ¶
func (in *UserStatus) DeepCopy() *UserStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new UserStatus.
func (*UserStatus) DeepCopyInto ¶
func (in *UserStatus) DeepCopyInto(out *UserStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*UserStatus) GetCondition ¶
func (s *UserStatus) GetCondition(t apis.ConditionType) *apis.Condition
GetCondition returns the condition currently associated with the given type, or nil.
func (*UserStatus) GetConditions ¶
func (s *UserStatus) GetConditions() apis.Conditions
func (*UserStatus) InitializeConditions ¶
func (s *UserStatus) InitializeConditions()
InitializeConditions sets relevant unset conditions to Unknown state.
func (*UserStatus) IsReady ¶
func (s *UserStatus) IsReady() bool
IsReady returns true if the resource is ready overall.
func (*UserStatus) MarkAccountResolveFailed ¶
func (s *UserStatus) MarkAccountResolveFailed(reason, messageFormat string, messageA ...interface{})
func (*UserStatus) MarkAccountResolveUnknown ¶
func (s *UserStatus) MarkAccountResolveUnknown(reason, messageFormat string, messageA ...interface{})
func (*UserStatus) MarkAccountResolved ¶
func (s *UserStatus) MarkAccountResolved(ref InferredObjectReference)
func (*UserStatus) MarkCredentialsSecretFailed ¶
func (s *UserStatus) MarkCredentialsSecretFailed(reason, messageFormat string, messageA ...interface{})
func (*UserStatus) MarkCredentialsSecretReady ¶
func (s *UserStatus) MarkCredentialsSecretReady()
func (*UserStatus) MarkCredentialsSecretUnknown ¶
func (s *UserStatus) MarkCredentialsSecretUnknown(reason, messageFormat string, messageA ...interface{})
func (*UserStatus) MarkIssuerResolveFailed ¶
func (s *UserStatus) MarkIssuerResolveFailed(reason, messageFormat string, messageA ...interface{})
func (*UserStatus) MarkIssuerResolveUnknown ¶
func (s *UserStatus) MarkIssuerResolveUnknown(reason, messageFormat string, messageA ...interface{})
func (*UserStatus) MarkIssuerResolved ¶
func (s *UserStatus) MarkIssuerResolved()
func (*UserStatus) MarkJWTSecretFailed ¶
func (s *UserStatus) MarkJWTSecretFailed(reason, messageFormat string, messageA ...interface{})
func (*UserStatus) MarkJWTSecretReady ¶
func (s *UserStatus) MarkJWTSecretReady()
func (*UserStatus) MarkJWTSecretUnknown ¶
func (s *UserStatus) MarkJWTSecretUnknown(reason, messageFormat string, messageA ...interface{})
func (*UserStatus) MarkSeedSecretFailed ¶
func (s *UserStatus) MarkSeedSecretFailed(reason, messageFormat string, messageA ...interface{})
func (*UserStatus) MarkSeedSecretReady ¶
func (s *UserStatus) MarkSeedSecretReady(kp KeyPair)
func (*UserStatus) MarkSeedSecretUnknown ¶
func (s *UserStatus) MarkSeedSecretUnknown(reason, messageFormat string, messageA ...interface{})
func (*UserStatus) SetConditions ¶
func (s *UserStatus) SetConditions(conditions apis.Conditions)