mirrors/pinniped
1
0
Fork 0
mirror of https://github.com/vmware-tanzu/pinniped.git synced 2026-07-30 20:12:55 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

run hack/update.sh

Browse Source 
Signed-off-by: Ashish Amarnath <ashish.amarnath@broadcom.com>
This commit is contained in:
Ashish Amarnath
2024-08-05 11:32:19 -07:00
committed by Ryan Richard
parent 842f14af4c
commit 19c3f2cb04
88 changed files with 2328 additions and 48 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy/concierge/authentication.concierge.pinniped.dev_jwtauthenticators.yaml
+27
View File
@@ -92,6 +92,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- audience
deploy/concierge/authentication.concierge.pinniped.dev_webhookauthenticators.yaml
+27
View File
@@ -63,6 +63,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- endpoint
deploy/supervisor/idp.supervisor.pinniped.dev_activedirectoryidentityproviders.yaml
+27
View File
@@ -170,6 +170,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
userSearch:
description: UserSearch contains the configuration for searching for
deploy/supervisor/idp.supervisor.pinniped.dev_githubidentityproviders.yaml
+27
View File
@@ -225,6 +225,33 @@ spec:
bundle). If omitted, a default set of system roots will
be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
type: object
required:
deploy/supervisor/idp.supervisor.pinniped.dev_ldapidentityproviders.yaml
+27
View File
@@ -161,6 +161,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
userSearch:
description: UserSearch contains the configuration for searching for
deploy/supervisor/idp.supervisor.pinniped.dev_oidcidentityproviders.yaml
+27
View File
@@ -211,6 +211,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- client
generated/1.24/README.adoc
Generated
+44
View File
@@ -23,6 +23,27 @@ Package v1alpha1 is the v1alpha1 version of the Pinniped concierge authenticatio
[id="{anchor_prefix}-go-pinniped-dev-generated-1-24-apis-concierge-authentication-v1alpha1-cabundlesource"]
==== CABundleSource
CABundleSource provides a source for CA bundle used for client-side TLS verification.
.Appears In:
****
- xref:{anchor_prefix}-go-pinniped-dev-generated-1-24-apis-concierge-authentication-v1alpha1-tlsspec[$$TLSSpec$$]
****
[cols="25a,75a", options="header"]
|===
| Field | Description
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
Secrets must be of type kubernetes.io/tls or Opaque. +
For configmaps, the value associated with the key is not expected to be base64 encoded. +
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-24-apis-concierge-authentication-v1alpha1-jwtauthenticator"]
==== JWTAuthenticator
@@ -137,6 +158,7 @@ Configuration for configuring TLS on various authenticators.
|===
| Field | Description
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-24-apis-concierge-authentication-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|===
@@ -1645,6 +1667,27 @@ Optional, when empty this defaults to "objectGUID". +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-24-apis-supervisor-idp-v1alpha1-cabundlesource"]
==== CABundleSource
CABundleSource provides a source for CA bundle used for client-side TLS verification.
.Appears In:
****
- xref:{anchor_prefix}-go-pinniped-dev-generated-1-24-apis-supervisor-idp-v1alpha1-tlsspec[$$TLSSpec$$]
****
[cols="25a,75a", options="header"]
|===
| Field | Description
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
Secrets must be of type kubernetes.io/tls or Opaque. +
For configmaps, the value associated with the key is not expected to be base64 encoded. +
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-24-apis-supervisor-idp-v1alpha1-githubapiconfig"]
==== GitHubAPIConfig
@@ -2401,6 +2444,7 @@ TLSSpec provides TLS configuration for identity provider integration.
|===
| Field | Description
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-24-apis-supervisor-idp-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|===
generated/1.24/apis/concierge/authentication/v1alpha1/types_tls.go
Generated
+18
View File
@@ -3,9 +3,27 @@
package v1alpha1
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
type CABundleSource struct {
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
// Secrets must be of type kubernetes.io/tls or Opaque.
// For configmaps, the value associated with the key is not expected to be base64 encoded.
// +kubebuilder:validation:Enum=Secret;ConfigMap
Kind string `json:"kind"`
// Name of the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Name string `json:"name"`
// Key within the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Key string `json:"key"`
}
// Configuration for configuring TLS on various authenticators.
type TLSSpec struct {
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
// +optional
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
// Reference to a CA bundle in a secret or a configmap.
// +optional
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
}
generated/1.24/apis/concierge/authentication/v1alpha1/zz_generated.deepcopy.go
Generated
+23 -2
View File
@@ -13,6 +13,22 @@ import (
runtime "k8s.io/apimachinery/pkg/runtime"
)
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
*out = *in
return
}
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
func (in *CABundleSource) DeepCopy() *CABundleSource {
if in == nil {
return nil
}
out := new(CABundleSource)
in.DeepCopyInto(out)
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *JWTAuthenticator) DeepCopyInto(out *JWTAuthenticator) {
*out = *in
@@ -81,7 +97,7 @@ func (in *JWTAuthenticatorSpec) DeepCopyInto(out *JWTAuthenticatorSpec) {
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
@@ -138,6 +154,11 @@ func (in *JWTTokenClaims) DeepCopy() *JWTTokenClaims {
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
*out = *in
if in.CertificateAuthorityDataSource != nil {
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
*out = new(CABundleSource)
**out = **in
}
return
}
@@ -218,7 +239,7 @@ func (in *WebhookAuthenticatorSpec) DeepCopyInto(out *WebhookAuthenticatorSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
generated/1.24/apis/supervisor/idp/v1alpha1/types_tls.go
Generated
+19
View File
@@ -3,9 +3,28 @@
package v1alpha1
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
type CABundleSource struct {
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
// Secrets must be of type kubernetes.io/tls or Opaque.
// For configmaps, the value associated with the key is not expected to be base64 encoded.
// +kubebuilder:validation:Enum=Secret;ConfigMap
Kind string `json:"kind"`
// Name of the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Name string `json:"name"`
// Key within the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Key string `json:"key"`
}
// TLSSpec provides TLS configuration for identity provider integration.
type TLSSpec struct {
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
// +optional
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
// Reference to a CA bundle in a secret or a configmap.
// +optional
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
}
generated/1.24/apis/supervisor/idp/v1alpha1/zz_generated.deepcopy.go
Generated
+25 -4
View File
@@ -129,7 +129,7 @@ func (in *ActiveDirectoryIdentityProviderSpec) DeepCopyInto(out *ActiveDirectory
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
out.Bind = in.Bind
out.UserSearch = in.UserSearch
@@ -203,6 +203,22 @@ func (in *ActiveDirectoryIdentityProviderUserSearchAttributes) DeepCopy() *Activ
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
*out = *in
return
}
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
func (in *CABundleSource) DeepCopy() *CABundleSource {
if in == nil {
return nil
}
out := new(CABundleSource)
in.DeepCopyInto(out)
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *GitHubAPIConfig) DeepCopyInto(out *GitHubAPIConfig) {
*out = *in
@@ -214,7 +230,7 @@ func (in *GitHubAPIConfig) DeepCopyInto(out *GitHubAPIConfig) {
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
@@ -534,7 +550,7 @@ func (in *LDAPIdentityProviderSpec) DeepCopyInto(out *LDAPIdentityProviderSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
out.Bind = in.Bind
out.UserSearch = in.UserSearch
@@ -740,7 +756,7 @@ func (in *OIDCIdentityProviderSpec) DeepCopyInto(out *OIDCIdentityProviderSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
in.AuthorizationConfig.DeepCopyInto(&out.AuthorizationConfig)
in.Claims.DeepCopyInto(&out.Claims)
@@ -800,6 +816,11 @@ func (in *Parameter) DeepCopy() *Parameter {
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
*out = *in
if in.CertificateAuthorityDataSource != nil {
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
*out = new(CABundleSource)
**out = **in
}
return
}
generated/1.24/crds/authentication.concierge.pinniped.dev_jwtauthenticators.yaml
Generated
+27
View File
@@ -92,6 +92,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- audience
generated/1.24/crds/authentication.concierge.pinniped.dev_webhookauthenticators.yaml
Generated
+27
View File
@@ -63,6 +63,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- endpoint
generated/1.24/crds/idp.supervisor.pinniped.dev_activedirectoryidentityproviders.yaml
Generated
+27
View File
@@ -170,6 +170,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
userSearch:
description: UserSearch contains the configuration for searching for
generated/1.24/crds/idp.supervisor.pinniped.dev_githubidentityproviders.yaml
Generated
+27
View File
@@ -225,6 +225,33 @@ spec:
bundle). If omitted, a default set of system roots will
be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
type: object
required:
generated/1.24/crds/idp.supervisor.pinniped.dev_ldapidentityproviders.yaml
Generated
+27
View File
@@ -161,6 +161,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
userSearch:
description: UserSearch contains the configuration for searching for
generated/1.24/crds/idp.supervisor.pinniped.dev_oidcidentityproviders.yaml
Generated
+27
View File
@@ -211,6 +211,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- client
generated/1.25/README.adoc
Generated
+44
View File
@@ -23,6 +23,27 @@ Package v1alpha1 is the v1alpha1 version of the Pinniped concierge authenticatio
[id="{anchor_prefix}-go-pinniped-dev-generated-1-25-apis-concierge-authentication-v1alpha1-cabundlesource"]
==== CABundleSource
CABundleSource provides a source for CA bundle used for client-side TLS verification.
.Appears In:
****
- xref:{anchor_prefix}-go-pinniped-dev-generated-1-25-apis-concierge-authentication-v1alpha1-tlsspec[$$TLSSpec$$]
****
[cols="25a,75a", options="header"]
|===
| Field | Description
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
Secrets must be of type kubernetes.io/tls or Opaque. +
For configmaps, the value associated with the key is not expected to be base64 encoded. +
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-25-apis-concierge-authentication-v1alpha1-jwtauthenticator"]
==== JWTAuthenticator
@@ -137,6 +158,7 @@ Configuration for configuring TLS on various authenticators.
|===
| Field | Description
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-25-apis-concierge-authentication-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|===
@@ -1645,6 +1667,27 @@ Optional, when empty this defaults to "objectGUID". +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-25-apis-supervisor-idp-v1alpha1-cabundlesource"]
==== CABundleSource
CABundleSource provides a source for CA bundle used for client-side TLS verification.
.Appears In:
****
- xref:{anchor_prefix}-go-pinniped-dev-generated-1-25-apis-supervisor-idp-v1alpha1-tlsspec[$$TLSSpec$$]
****
[cols="25a,75a", options="header"]
|===
| Field | Description
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
Secrets must be of type kubernetes.io/tls or Opaque. +
For configmaps, the value associated with the key is not expected to be base64 encoded. +
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-25-apis-supervisor-idp-v1alpha1-githubapiconfig"]
==== GitHubAPIConfig
@@ -2401,6 +2444,7 @@ TLSSpec provides TLS configuration for identity provider integration.
|===
| Field | Description
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-25-apis-supervisor-idp-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|===
generated/1.25/apis/concierge/authentication/v1alpha1/types_tls.go
Generated
+18
View File
@@ -3,9 +3,27 @@
package v1alpha1
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
type CABundleSource struct {
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
// Secrets must be of type kubernetes.io/tls or Opaque.
// For configmaps, the value associated with the key is not expected to be base64 encoded.
// +kubebuilder:validation:Enum=Secret;ConfigMap
Kind string `json:"kind"`
// Name of the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Name string `json:"name"`
// Key within the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Key string `json:"key"`
}
// Configuration for configuring TLS on various authenticators.
type TLSSpec struct {
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
// +optional
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
// Reference to a CA bundle in a secret or a configmap.
// +optional
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
}
generated/1.25/apis/concierge/authentication/v1alpha1/zz_generated.deepcopy.go
Generated
+23 -2
View File
@@ -13,6 +13,22 @@ import (
runtime "k8s.io/apimachinery/pkg/runtime"
)
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
*out = *in
return
}
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
func (in *CABundleSource) DeepCopy() *CABundleSource {
if in == nil {
return nil
}
out := new(CABundleSource)
in.DeepCopyInto(out)
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *JWTAuthenticator) DeepCopyInto(out *JWTAuthenticator) {
*out = *in
@@ -81,7 +97,7 @@ func (in *JWTAuthenticatorSpec) DeepCopyInto(out *JWTAuthenticatorSpec) {
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
@@ -138,6 +154,11 @@ func (in *JWTTokenClaims) DeepCopy() *JWTTokenClaims {
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
*out = *in
if in.CertificateAuthorityDataSource != nil {
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
*out = new(CABundleSource)
**out = **in
}
return
}
@@ -218,7 +239,7 @@ func (in *WebhookAuthenticatorSpec) DeepCopyInto(out *WebhookAuthenticatorSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
generated/1.25/apis/supervisor/idp/v1alpha1/types_tls.go
Generated
+19
View File
@@ -3,9 +3,28 @@
package v1alpha1
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
type CABundleSource struct {
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
// Secrets must be of type kubernetes.io/tls or Opaque.
// For configmaps, the value associated with the key is not expected to be base64 encoded.
// +kubebuilder:validation:Enum=Secret;ConfigMap
Kind string `json:"kind"`
// Name of the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Name string `json:"name"`
// Key within the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Key string `json:"key"`
}
// TLSSpec provides TLS configuration for identity provider integration.
type TLSSpec struct {
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
// +optional
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
// Reference to a CA bundle in a secret or a configmap.
// +optional
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
}
generated/1.25/apis/supervisor/idp/v1alpha1/zz_generated.deepcopy.go
Generated
+25 -4
View File
@@ -129,7 +129,7 @@ func (in *ActiveDirectoryIdentityProviderSpec) DeepCopyInto(out *ActiveDirectory
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
out.Bind = in.Bind
out.UserSearch = in.UserSearch
@@ -203,6 +203,22 @@ func (in *ActiveDirectoryIdentityProviderUserSearchAttributes) DeepCopy() *Activ
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
*out = *in
return
}
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
func (in *CABundleSource) DeepCopy() *CABundleSource {
if in == nil {
return nil
}
out := new(CABundleSource)
in.DeepCopyInto(out)
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *GitHubAPIConfig) DeepCopyInto(out *GitHubAPIConfig) {
*out = *in
@@ -214,7 +230,7 @@ func (in *GitHubAPIConfig) DeepCopyInto(out *GitHubAPIConfig) {
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
@@ -534,7 +550,7 @@ func (in *LDAPIdentityProviderSpec) DeepCopyInto(out *LDAPIdentityProviderSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
out.Bind = in.Bind
out.UserSearch = in.UserSearch
@@ -740,7 +756,7 @@ func (in *OIDCIdentityProviderSpec) DeepCopyInto(out *OIDCIdentityProviderSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
in.AuthorizationConfig.DeepCopyInto(&out.AuthorizationConfig)
in.Claims.DeepCopyInto(&out.Claims)
@@ -800,6 +816,11 @@ func (in *Parameter) DeepCopy() *Parameter {
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
*out = *in
if in.CertificateAuthorityDataSource != nil {
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
*out = new(CABundleSource)
**out = **in
}
return
}
generated/1.25/crds/authentication.concierge.pinniped.dev_jwtauthenticators.yaml
Generated
+27
View File
@@ -92,6 +92,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- audience
generated/1.25/crds/authentication.concierge.pinniped.dev_webhookauthenticators.yaml
Generated
+27
View File
@@ -63,6 +63,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- endpoint
generated/1.25/crds/idp.supervisor.pinniped.dev_activedirectoryidentityproviders.yaml
Generated
+27
View File
@@ -170,6 +170,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
userSearch:
description: UserSearch contains the configuration for searching for
generated/1.25/crds/idp.supervisor.pinniped.dev_githubidentityproviders.yaml
Generated
+27
View File
@@ -225,6 +225,33 @@ spec:
bundle). If omitted, a default set of system roots will
be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
type: object
required:
generated/1.25/crds/idp.supervisor.pinniped.dev_ldapidentityproviders.yaml
Generated
+27
View File
@@ -161,6 +161,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
userSearch:
description: UserSearch contains the configuration for searching for
generated/1.25/crds/idp.supervisor.pinniped.dev_oidcidentityproviders.yaml
Generated
+27
View File
@@ -211,6 +211,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- client
generated/1.26/README.adoc
Generated
+44
View File
@@ -23,6 +23,27 @@ Package v1alpha1 is the v1alpha1 version of the Pinniped concierge authenticatio
[id="{anchor_prefix}-go-pinniped-dev-generated-1-26-apis-concierge-authentication-v1alpha1-cabundlesource"]
==== CABundleSource
CABundleSource provides a source for CA bundle used for client-side TLS verification.
.Appears In:
****
- xref:{anchor_prefix}-go-pinniped-dev-generated-1-26-apis-concierge-authentication-v1alpha1-tlsspec[$$TLSSpec$$]
****
[cols="25a,75a", options="header"]
|===
| Field | Description
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
Secrets must be of type kubernetes.io/tls or Opaque. +
For configmaps, the value associated with the key is not expected to be base64 encoded. +
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-26-apis-concierge-authentication-v1alpha1-jwtauthenticator"]
==== JWTAuthenticator
@@ -137,6 +158,7 @@ Configuration for configuring TLS on various authenticators.
|===
| Field | Description
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-26-apis-concierge-authentication-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|===
@@ -1645,6 +1667,27 @@ Optional, when empty this defaults to "objectGUID". +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-26-apis-supervisor-idp-v1alpha1-cabundlesource"]
==== CABundleSource
CABundleSource provides a source for CA bundle used for client-side TLS verification.
.Appears In:
****
- xref:{anchor_prefix}-go-pinniped-dev-generated-1-26-apis-supervisor-idp-v1alpha1-tlsspec[$$TLSSpec$$]
****
[cols="25a,75a", options="header"]
|===
| Field | Description
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
Secrets must be of type kubernetes.io/tls or Opaque. +
For configmaps, the value associated with the key is not expected to be base64 encoded. +
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-26-apis-supervisor-idp-v1alpha1-githubapiconfig"]
==== GitHubAPIConfig
@@ -2401,6 +2444,7 @@ TLSSpec provides TLS configuration for identity provider integration.
|===
| Field | Description
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-26-apis-supervisor-idp-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|===
generated/1.26/apis/concierge/authentication/v1alpha1/types_tls.go
Generated
+18
View File
@@ -3,9 +3,27 @@
package v1alpha1
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
type CABundleSource struct {
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
// Secrets must be of type kubernetes.io/tls or Opaque.
// For configmaps, the value associated with the key is not expected to be base64 encoded.
// +kubebuilder:validation:Enum=Secret;ConfigMap
Kind string `json:"kind"`
// Name of the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Name string `json:"name"`
// Key within the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Key string `json:"key"`
}
// Configuration for configuring TLS on various authenticators.
type TLSSpec struct {
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
// +optional
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
// Reference to a CA bundle in a secret or a configmap.
// +optional
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
}
generated/1.26/apis/concierge/authentication/v1alpha1/zz_generated.deepcopy.go
Generated
+23 -2
View File
@@ -13,6 +13,22 @@ import (
runtime "k8s.io/apimachinery/pkg/runtime"
)
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
*out = *in
return
}
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
func (in *CABundleSource) DeepCopy() *CABundleSource {
if in == nil {
return nil
}
out := new(CABundleSource)
in.DeepCopyInto(out)
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *JWTAuthenticator) DeepCopyInto(out *JWTAuthenticator) {
*out = *in
@@ -81,7 +97,7 @@ func (in *JWTAuthenticatorSpec) DeepCopyInto(out *JWTAuthenticatorSpec) {
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
@@ -138,6 +154,11 @@ func (in *JWTTokenClaims) DeepCopy() *JWTTokenClaims {
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
*out = *in
if in.CertificateAuthorityDataSource != nil {
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
*out = new(CABundleSource)
**out = **in
}
return
}
@@ -218,7 +239,7 @@ func (in *WebhookAuthenticatorSpec) DeepCopyInto(out *WebhookAuthenticatorSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
generated/1.26/apis/supervisor/idp/v1alpha1/types_tls.go
Generated
+19
View File
@@ -3,9 +3,28 @@
package v1alpha1
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
type CABundleSource struct {
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
// Secrets must be of type kubernetes.io/tls or Opaque.
// For configmaps, the value associated with the key is not expected to be base64 encoded.
// +kubebuilder:validation:Enum=Secret;ConfigMap
Kind string `json:"kind"`
// Name of the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Name string `json:"name"`
// Key within the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Key string `json:"key"`
}
// TLSSpec provides TLS configuration for identity provider integration.
type TLSSpec struct {
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
// +optional
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
// Reference to a CA bundle in a secret or a configmap.
// +optional
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
}
generated/1.26/apis/supervisor/idp/v1alpha1/zz_generated.deepcopy.go
Generated
+25 -4
View File
@@ -129,7 +129,7 @@ func (in *ActiveDirectoryIdentityProviderSpec) DeepCopyInto(out *ActiveDirectory
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
out.Bind = in.Bind
out.UserSearch = in.UserSearch
@@ -203,6 +203,22 @@ func (in *ActiveDirectoryIdentityProviderUserSearchAttributes) DeepCopy() *Activ
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
*out = *in
return
}
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
func (in *CABundleSource) DeepCopy() *CABundleSource {
if in == nil {
return nil
}
out := new(CABundleSource)
in.DeepCopyInto(out)
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *GitHubAPIConfig) DeepCopyInto(out *GitHubAPIConfig) {
*out = *in
@@ -214,7 +230,7 @@ func (in *GitHubAPIConfig) DeepCopyInto(out *GitHubAPIConfig) {
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
@@ -534,7 +550,7 @@ func (in *LDAPIdentityProviderSpec) DeepCopyInto(out *LDAPIdentityProviderSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
out.Bind = in.Bind
out.UserSearch = in.UserSearch
@@ -740,7 +756,7 @@ func (in *OIDCIdentityProviderSpec) DeepCopyInto(out *OIDCIdentityProviderSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
in.AuthorizationConfig.DeepCopyInto(&out.AuthorizationConfig)
in.Claims.DeepCopyInto(&out.Claims)
@@ -800,6 +816,11 @@ func (in *Parameter) DeepCopy() *Parameter {
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
*out = *in
if in.CertificateAuthorityDataSource != nil {
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
*out = new(CABundleSource)
**out = **in
}
return
}
generated/1.26/crds/authentication.concierge.pinniped.dev_jwtauthenticators.yaml
Generated
+27
View File
@@ -92,6 +92,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- audience
generated/1.26/crds/authentication.concierge.pinniped.dev_webhookauthenticators.yaml
Generated
+27
View File
@@ -63,6 +63,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- endpoint
generated/1.26/crds/idp.supervisor.pinniped.dev_activedirectoryidentityproviders.yaml
Generated
+27
View File
@@ -170,6 +170,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
userSearch:
description: UserSearch contains the configuration for searching for
generated/1.26/crds/idp.supervisor.pinniped.dev_githubidentityproviders.yaml
Generated
+27
View File
@@ -225,6 +225,33 @@ spec:
bundle). If omitted, a default set of system roots will
be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
type: object
required:
generated/1.26/crds/idp.supervisor.pinniped.dev_ldapidentityproviders.yaml
Generated
+27
View File
@@ -161,6 +161,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
userSearch:
description: UserSearch contains the configuration for searching for
generated/1.26/crds/idp.supervisor.pinniped.dev_oidcidentityproviders.yaml
Generated
+27
View File
@@ -211,6 +211,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- client
generated/1.27/README.adoc
Generated
+44
View File
@@ -23,6 +23,27 @@ Package v1alpha1 is the v1alpha1 version of the Pinniped concierge authenticatio
[id="{anchor_prefix}-go-pinniped-dev-generated-1-27-apis-concierge-authentication-v1alpha1-cabundlesource"]
==== CABundleSource
CABundleSource provides a source for CA bundle used for client-side TLS verification.
.Appears In:
****
- xref:{anchor_prefix}-go-pinniped-dev-generated-1-27-apis-concierge-authentication-v1alpha1-tlsspec[$$TLSSpec$$]
****
[cols="25a,75a", options="header"]
|===
| Field | Description
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
Secrets must be of type kubernetes.io/tls or Opaque. +
For configmaps, the value associated with the key is not expected to be base64 encoded. +
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-27-apis-concierge-authentication-v1alpha1-jwtauthenticator"]
==== JWTAuthenticator
@@ -137,6 +158,7 @@ Configuration for configuring TLS on various authenticators.
|===
| Field | Description
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-27-apis-concierge-authentication-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|===
@@ -1645,6 +1667,27 @@ Optional, when empty this defaults to "objectGUID". +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-27-apis-supervisor-idp-v1alpha1-cabundlesource"]
==== CABundleSource
CABundleSource provides a source for CA bundle used for client-side TLS verification.
.Appears In:
****
- xref:{anchor_prefix}-go-pinniped-dev-generated-1-27-apis-supervisor-idp-v1alpha1-tlsspec[$$TLSSpec$$]
****
[cols="25a,75a", options="header"]
|===
| Field | Description
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
Secrets must be of type kubernetes.io/tls or Opaque. +
For configmaps, the value associated with the key is not expected to be base64 encoded. +
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-27-apis-supervisor-idp-v1alpha1-githubapiconfig"]
==== GitHubAPIConfig
@@ -2401,6 +2444,7 @@ TLSSpec provides TLS configuration for identity provider integration.
|===
| Field | Description
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-27-apis-supervisor-idp-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|===
generated/1.27/apis/concierge/authentication/v1alpha1/types_tls.go
Generated
+18
View File
@@ -3,9 +3,27 @@
package v1alpha1
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
type CABundleSource struct {
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
// Secrets must be of type kubernetes.io/tls or Opaque.
// For configmaps, the value associated with the key is not expected to be base64 encoded.
// +kubebuilder:validation:Enum=Secret;ConfigMap
Kind string `json:"kind"`
// Name of the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Name string `json:"name"`
// Key within the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Key string `json:"key"`
}
// Configuration for configuring TLS on various authenticators.
type TLSSpec struct {
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
// +optional
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
// Reference to a CA bundle in a secret or a configmap.
// +optional
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
}
generated/1.27/apis/concierge/authentication/v1alpha1/zz_generated.deepcopy.go
Generated
+23 -2
View File
@@ -13,6 +13,22 @@ import (
runtime "k8s.io/apimachinery/pkg/runtime"
)
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
*out = *in
return
}
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
func (in *CABundleSource) DeepCopy() *CABundleSource {
if in == nil {
return nil
}
out := new(CABundleSource)
in.DeepCopyInto(out)
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *JWTAuthenticator) DeepCopyInto(out *JWTAuthenticator) {
*out = *in
@@ -81,7 +97,7 @@ func (in *JWTAuthenticatorSpec) DeepCopyInto(out *JWTAuthenticatorSpec) {
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
@@ -138,6 +154,11 @@ func (in *JWTTokenClaims) DeepCopy() *JWTTokenClaims {
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
*out = *in
if in.CertificateAuthorityDataSource != nil {
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
*out = new(CABundleSource)
**out = **in
}
return
}
@@ -218,7 +239,7 @@ func (in *WebhookAuthenticatorSpec) DeepCopyInto(out *WebhookAuthenticatorSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
generated/1.27/apis/supervisor/idp/v1alpha1/types_tls.go
Generated
+19
View File
@@ -3,9 +3,28 @@
package v1alpha1
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
type CABundleSource struct {
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
// Secrets must be of type kubernetes.io/tls or Opaque.
// For configmaps, the value associated with the key is not expected to be base64 encoded.
// +kubebuilder:validation:Enum=Secret;ConfigMap
Kind string `json:"kind"`
// Name of the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Name string `json:"name"`
// Key within the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Key string `json:"key"`
}
// TLSSpec provides TLS configuration for identity provider integration.
type TLSSpec struct {
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
// +optional
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
// Reference to a CA bundle in a secret or a configmap.
// +optional
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
}
generated/1.27/apis/supervisor/idp/v1alpha1/zz_generated.deepcopy.go
Generated
+25 -4
View File
@@ -129,7 +129,7 @@ func (in *ActiveDirectoryIdentityProviderSpec) DeepCopyInto(out *ActiveDirectory
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
out.Bind = in.Bind
out.UserSearch = in.UserSearch
@@ -203,6 +203,22 @@ func (in *ActiveDirectoryIdentityProviderUserSearchAttributes) DeepCopy() *Activ
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
*out = *in
return
}
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
func (in *CABundleSource) DeepCopy() *CABundleSource {
if in == nil {
return nil
}
out := new(CABundleSource)
in.DeepCopyInto(out)
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *GitHubAPIConfig) DeepCopyInto(out *GitHubAPIConfig) {
*out = *in
@@ -214,7 +230,7 @@ func (in *GitHubAPIConfig) DeepCopyInto(out *GitHubAPIConfig) {
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
@@ -534,7 +550,7 @@ func (in *LDAPIdentityProviderSpec) DeepCopyInto(out *LDAPIdentityProviderSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
out.Bind = in.Bind
out.UserSearch = in.UserSearch
@@ -740,7 +756,7 @@ func (in *OIDCIdentityProviderSpec) DeepCopyInto(out *OIDCIdentityProviderSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
in.AuthorizationConfig.DeepCopyInto(&out.AuthorizationConfig)
in.Claims.DeepCopyInto(&out.Claims)
@@ -800,6 +816,11 @@ func (in *Parameter) DeepCopy() *Parameter {
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
*out = *in
if in.CertificateAuthorityDataSource != nil {
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
*out = new(CABundleSource)
**out = **in
}
return
}
generated/1.27/crds/authentication.concierge.pinniped.dev_jwtauthenticators.yaml
Generated
+27
View File
@@ -92,6 +92,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- audience
generated/1.27/crds/authentication.concierge.pinniped.dev_webhookauthenticators.yaml
Generated
+27
View File
@@ -63,6 +63,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- endpoint
generated/1.27/crds/idp.supervisor.pinniped.dev_activedirectoryidentityproviders.yaml
Generated
+27
View File
@@ -170,6 +170,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
userSearch:
description: UserSearch contains the configuration for searching for
generated/1.27/crds/idp.supervisor.pinniped.dev_githubidentityproviders.yaml
Generated
+27
View File
@@ -225,6 +225,33 @@ spec:
bundle). If omitted, a default set of system roots will
be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
type: object
required:
generated/1.27/crds/idp.supervisor.pinniped.dev_ldapidentityproviders.yaml
Generated
+27
View File
@@ -161,6 +161,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
userSearch:
description: UserSearch contains the configuration for searching for
generated/1.27/crds/idp.supervisor.pinniped.dev_oidcidentityproviders.yaml
Generated
+27
View File
@@ -211,6 +211,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- client
generated/1.28/README.adoc
Generated
+44
View File
@@ -23,6 +23,27 @@ Package v1alpha1 is the v1alpha1 version of the Pinniped concierge authenticatio
[id="{anchor_prefix}-go-pinniped-dev-generated-1-28-apis-concierge-authentication-v1alpha1-cabundlesource"]
==== CABundleSource
CABundleSource provides a source for CA bundle used for client-side TLS verification.
.Appears In:
****
- xref:{anchor_prefix}-go-pinniped-dev-generated-1-28-apis-concierge-authentication-v1alpha1-tlsspec[$$TLSSpec$$]
****
[cols="25a,75a", options="header"]
|===
| Field | Description
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
Secrets must be of type kubernetes.io/tls or Opaque. +
For configmaps, the value associated with the key is not expected to be base64 encoded. +
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-28-apis-concierge-authentication-v1alpha1-jwtauthenticator"]
==== JWTAuthenticator
@@ -137,6 +158,7 @@ Configuration for configuring TLS on various authenticators.
|===
| Field | Description
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-28-apis-concierge-authentication-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|===
@@ -1645,6 +1667,27 @@ Optional, when empty this defaults to "objectGUID". +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-28-apis-supervisor-idp-v1alpha1-cabundlesource"]
==== CABundleSource
CABundleSource provides a source for CA bundle used for client-side TLS verification.
.Appears In:
****
- xref:{anchor_prefix}-go-pinniped-dev-generated-1-28-apis-supervisor-idp-v1alpha1-tlsspec[$$TLSSpec$$]
****
[cols="25a,75a", options="header"]
|===
| Field | Description
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
Secrets must be of type kubernetes.io/tls or Opaque. +
For configmaps, the value associated with the key is not expected to be base64 encoded. +
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-28-apis-supervisor-idp-v1alpha1-githubapiconfig"]
==== GitHubAPIConfig
@@ -2401,6 +2444,7 @@ TLSSpec provides TLS configuration for identity provider integration.
|===
| Field | Description
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-28-apis-supervisor-idp-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|===
generated/1.28/apis/concierge/authentication/v1alpha1/types_tls.go
Generated
+18
View File
@@ -3,9 +3,27 @@
package v1alpha1
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
type CABundleSource struct {
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
// Secrets must be of type kubernetes.io/tls or Opaque.
// For configmaps, the value associated with the key is not expected to be base64 encoded.
// +kubebuilder:validation:Enum=Secret;ConfigMap
Kind string `json:"kind"`
// Name of the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Name string `json:"name"`
// Key within the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Key string `json:"key"`
}
// Configuration for configuring TLS on various authenticators.
type TLSSpec struct {
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
// +optional
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
// Reference to a CA bundle in a secret or a configmap.
// +optional
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
}
generated/1.28/apis/concierge/authentication/v1alpha1/zz_generated.deepcopy.go
Generated
+23 -2
View File
@@ -13,6 +13,22 @@ import (
runtime "k8s.io/apimachinery/pkg/runtime"
)
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
*out = *in
return
}
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
func (in *CABundleSource) DeepCopy() *CABundleSource {
if in == nil {
return nil
}
out := new(CABundleSource)
in.DeepCopyInto(out)
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *JWTAuthenticator) DeepCopyInto(out *JWTAuthenticator) {
*out = *in
@@ -81,7 +97,7 @@ func (in *JWTAuthenticatorSpec) DeepCopyInto(out *JWTAuthenticatorSpec) {
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
@@ -138,6 +154,11 @@ func (in *JWTTokenClaims) DeepCopy() *JWTTokenClaims {
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
*out = *in
if in.CertificateAuthorityDataSource != nil {
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
*out = new(CABundleSource)
**out = **in
}
return
}
@@ -218,7 +239,7 @@ func (in *WebhookAuthenticatorSpec) DeepCopyInto(out *WebhookAuthenticatorSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
generated/1.28/apis/supervisor/idp/v1alpha1/types_tls.go
Generated
+19
View File
@@ -3,9 +3,28 @@
package v1alpha1
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
type CABundleSource struct {
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
// Secrets must be of type kubernetes.io/tls or Opaque.
// For configmaps, the value associated with the key is not expected to be base64 encoded.
// +kubebuilder:validation:Enum=Secret;ConfigMap
Kind string `json:"kind"`
// Name of the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Name string `json:"name"`
// Key within the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Key string `json:"key"`
}
// TLSSpec provides TLS configuration for identity provider integration.
type TLSSpec struct {
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
// +optional
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
// Reference to a CA bundle in a secret or a configmap.
// +optional
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
}
generated/1.28/apis/supervisor/idp/v1alpha1/zz_generated.deepcopy.go
Generated
+25 -4
View File
@@ -129,7 +129,7 @@ func (in *ActiveDirectoryIdentityProviderSpec) DeepCopyInto(out *ActiveDirectory
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
out.Bind = in.Bind
out.UserSearch = in.UserSearch
@@ -203,6 +203,22 @@ func (in *ActiveDirectoryIdentityProviderUserSearchAttributes) DeepCopy() *Activ
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
*out = *in
return
}
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
func (in *CABundleSource) DeepCopy() *CABundleSource {
if in == nil {
return nil
}
out := new(CABundleSource)
in.DeepCopyInto(out)
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *GitHubAPIConfig) DeepCopyInto(out *GitHubAPIConfig) {
*out = *in
@@ -214,7 +230,7 @@ func (in *GitHubAPIConfig) DeepCopyInto(out *GitHubAPIConfig) {
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
@@ -534,7 +550,7 @@ func (in *LDAPIdentityProviderSpec) DeepCopyInto(out *LDAPIdentityProviderSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
out.Bind = in.Bind
out.UserSearch = in.UserSearch
@@ -740,7 +756,7 @@ func (in *OIDCIdentityProviderSpec) DeepCopyInto(out *OIDCIdentityProviderSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
in.AuthorizationConfig.DeepCopyInto(&out.AuthorizationConfig)
in.Claims.DeepCopyInto(&out.Claims)
@@ -800,6 +816,11 @@ func (in *Parameter) DeepCopy() *Parameter {
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
*out = *in
if in.CertificateAuthorityDataSource != nil {
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
*out = new(CABundleSource)
**out = **in
}
return
}
generated/1.28/crds/authentication.concierge.pinniped.dev_jwtauthenticators.yaml
Generated
+27
View File
@@ -92,6 +92,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- audience
generated/1.28/crds/authentication.concierge.pinniped.dev_webhookauthenticators.yaml
Generated
+27
View File
@@ -63,6 +63,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- endpoint
generated/1.28/crds/idp.supervisor.pinniped.dev_activedirectoryidentityproviders.yaml
Generated
+27
View File
@@ -170,6 +170,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
userSearch:
description: UserSearch contains the configuration for searching for
generated/1.28/crds/idp.supervisor.pinniped.dev_githubidentityproviders.yaml
Generated
+27
View File
@@ -225,6 +225,33 @@ spec:
bundle). If omitted, a default set of system roots will
be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
type: object
required:
generated/1.28/crds/idp.supervisor.pinniped.dev_ldapidentityproviders.yaml
Generated
+27
View File
@@ -161,6 +161,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
userSearch:
description: UserSearch contains the configuration for searching for
generated/1.28/crds/idp.supervisor.pinniped.dev_oidcidentityproviders.yaml
Generated
+27
View File
@@ -211,6 +211,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- client
generated/1.29/README.adoc
Generated
+44
View File
@@ -23,6 +23,27 @@ Package v1alpha1 is the v1alpha1 version of the Pinniped concierge authenticatio
[id="{anchor_prefix}-go-pinniped-dev-generated-1-29-apis-concierge-authentication-v1alpha1-cabundlesource"]
==== CABundleSource
CABundleSource provides a source for CA bundle used for client-side TLS verification.
.Appears In:
****
- xref:{anchor_prefix}-go-pinniped-dev-generated-1-29-apis-concierge-authentication-v1alpha1-tlsspec[$$TLSSpec$$]
****
[cols="25a,75a", options="header"]
|===
| Field | Description
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
Secrets must be of type kubernetes.io/tls or Opaque. +
For configmaps, the value associated with the key is not expected to be base64 encoded. +
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-29-apis-concierge-authentication-v1alpha1-jwtauthenticator"]
==== JWTAuthenticator
@@ -137,6 +158,7 @@ Configuration for configuring TLS on various authenticators.
|===
| Field | Description
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-29-apis-concierge-authentication-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|===
@@ -1645,6 +1667,27 @@ Optional, when empty this defaults to "objectGUID". +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-29-apis-supervisor-idp-v1alpha1-cabundlesource"]
==== CABundleSource
CABundleSource provides a source for CA bundle used for client-side TLS verification.
.Appears In:
****
- xref:{anchor_prefix}-go-pinniped-dev-generated-1-29-apis-supervisor-idp-v1alpha1-tlsspec[$$TLSSpec$$]
****
[cols="25a,75a", options="header"]
|===
| Field | Description
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
Secrets must be of type kubernetes.io/tls or Opaque. +
For configmaps, the value associated with the key is not expected to be base64 encoded. +
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-29-apis-supervisor-idp-v1alpha1-githubapiconfig"]
==== GitHubAPIConfig
@@ -2401,6 +2444,7 @@ TLSSpec provides TLS configuration for identity provider integration.
|===
| Field | Description
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-29-apis-supervisor-idp-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|===
generated/1.29/apis/concierge/authentication/v1alpha1/types_tls.go
Generated
+18
View File
@@ -3,9 +3,27 @@
package v1alpha1
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
type CABundleSource struct {
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
// Secrets must be of type kubernetes.io/tls or Opaque.
// For configmaps, the value associated with the key is not expected to be base64 encoded.
// +kubebuilder:validation:Enum=Secret;ConfigMap
Kind string `json:"kind"`
// Name of the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Name string `json:"name"`
// Key within the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Key string `json:"key"`
}
// Configuration for configuring TLS on various authenticators.
type TLSSpec struct {
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
// +optional
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
// Reference to a CA bundle in a secret or a configmap.
// +optional
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
}
generated/1.29/apis/concierge/authentication/v1alpha1/zz_generated.deepcopy.go
Generated
+23 -2
View File
@@ -13,6 +13,22 @@ import (
runtime "k8s.io/apimachinery/pkg/runtime"
)
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
*out = *in
return
}
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
func (in *CABundleSource) DeepCopy() *CABundleSource {
if in == nil {
return nil
}
out := new(CABundleSource)
in.DeepCopyInto(out)
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *JWTAuthenticator) DeepCopyInto(out *JWTAuthenticator) {
*out = *in
@@ -81,7 +97,7 @@ func (in *JWTAuthenticatorSpec) DeepCopyInto(out *JWTAuthenticatorSpec) {
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
@@ -138,6 +154,11 @@ func (in *JWTTokenClaims) DeepCopy() *JWTTokenClaims {
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
*out = *in
if in.CertificateAuthorityDataSource != nil {
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
*out = new(CABundleSource)
**out = **in
}
return
}
@@ -218,7 +239,7 @@ func (in *WebhookAuthenticatorSpec) DeepCopyInto(out *WebhookAuthenticatorSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
generated/1.29/apis/supervisor/idp/v1alpha1/types_tls.go
Generated
+19
View File
@@ -3,9 +3,28 @@
package v1alpha1
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
type CABundleSource struct {
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
// Secrets must be of type kubernetes.io/tls or Opaque.
// For configmaps, the value associated with the key is not expected to be base64 encoded.
// +kubebuilder:validation:Enum=Secret;ConfigMap
Kind string `json:"kind"`
// Name of the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Name string `json:"name"`
// Key within the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Key string `json:"key"`
}
// TLSSpec provides TLS configuration for identity provider integration.
type TLSSpec struct {
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
// +optional
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
// Reference to a CA bundle in a secret or a configmap.
// +optional
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
}
generated/1.29/apis/supervisor/idp/v1alpha1/zz_generated.deepcopy.go
Generated
+25 -4
View File
@@ -129,7 +129,7 @@ func (in *ActiveDirectoryIdentityProviderSpec) DeepCopyInto(out *ActiveDirectory
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
out.Bind = in.Bind
out.UserSearch = in.UserSearch
@@ -203,6 +203,22 @@ func (in *ActiveDirectoryIdentityProviderUserSearchAttributes) DeepCopy() *Activ
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
*out = *in
return
}
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
func (in *CABundleSource) DeepCopy() *CABundleSource {
if in == nil {
return nil
}
out := new(CABundleSource)
in.DeepCopyInto(out)
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *GitHubAPIConfig) DeepCopyInto(out *GitHubAPIConfig) {
*out = *in
@@ -214,7 +230,7 @@ func (in *GitHubAPIConfig) DeepCopyInto(out *GitHubAPIConfig) {
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
@@ -534,7 +550,7 @@ func (in *LDAPIdentityProviderSpec) DeepCopyInto(out *LDAPIdentityProviderSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
out.Bind = in.Bind
out.UserSearch = in.UserSearch
@@ -740,7 +756,7 @@ func (in *OIDCIdentityProviderSpec) DeepCopyInto(out *OIDCIdentityProviderSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
in.AuthorizationConfig.DeepCopyInto(&out.AuthorizationConfig)
in.Claims.DeepCopyInto(&out.Claims)
@@ -800,6 +816,11 @@ func (in *Parameter) DeepCopy() *Parameter {
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
*out = *in
if in.CertificateAuthorityDataSource != nil {
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
*out = new(CABundleSource)
**out = **in
}
return
}
generated/1.29/crds/authentication.concierge.pinniped.dev_jwtauthenticators.yaml
Generated
+27
View File
@@ -92,6 +92,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- audience
generated/1.29/crds/authentication.concierge.pinniped.dev_webhookauthenticators.yaml
Generated
+27
View File
@@ -63,6 +63,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- endpoint
generated/1.29/crds/idp.supervisor.pinniped.dev_activedirectoryidentityproviders.yaml
Generated
+27
View File
@@ -170,6 +170,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
userSearch:
description: UserSearch contains the configuration for searching for
generated/1.29/crds/idp.supervisor.pinniped.dev_githubidentityproviders.yaml
Generated
+27
View File
@@ -225,6 +225,33 @@ spec:
bundle). If omitted, a default set of system roots will
be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
type: object
required:
generated/1.29/crds/idp.supervisor.pinniped.dev_ldapidentityproviders.yaml
Generated
+27
View File
@@ -161,6 +161,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
userSearch:
description: UserSearch contains the configuration for searching for
generated/1.29/crds/idp.supervisor.pinniped.dev_oidcidentityproviders.yaml
Generated
+27
View File
@@ -211,6 +211,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- client
generated/1.30/README.adoc
Generated
+44
View File
@@ -23,6 +23,27 @@ Package v1alpha1 is the v1alpha1 version of the Pinniped concierge authenticatio
[id="{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-concierge-authentication-v1alpha1-cabundlesource"]
==== CABundleSource
CABundleSource provides a source for CA bundle used for client-side TLS verification.
.Appears In:
****
- xref:{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-concierge-authentication-v1alpha1-tlsspec[$$TLSSpec$$]
****
[cols="25a,75a", options="header"]
|===
| Field | Description
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
Secrets must be of type kubernetes.io/tls or Opaque. +
For configmaps, the value associated with the key is not expected to be base64 encoded. +
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-concierge-authentication-v1alpha1-jwtauthenticator"]
==== JWTAuthenticator
@@ -137,6 +158,7 @@ Configuration for configuring TLS on various authenticators.
|===
| Field | Description
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-concierge-authentication-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|===
@@ -1645,6 +1667,27 @@ Optional, when empty this defaults to "objectGUID". +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-supervisor-idp-v1alpha1-cabundlesource"]
==== CABundleSource
CABundleSource provides a source for CA bundle used for client-side TLS verification.
.Appears In:
****
- xref:{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-supervisor-idp-v1alpha1-tlsspec[$$TLSSpec$$]
****
[cols="25a,75a", options="header"]
|===
| Field | Description
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
Secrets must be of type kubernetes.io/tls or Opaque. +
For configmaps, the value associated with the key is not expected to be base64 encoded. +
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-supervisor-idp-v1alpha1-githubapiconfig"]
==== GitHubAPIConfig
@@ -2401,6 +2444,7 @@ TLSSpec provides TLS configuration for identity provider integration.
|===
| Field | Description
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-supervisor-idp-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|===
generated/1.30/apis/concierge/authentication/v1alpha1/types_tls.go
Generated
+18
View File
@@ -3,9 +3,27 @@
package v1alpha1
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
type CABundleSource struct {
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
// Secrets must be of type kubernetes.io/tls or Opaque.
// For configmaps, the value associated with the key is not expected to be base64 encoded.
// +kubebuilder:validation:Enum=Secret;ConfigMap
Kind string `json:"kind"`
// Name of the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Name string `json:"name"`
// Key within the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Key string `json:"key"`
}
// Configuration for configuring TLS on various authenticators.
type TLSSpec struct {
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
// +optional
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
// Reference to a CA bundle in a secret or a configmap.
// +optional
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
}
generated/1.30/apis/concierge/authentication/v1alpha1/zz_generated.deepcopy.go
Generated
+23 -2
View File
@@ -13,6 +13,22 @@ import (
runtime "k8s.io/apimachinery/pkg/runtime"
)
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
*out = *in
return
}
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
func (in *CABundleSource) DeepCopy() *CABundleSource {
if in == nil {
return nil
}
out := new(CABundleSource)
in.DeepCopyInto(out)
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *JWTAuthenticator) DeepCopyInto(out *JWTAuthenticator) {
*out = *in
@@ -81,7 +97,7 @@ func (in *JWTAuthenticatorSpec) DeepCopyInto(out *JWTAuthenticatorSpec) {
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
@@ -138,6 +154,11 @@ func (in *JWTTokenClaims) DeepCopy() *JWTTokenClaims {
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
*out = *in
if in.CertificateAuthorityDataSource != nil {
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
*out = new(CABundleSource)
**out = **in
}
return
}
@@ -218,7 +239,7 @@ func (in *WebhookAuthenticatorSpec) DeepCopyInto(out *WebhookAuthenticatorSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
generated/1.30/apis/supervisor/idp/v1alpha1/types_tls.go
Generated
+19
View File
@@ -3,9 +3,28 @@
package v1alpha1
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
type CABundleSource struct {
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
// Secrets must be of type kubernetes.io/tls or Opaque.
// For configmaps, the value associated with the key is not expected to be base64 encoded.
// +kubebuilder:validation:Enum=Secret;ConfigMap
Kind string `json:"kind"`
// Name of the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Name string `json:"name"`
// Key within the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Key string `json:"key"`
}
// TLSSpec provides TLS configuration for identity provider integration.
type TLSSpec struct {
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
// +optional
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
// Reference to a CA bundle in a secret or a configmap.
// +optional
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
}
generated/1.30/apis/supervisor/idp/v1alpha1/zz_generated.deepcopy.go
Generated
+25 -4
View File
@@ -129,7 +129,7 @@ func (in *ActiveDirectoryIdentityProviderSpec) DeepCopyInto(out *ActiveDirectory
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
out.Bind = in.Bind
out.UserSearch = in.UserSearch
@@ -203,6 +203,22 @@ func (in *ActiveDirectoryIdentityProviderUserSearchAttributes) DeepCopy() *Activ
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
*out = *in
return
}
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
func (in *CABundleSource) DeepCopy() *CABundleSource {
if in == nil {
return nil
}
out := new(CABundleSource)
in.DeepCopyInto(out)
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *GitHubAPIConfig) DeepCopyInto(out *GitHubAPIConfig) {
*out = *in
@@ -214,7 +230,7 @@ func (in *GitHubAPIConfig) DeepCopyInto(out *GitHubAPIConfig) {
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
@@ -534,7 +550,7 @@ func (in *LDAPIdentityProviderSpec) DeepCopyInto(out *LDAPIdentityProviderSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
out.Bind = in.Bind
out.UserSearch = in.UserSearch
@@ -740,7 +756,7 @@ func (in *OIDCIdentityProviderSpec) DeepCopyInto(out *OIDCIdentityProviderSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
in.AuthorizationConfig.DeepCopyInto(&out.AuthorizationConfig)
in.Claims.DeepCopyInto(&out.Claims)
@@ -800,6 +816,11 @@ func (in *Parameter) DeepCopy() *Parameter {
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
*out = *in
if in.CertificateAuthorityDataSource != nil {
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
*out = new(CABundleSource)
**out = **in
}
return
}
generated/1.30/crds/authentication.concierge.pinniped.dev_jwtauthenticators.yaml
Generated
+27
View File
@@ -92,6 +92,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- audience
generated/1.30/crds/authentication.concierge.pinniped.dev_webhookauthenticators.yaml
Generated
+27
View File
@@ -63,6 +63,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- endpoint
generated/1.30/crds/idp.supervisor.pinniped.dev_activedirectoryidentityproviders.yaml
Generated
+27
View File
@@ -170,6 +170,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
userSearch:
description: UserSearch contains the configuration for searching for
generated/1.30/crds/idp.supervisor.pinniped.dev_githubidentityproviders.yaml
Generated
+27
View File
@@ -225,6 +225,33 @@ spec:
bundle). If omitted, a default set of system roots will
be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
type: object
required:
generated/1.30/crds/idp.supervisor.pinniped.dev_ldapidentityproviders.yaml
Generated
+27
View File
@@ -161,6 +161,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
userSearch:
description: UserSearch contains the configuration for searching for
generated/1.30/crds/idp.supervisor.pinniped.dev_oidcidentityproviders.yaml
Generated
+27
View File
@@ -211,6 +211,33 @@ spec:
description: X.509 Certificate Authority (base64-encoded PEM bundle).
If omitted, a default set of system roots will be trusted.
type: string
certificateAuthorityDataSource:
description: Reference to a CA bundle in a secret or a configmap.
properties:
key:
description: Key within the secret or configmap from which
to read the CA bundle.
minLength: 1
type: string
kind:
description: |-
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
Secrets must be of type kubernetes.io/tls or Opaque.
For configmaps, the value associated with the key is not expected to be base64 encoded.
enum:
- Secret
- ConfigMap
type: string
name:
description: Name of the secret or configmap from which to
read the CA bundle.
minLength: 1
type: string
required:
- key
- kind
- name
type: object
type: object
required:
- client
generated/latest/README.adoc
Generated
+44
View File
@@ -23,6 +23,27 @@ Package v1alpha1 is the v1alpha1 version of the Pinniped concierge authenticatio
[id="{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-concierge-authentication-v1alpha1-cabundlesource"]
==== CABundleSource
CABundleSource provides a source for CA bundle used for client-side TLS verification.
.Appears In:
****
- xref:{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-concierge-authentication-v1alpha1-tlsspec[$$TLSSpec$$]
****
[cols="25a,75a", options="header"]
|===
| Field | Description
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
Secrets must be of type kubernetes.io/tls or Opaque. +
For configmaps, the value associated with the key is not expected to be base64 encoded. +
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-concierge-authentication-v1alpha1-jwtauthenticator"]
==== JWTAuthenticator
@@ -137,6 +158,7 @@ Configuration for configuring TLS on various authenticators.
|===
| Field | Description
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-concierge-authentication-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|===
@@ -1645,6 +1667,27 @@ Optional, when empty this defaults to "objectGUID". +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-supervisor-idp-v1alpha1-cabundlesource"]
==== CABundleSource
CABundleSource provides a source for CA bundle used for client-side TLS verification.
.Appears In:
****
- xref:{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-supervisor-idp-v1alpha1-tlsspec[$$TLSSpec$$]
****
[cols="25a,75a", options="header"]
|===
| Field | Description
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
Secrets must be of type kubernetes.io/tls or Opaque. +
For configmaps, the value associated with the key is not expected to be base64 encoded. +
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|===
[id="{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-supervisor-idp-v1alpha1-githubapiconfig"]
==== GitHubAPIConfig
@@ -2401,6 +2444,7 @@ TLSSpec provides TLS configuration for identity provider integration.
|===
| Field | Description
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-supervisor-idp-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|===
generated/latest/apis/concierge/authentication/v1alpha1/types_tls.go
Generated
+18
View File
@@ -3,9 +3,27 @@
package v1alpha1
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
type CABundleSource struct {
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
// Secrets must be of type kubernetes.io/tls or Opaque.
// For configmaps, the value associated with the key is not expected to be base64 encoded.
// +kubebuilder:validation:Enum=Secret;ConfigMap
Kind string `json:"kind"`
// Name of the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Name string `json:"name"`
// Key within the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Key string `json:"key"`
}
// Configuration for configuring TLS on various authenticators.
type TLSSpec struct {
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
// +optional
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
// Reference to a CA bundle in a secret or a configmap.
// +optional
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
}
generated/latest/apis/concierge/authentication/v1alpha1/zz_generated.deepcopy.go
Generated
+23 -2
View File
@@ -13,6 +13,22 @@ import (
runtime "k8s.io/apimachinery/pkg/runtime"
)
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
*out = *in
return
}
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
func (in *CABundleSource) DeepCopy() *CABundleSource {
if in == nil {
return nil
}
out := new(CABundleSource)
in.DeepCopyInto(out)
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *JWTAuthenticator) DeepCopyInto(out *JWTAuthenticator) {
*out = *in
@@ -81,7 +97,7 @@ func (in *JWTAuthenticatorSpec) DeepCopyInto(out *JWTAuthenticatorSpec) {
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
@@ -138,6 +154,11 @@ func (in *JWTTokenClaims) DeepCopy() *JWTTokenClaims {
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
*out = *in
if in.CertificateAuthorityDataSource != nil {
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
*out = new(CABundleSource)
**out = **in
}
return
}
@@ -218,7 +239,7 @@ func (in *WebhookAuthenticatorSpec) DeepCopyInto(out *WebhookAuthenticatorSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
generated/latest/apis/supervisor/idp/v1alpha1/types_tls.go
Generated
+19
View File
@@ -3,9 +3,28 @@
package v1alpha1
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
type CABundleSource struct {
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
// Secrets must be of type kubernetes.io/tls or Opaque.
// For configmaps, the value associated with the key is not expected to be base64 encoded.
// +kubebuilder:validation:Enum=Secret;ConfigMap
Kind string `json:"kind"`
// Name of the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Name string `json:"name"`
// Key within the secret or configmap from which to read the CA bundle.
// +kubebuilder:validation:MinLength=1
Key string `json:"key"`
}
// TLSSpec provides TLS configuration for identity provider integration.
type TLSSpec struct {
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
// +optional
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
// Reference to a CA bundle in a secret or a configmap.
// +optional
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
}
generated/latest/apis/supervisor/idp/v1alpha1/zz_generated.deepcopy.go
Generated
+25 -4
View File
@@ -129,7 +129,7 @@ func (in *ActiveDirectoryIdentityProviderSpec) DeepCopyInto(out *ActiveDirectory
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
out.Bind = in.Bind
out.UserSearch = in.UserSearch
@@ -203,6 +203,22 @@ func (in *ActiveDirectoryIdentityProviderUserSearchAttributes) DeepCopy() *Activ
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
*out = *in
return
}
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
func (in *CABundleSource) DeepCopy() *CABundleSource {
if in == nil {
return nil
}
out := new(CABundleSource)
in.DeepCopyInto(out)
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *GitHubAPIConfig) DeepCopyInto(out *GitHubAPIConfig) {
*out = *in
@@ -214,7 +230,7 @@ func (in *GitHubAPIConfig) DeepCopyInto(out *GitHubAPIConfig) {
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
return
}
@@ -534,7 +550,7 @@ func (in *LDAPIdentityProviderSpec) DeepCopyInto(out *LDAPIdentityProviderSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
out.Bind = in.Bind
out.UserSearch = in.UserSearch
@@ -740,7 +756,7 @@ func (in *OIDCIdentityProviderSpec) DeepCopyInto(out *OIDCIdentityProviderSpec)
if in.TLS != nil {
in, out := &in.TLS, &out.TLS
*out = new(TLSSpec)
**out = **in
(*in).DeepCopyInto(*out)
}
in.AuthorizationConfig.DeepCopyInto(&out.AuthorizationConfig)
in.Claims.DeepCopyInto(&out.Claims)
@@ -800,6 +816,11 @@ func (in *Parameter) DeepCopy() *Parameter {
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
*out = *in
if in.CertificateAuthorityDataSource != nil {
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
*out = new(CABundleSource)
**out = **in
}
return
}