mirror of
https://github.com/vmware-tanzu/pinniped.git
synced 2026-08-18 13:16:27 +00:00
update docs and change struct name in types_tls.go.tmpl files
Co-authored-by: Ashish Amarnath <ashish.amarnath@broadcom.com>
This commit is contained in:
Ryan Richard
co-authored by
Ashish Amarnath
Ashish Amarnath
parent
02e41baa47
commit
e0235ed190
@@ -3,28 +3,30 @@
|
||||
|
||||
package v1alpha1
|
||||
|
||||
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
type CABundleSource struct {
|
||||
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
// CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
type CertificateAuthorityDataSourceSpec struct {
|
||||
// Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
// Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
// For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
// +kubebuilder:validation:Enum=Secret;ConfigMap
|
||||
Kind string `json:"kind"`
|
||||
// Name of the secret or configmap from which to read the CA bundle.
|
||||
// Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
// The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Name string `json:"name"`
|
||||
// Key within the secret or configmap from which to read the CA bundle.
|
||||
// Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
// The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
// certificate bundle.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Key string `json:"key"`
|
||||
}
|
||||
|
||||
// Configuration for configuring TLS on various authenticators.
|
||||
// TLSSpec provides TLS configuration on various authenticators.
|
||||
type TLSSpec struct {
|
||||
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
|
||||
// +optional
|
||||
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
|
||||
// Reference to a CA bundle in a secret or a configmap.
|
||||
// Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
// +optional
|
||||
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
|
||||
CertificateAuthorityDataSource *CertificateAuthorityDataSourceSpec `json:"certificateAuthorityDataSource,omitempty"`
|
||||
}
|
||||
|
||||
@@ -3,19 +3,19 @@
|
||||
|
||||
package v1alpha1
|
||||
|
||||
|
||||
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
type CABundleSource struct {
|
||||
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
// CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
type CertificateAuthorityDataSourceSpec struct {
|
||||
// Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
// Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
// For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
// +kubebuilder:validation:Enum=Secret;ConfigMap
|
||||
Kind string `json:"kind"`
|
||||
// Name of the secret or configmap from which to read the CA bundle.
|
||||
// Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
// The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Name string `json:"name"`
|
||||
// Key within the secret or configmap from which to read the CA bundle.
|
||||
// Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
// The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
// certificate bundle.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Key string `json:"key"`
|
||||
}
|
||||
@@ -26,6 +26,7 @@ type TLSSpec struct {
|
||||
// +optional
|
||||
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
|
||||
// Reference to a CA bundle in a secret or a configmap.
|
||||
// Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
// +optional
|
||||
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
|
||||
CertificateAuthorityDataSource *CertificateAuthorityDataSourceSpec `json:"certificateAuthorityDataSource,omitempty"`
|
||||
}
|
||||
|
||||
@@ -96,25 +96,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
@@ -67,25 +67,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
@@ -171,25 +171,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
@@ -226,25 +226,28 @@ spec:
|
||||
be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
@@ -162,25 +162,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
@@ -212,25 +212,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
Generated
+21
-17
@@ -23,10 +23,10 @@ Package v1alpha1 is the v1alpha1 version of the Pinniped concierge authenticatio
|
||||
|
||||
|
||||
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-24-apis-concierge-authentication-v1alpha1-cabundlesource"]
|
||||
==== CABundleSource
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-24-apis-concierge-authentication-v1alpha1-certificateauthoritydatasourcespec"]
|
||||
==== CertificateAuthorityDataSourceSpec
|
||||
|
||||
CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -36,12 +36,13 @@ CABundleSource provides a source for CA bundle used for client-side TLS verifica
|
||||
[cols="25a,75a", options="header"]
|
||||
|===
|
||||
| Field | Description
|
||||
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
|
||||
| *`kind`* __string__ | Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap. +
|
||||
Secrets must be of type kubernetes.io/tls or Opaque. +
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded. +
|
||||
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
|
||||
| *`name`* __string__ | Name is the resource name of the secret or configmap from which to read the CA bundle. +
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed. +
|
||||
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|
||||
| *`key`* __string__ | Key is the key name within the secret or configmap from which to read the CA bundle. +
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded +
|
||||
certificate bundle. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -147,7 +148,7 @@ username from the JWT token. When not specified, it will default to "username".
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-24-apis-concierge-authentication-v1alpha1-tlsspec"]
|
||||
==== TLSSpec
|
||||
|
||||
Configuration for configuring TLS on various authenticators.
|
||||
TLSSpec provides TLS configuration on various authenticators.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -159,7 +160,8 @@ Configuration for configuring TLS on various authenticators.
|
||||
|===
|
||||
| Field | Description
|
||||
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-24-apis-concierge-authentication-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-24-apis-concierge-authentication-v1alpha1-certificateauthoritydatasourcespec[$$CertificateAuthorityDataSourceSpec$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -1668,10 +1670,10 @@ Optional, when empty this defaults to "objectGUID". +
|
||||
|===
|
||||
|
||||
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-24-apis-supervisor-idp-v1alpha1-cabundlesource"]
|
||||
==== CABundleSource
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-24-apis-supervisor-idp-v1alpha1-certificateauthoritydatasourcespec"]
|
||||
==== CertificateAuthorityDataSourceSpec
|
||||
|
||||
CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -1681,12 +1683,13 @@ CABundleSource provides a source for CA bundle used for client-side TLS verifica
|
||||
[cols="25a,75a", options="header"]
|
||||
|===
|
||||
| Field | Description
|
||||
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
|
||||
| *`kind`* __string__ | Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap. +
|
||||
Secrets must be of type kubernetes.io/tls or Opaque. +
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded. +
|
||||
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
|
||||
| *`name`* __string__ | Name is the resource name of the secret or configmap from which to read the CA bundle. +
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed. +
|
||||
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|
||||
| *`key`* __string__ | Key is the key name within the secret or configmap from which to read the CA bundle. +
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded +
|
||||
certificate bundle. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -2446,7 +2449,8 @@ TLSSpec provides TLS configuration for identity provider integration.
|
||||
|===
|
||||
| Field | Description
|
||||
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-24-apis-supervisor-idp-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-24-apis-supervisor-idp-v1alpha1-certificateauthoritydatasourcespec[$$CertificateAuthorityDataSourceSpec$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded. +
|
||||
|===
|
||||
|
||||
|
||||
|
||||
@@ -3,28 +3,30 @@
|
||||
|
||||
package v1alpha1
|
||||
|
||||
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
type CABundleSource struct {
|
||||
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
// CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
type CertificateAuthorityDataSourceSpec struct {
|
||||
// Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
// Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
// For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
// +kubebuilder:validation:Enum=Secret;ConfigMap
|
||||
Kind string `json:"kind"`
|
||||
// Name of the secret or configmap from which to read the CA bundle.
|
||||
// Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
// The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Name string `json:"name"`
|
||||
// Key within the secret or configmap from which to read the CA bundle.
|
||||
// Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
// The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
// certificate bundle.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Key string `json:"key"`
|
||||
}
|
||||
|
||||
// Configuration for configuring TLS on various authenticators.
|
||||
// TLSSpec provides TLS configuration on various authenticators.
|
||||
type TLSSpec struct {
|
||||
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
|
||||
// +optional
|
||||
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
|
||||
// Reference to a CA bundle in a secret or a configmap.
|
||||
// Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
// +optional
|
||||
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
|
||||
CertificateAuthorityDataSource *CertificateAuthorityDataSourceSpec `json:"certificateAuthorityDataSource,omitempty"`
|
||||
}
|
||||
|
||||
+5
-5
@@ -14,17 +14,17 @@ import (
|
||||
)
|
||||
|
||||
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
|
||||
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopyInto(out *CertificateAuthorityDataSourceSpec) {
|
||||
*out = *in
|
||||
return
|
||||
}
|
||||
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
|
||||
func (in *CABundleSource) DeepCopy() *CABundleSource {
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthorityDataSourceSpec.
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopy() *CertificateAuthorityDataSourceSpec {
|
||||
if in == nil {
|
||||
return nil
|
||||
}
|
||||
out := new(CABundleSource)
|
||||
out := new(CertificateAuthorityDataSourceSpec)
|
||||
in.DeepCopyInto(out)
|
||||
return out
|
||||
}
|
||||
@@ -156,7 +156,7 @@ func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
|
||||
*out = *in
|
||||
if in.CertificateAuthorityDataSource != nil {
|
||||
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
|
||||
*out = new(CABundleSource)
|
||||
*out = new(CertificateAuthorityDataSourceSpec)
|
||||
**out = **in
|
||||
}
|
||||
return
|
||||
|
||||
+9
-8
@@ -3,19 +3,19 @@
|
||||
|
||||
package v1alpha1
|
||||
|
||||
|
||||
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
type CABundleSource struct {
|
||||
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
// CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
type CertificateAuthorityDataSourceSpec struct {
|
||||
// Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
// Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
// For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
// +kubebuilder:validation:Enum=Secret;ConfigMap
|
||||
Kind string `json:"kind"`
|
||||
// Name of the secret or configmap from which to read the CA bundle.
|
||||
// Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
// The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Name string `json:"name"`
|
||||
// Key within the secret or configmap from which to read the CA bundle.
|
||||
// Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
// The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
// certificate bundle.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Key string `json:"key"`
|
||||
}
|
||||
@@ -26,6 +26,7 @@ type TLSSpec struct {
|
||||
// +optional
|
||||
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
|
||||
// Reference to a CA bundle in a secret or a configmap.
|
||||
// Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
// +optional
|
||||
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
|
||||
CertificateAuthorityDataSource *CertificateAuthorityDataSourceSpec `json:"certificateAuthorityDataSource,omitempty"`
|
||||
}
|
||||
|
||||
@@ -204,17 +204,17 @@ func (in *ActiveDirectoryIdentityProviderUserSearchAttributes) DeepCopy() *Activ
|
||||
}
|
||||
|
||||
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
|
||||
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopyInto(out *CertificateAuthorityDataSourceSpec) {
|
||||
*out = *in
|
||||
return
|
||||
}
|
||||
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
|
||||
func (in *CABundleSource) DeepCopy() *CABundleSource {
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthorityDataSourceSpec.
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopy() *CertificateAuthorityDataSourceSpec {
|
||||
if in == nil {
|
||||
return nil
|
||||
}
|
||||
out := new(CABundleSource)
|
||||
out := new(CertificateAuthorityDataSourceSpec)
|
||||
in.DeepCopyInto(out)
|
||||
return out
|
||||
}
|
||||
@@ -818,7 +818,7 @@ func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
|
||||
*out = *in
|
||||
if in.CertificateAuthorityDataSource != nil {
|
||||
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
|
||||
*out = new(CABundleSource)
|
||||
*out = new(CertificateAuthorityDataSourceSpec)
|
||||
**out = **in
|
||||
}
|
||||
return
|
||||
|
||||
+9
-6
@@ -96,25 +96,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -67,25 +67,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -171,25 +171,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -226,25 +226,28 @@ spec:
|
||||
be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -162,25 +162,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -212,25 +212,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
Generated
+21
-17
@@ -23,10 +23,10 @@ Package v1alpha1 is the v1alpha1 version of the Pinniped concierge authenticatio
|
||||
|
||||
|
||||
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-25-apis-concierge-authentication-v1alpha1-cabundlesource"]
|
||||
==== CABundleSource
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-25-apis-concierge-authentication-v1alpha1-certificateauthoritydatasourcespec"]
|
||||
==== CertificateAuthorityDataSourceSpec
|
||||
|
||||
CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -36,12 +36,13 @@ CABundleSource provides a source for CA bundle used for client-side TLS verifica
|
||||
[cols="25a,75a", options="header"]
|
||||
|===
|
||||
| Field | Description
|
||||
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
|
||||
| *`kind`* __string__ | Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap. +
|
||||
Secrets must be of type kubernetes.io/tls or Opaque. +
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded. +
|
||||
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
|
||||
| *`name`* __string__ | Name is the resource name of the secret or configmap from which to read the CA bundle. +
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed. +
|
||||
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|
||||
| *`key`* __string__ | Key is the key name within the secret or configmap from which to read the CA bundle. +
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded +
|
||||
certificate bundle. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -147,7 +148,7 @@ username from the JWT token. When not specified, it will default to "username".
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-25-apis-concierge-authentication-v1alpha1-tlsspec"]
|
||||
==== TLSSpec
|
||||
|
||||
Configuration for configuring TLS on various authenticators.
|
||||
TLSSpec provides TLS configuration on various authenticators.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -159,7 +160,8 @@ Configuration for configuring TLS on various authenticators.
|
||||
|===
|
||||
| Field | Description
|
||||
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-25-apis-concierge-authentication-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-25-apis-concierge-authentication-v1alpha1-certificateauthoritydatasourcespec[$$CertificateAuthorityDataSourceSpec$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -1668,10 +1670,10 @@ Optional, when empty this defaults to "objectGUID". +
|
||||
|===
|
||||
|
||||
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-25-apis-supervisor-idp-v1alpha1-cabundlesource"]
|
||||
==== CABundleSource
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-25-apis-supervisor-idp-v1alpha1-certificateauthoritydatasourcespec"]
|
||||
==== CertificateAuthorityDataSourceSpec
|
||||
|
||||
CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -1681,12 +1683,13 @@ CABundleSource provides a source for CA bundle used for client-side TLS verifica
|
||||
[cols="25a,75a", options="header"]
|
||||
|===
|
||||
| Field | Description
|
||||
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
|
||||
| *`kind`* __string__ | Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap. +
|
||||
Secrets must be of type kubernetes.io/tls or Opaque. +
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded. +
|
||||
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
|
||||
| *`name`* __string__ | Name is the resource name of the secret or configmap from which to read the CA bundle. +
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed. +
|
||||
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|
||||
| *`key`* __string__ | Key is the key name within the secret or configmap from which to read the CA bundle. +
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded +
|
||||
certificate bundle. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -2446,7 +2449,8 @@ TLSSpec provides TLS configuration for identity provider integration.
|
||||
|===
|
||||
| Field | Description
|
||||
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-25-apis-supervisor-idp-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-25-apis-supervisor-idp-v1alpha1-certificateauthoritydatasourcespec[$$CertificateAuthorityDataSourceSpec$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded. +
|
||||
|===
|
||||
|
||||
|
||||
|
||||
@@ -3,28 +3,30 @@
|
||||
|
||||
package v1alpha1
|
||||
|
||||
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
type CABundleSource struct {
|
||||
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
// CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
type CertificateAuthorityDataSourceSpec struct {
|
||||
// Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
// Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
// For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
// +kubebuilder:validation:Enum=Secret;ConfigMap
|
||||
Kind string `json:"kind"`
|
||||
// Name of the secret or configmap from which to read the CA bundle.
|
||||
// Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
// The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Name string `json:"name"`
|
||||
// Key within the secret or configmap from which to read the CA bundle.
|
||||
// Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
// The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
// certificate bundle.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Key string `json:"key"`
|
||||
}
|
||||
|
||||
// Configuration for configuring TLS on various authenticators.
|
||||
// TLSSpec provides TLS configuration on various authenticators.
|
||||
type TLSSpec struct {
|
||||
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
|
||||
// +optional
|
||||
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
|
||||
// Reference to a CA bundle in a secret or a configmap.
|
||||
// Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
// +optional
|
||||
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
|
||||
CertificateAuthorityDataSource *CertificateAuthorityDataSourceSpec `json:"certificateAuthorityDataSource,omitempty"`
|
||||
}
|
||||
|
||||
+5
-5
@@ -14,17 +14,17 @@ import (
|
||||
)
|
||||
|
||||
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
|
||||
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopyInto(out *CertificateAuthorityDataSourceSpec) {
|
||||
*out = *in
|
||||
return
|
||||
}
|
||||
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
|
||||
func (in *CABundleSource) DeepCopy() *CABundleSource {
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthorityDataSourceSpec.
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopy() *CertificateAuthorityDataSourceSpec {
|
||||
if in == nil {
|
||||
return nil
|
||||
}
|
||||
out := new(CABundleSource)
|
||||
out := new(CertificateAuthorityDataSourceSpec)
|
||||
in.DeepCopyInto(out)
|
||||
return out
|
||||
}
|
||||
@@ -156,7 +156,7 @@ func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
|
||||
*out = *in
|
||||
if in.CertificateAuthorityDataSource != nil {
|
||||
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
|
||||
*out = new(CABundleSource)
|
||||
*out = new(CertificateAuthorityDataSourceSpec)
|
||||
**out = **in
|
||||
}
|
||||
return
|
||||
|
||||
+9
-8
@@ -3,19 +3,19 @@
|
||||
|
||||
package v1alpha1
|
||||
|
||||
|
||||
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
type CABundleSource struct {
|
||||
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
// CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
type CertificateAuthorityDataSourceSpec struct {
|
||||
// Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
// Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
// For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
// +kubebuilder:validation:Enum=Secret;ConfigMap
|
||||
Kind string `json:"kind"`
|
||||
// Name of the secret or configmap from which to read the CA bundle.
|
||||
// Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
// The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Name string `json:"name"`
|
||||
// Key within the secret or configmap from which to read the CA bundle.
|
||||
// Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
// The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
// certificate bundle.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Key string `json:"key"`
|
||||
}
|
||||
@@ -26,6 +26,7 @@ type TLSSpec struct {
|
||||
// +optional
|
||||
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
|
||||
// Reference to a CA bundle in a secret or a configmap.
|
||||
// Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
// +optional
|
||||
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
|
||||
CertificateAuthorityDataSource *CertificateAuthorityDataSourceSpec `json:"certificateAuthorityDataSource,omitempty"`
|
||||
}
|
||||
|
||||
@@ -204,17 +204,17 @@ func (in *ActiveDirectoryIdentityProviderUserSearchAttributes) DeepCopy() *Activ
|
||||
}
|
||||
|
||||
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
|
||||
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopyInto(out *CertificateAuthorityDataSourceSpec) {
|
||||
*out = *in
|
||||
return
|
||||
}
|
||||
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
|
||||
func (in *CABundleSource) DeepCopy() *CABundleSource {
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthorityDataSourceSpec.
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopy() *CertificateAuthorityDataSourceSpec {
|
||||
if in == nil {
|
||||
return nil
|
||||
}
|
||||
out := new(CABundleSource)
|
||||
out := new(CertificateAuthorityDataSourceSpec)
|
||||
in.DeepCopyInto(out)
|
||||
return out
|
||||
}
|
||||
@@ -818,7 +818,7 @@ func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
|
||||
*out = *in
|
||||
if in.CertificateAuthorityDataSource != nil {
|
||||
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
|
||||
*out = new(CABundleSource)
|
||||
*out = new(CertificateAuthorityDataSourceSpec)
|
||||
**out = **in
|
||||
}
|
||||
return
|
||||
|
||||
+9
-6
@@ -96,25 +96,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -67,25 +67,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -171,25 +171,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -226,25 +226,28 @@ spec:
|
||||
be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -162,25 +162,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -212,25 +212,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
Generated
+21
-17
@@ -23,10 +23,10 @@ Package v1alpha1 is the v1alpha1 version of the Pinniped concierge authenticatio
|
||||
|
||||
|
||||
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-26-apis-concierge-authentication-v1alpha1-cabundlesource"]
|
||||
==== CABundleSource
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-26-apis-concierge-authentication-v1alpha1-certificateauthoritydatasourcespec"]
|
||||
==== CertificateAuthorityDataSourceSpec
|
||||
|
||||
CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -36,12 +36,13 @@ CABundleSource provides a source for CA bundle used for client-side TLS verifica
|
||||
[cols="25a,75a", options="header"]
|
||||
|===
|
||||
| Field | Description
|
||||
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
|
||||
| *`kind`* __string__ | Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap. +
|
||||
Secrets must be of type kubernetes.io/tls or Opaque. +
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded. +
|
||||
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
|
||||
| *`name`* __string__ | Name is the resource name of the secret or configmap from which to read the CA bundle. +
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed. +
|
||||
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|
||||
| *`key`* __string__ | Key is the key name within the secret or configmap from which to read the CA bundle. +
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded +
|
||||
certificate bundle. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -147,7 +148,7 @@ username from the JWT token. When not specified, it will default to "username".
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-26-apis-concierge-authentication-v1alpha1-tlsspec"]
|
||||
==== TLSSpec
|
||||
|
||||
Configuration for configuring TLS on various authenticators.
|
||||
TLSSpec provides TLS configuration on various authenticators.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -159,7 +160,8 @@ Configuration for configuring TLS on various authenticators.
|
||||
|===
|
||||
| Field | Description
|
||||
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-26-apis-concierge-authentication-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-26-apis-concierge-authentication-v1alpha1-certificateauthoritydatasourcespec[$$CertificateAuthorityDataSourceSpec$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -1668,10 +1670,10 @@ Optional, when empty this defaults to "objectGUID". +
|
||||
|===
|
||||
|
||||
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-26-apis-supervisor-idp-v1alpha1-cabundlesource"]
|
||||
==== CABundleSource
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-26-apis-supervisor-idp-v1alpha1-certificateauthoritydatasourcespec"]
|
||||
==== CertificateAuthorityDataSourceSpec
|
||||
|
||||
CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -1681,12 +1683,13 @@ CABundleSource provides a source for CA bundle used for client-side TLS verifica
|
||||
[cols="25a,75a", options="header"]
|
||||
|===
|
||||
| Field | Description
|
||||
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
|
||||
| *`kind`* __string__ | Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap. +
|
||||
Secrets must be of type kubernetes.io/tls or Opaque. +
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded. +
|
||||
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
|
||||
| *`name`* __string__ | Name is the resource name of the secret or configmap from which to read the CA bundle. +
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed. +
|
||||
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|
||||
| *`key`* __string__ | Key is the key name within the secret or configmap from which to read the CA bundle. +
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded +
|
||||
certificate bundle. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -2446,7 +2449,8 @@ TLSSpec provides TLS configuration for identity provider integration.
|
||||
|===
|
||||
| Field | Description
|
||||
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-26-apis-supervisor-idp-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-26-apis-supervisor-idp-v1alpha1-certificateauthoritydatasourcespec[$$CertificateAuthorityDataSourceSpec$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded. +
|
||||
|===
|
||||
|
||||
|
||||
|
||||
@@ -3,28 +3,30 @@
|
||||
|
||||
package v1alpha1
|
||||
|
||||
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
type CABundleSource struct {
|
||||
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
// CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
type CertificateAuthorityDataSourceSpec struct {
|
||||
// Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
// Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
// For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
// +kubebuilder:validation:Enum=Secret;ConfigMap
|
||||
Kind string `json:"kind"`
|
||||
// Name of the secret or configmap from which to read the CA bundle.
|
||||
// Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
// The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Name string `json:"name"`
|
||||
// Key within the secret or configmap from which to read the CA bundle.
|
||||
// Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
// The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
// certificate bundle.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Key string `json:"key"`
|
||||
}
|
||||
|
||||
// Configuration for configuring TLS on various authenticators.
|
||||
// TLSSpec provides TLS configuration on various authenticators.
|
||||
type TLSSpec struct {
|
||||
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
|
||||
// +optional
|
||||
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
|
||||
// Reference to a CA bundle in a secret or a configmap.
|
||||
// Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
// +optional
|
||||
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
|
||||
CertificateAuthorityDataSource *CertificateAuthorityDataSourceSpec `json:"certificateAuthorityDataSource,omitempty"`
|
||||
}
|
||||
|
||||
+5
-5
@@ -14,17 +14,17 @@ import (
|
||||
)
|
||||
|
||||
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
|
||||
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopyInto(out *CertificateAuthorityDataSourceSpec) {
|
||||
*out = *in
|
||||
return
|
||||
}
|
||||
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
|
||||
func (in *CABundleSource) DeepCopy() *CABundleSource {
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthorityDataSourceSpec.
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopy() *CertificateAuthorityDataSourceSpec {
|
||||
if in == nil {
|
||||
return nil
|
||||
}
|
||||
out := new(CABundleSource)
|
||||
out := new(CertificateAuthorityDataSourceSpec)
|
||||
in.DeepCopyInto(out)
|
||||
return out
|
||||
}
|
||||
@@ -156,7 +156,7 @@ func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
|
||||
*out = *in
|
||||
if in.CertificateAuthorityDataSource != nil {
|
||||
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
|
||||
*out = new(CABundleSource)
|
||||
*out = new(CertificateAuthorityDataSourceSpec)
|
||||
**out = **in
|
||||
}
|
||||
return
|
||||
|
||||
+9
-8
@@ -3,19 +3,19 @@
|
||||
|
||||
package v1alpha1
|
||||
|
||||
|
||||
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
type CABundleSource struct {
|
||||
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
// CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
type CertificateAuthorityDataSourceSpec struct {
|
||||
// Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
// Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
// For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
// +kubebuilder:validation:Enum=Secret;ConfigMap
|
||||
Kind string `json:"kind"`
|
||||
// Name of the secret or configmap from which to read the CA bundle.
|
||||
// Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
// The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Name string `json:"name"`
|
||||
// Key within the secret or configmap from which to read the CA bundle.
|
||||
// Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
// The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
// certificate bundle.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Key string `json:"key"`
|
||||
}
|
||||
@@ -26,6 +26,7 @@ type TLSSpec struct {
|
||||
// +optional
|
||||
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
|
||||
// Reference to a CA bundle in a secret or a configmap.
|
||||
// Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
// +optional
|
||||
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
|
||||
CertificateAuthorityDataSource *CertificateAuthorityDataSourceSpec `json:"certificateAuthorityDataSource,omitempty"`
|
||||
}
|
||||
|
||||
@@ -204,17 +204,17 @@ func (in *ActiveDirectoryIdentityProviderUserSearchAttributes) DeepCopy() *Activ
|
||||
}
|
||||
|
||||
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
|
||||
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopyInto(out *CertificateAuthorityDataSourceSpec) {
|
||||
*out = *in
|
||||
return
|
||||
}
|
||||
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
|
||||
func (in *CABundleSource) DeepCopy() *CABundleSource {
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthorityDataSourceSpec.
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopy() *CertificateAuthorityDataSourceSpec {
|
||||
if in == nil {
|
||||
return nil
|
||||
}
|
||||
out := new(CABundleSource)
|
||||
out := new(CertificateAuthorityDataSourceSpec)
|
||||
in.DeepCopyInto(out)
|
||||
return out
|
||||
}
|
||||
@@ -818,7 +818,7 @@ func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
|
||||
*out = *in
|
||||
if in.CertificateAuthorityDataSource != nil {
|
||||
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
|
||||
*out = new(CABundleSource)
|
||||
*out = new(CertificateAuthorityDataSourceSpec)
|
||||
**out = **in
|
||||
}
|
||||
return
|
||||
|
||||
+9
-6
@@ -96,25 +96,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -67,25 +67,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -171,25 +171,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -226,25 +226,28 @@ spec:
|
||||
be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -162,25 +162,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -212,25 +212,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
Generated
+21
-17
@@ -23,10 +23,10 @@ Package v1alpha1 is the v1alpha1 version of the Pinniped concierge authenticatio
|
||||
|
||||
|
||||
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-27-apis-concierge-authentication-v1alpha1-cabundlesource"]
|
||||
==== CABundleSource
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-27-apis-concierge-authentication-v1alpha1-certificateauthoritydatasourcespec"]
|
||||
==== CertificateAuthorityDataSourceSpec
|
||||
|
||||
CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -36,12 +36,13 @@ CABundleSource provides a source for CA bundle used for client-side TLS verifica
|
||||
[cols="25a,75a", options="header"]
|
||||
|===
|
||||
| Field | Description
|
||||
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
|
||||
| *`kind`* __string__ | Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap. +
|
||||
Secrets must be of type kubernetes.io/tls or Opaque. +
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded. +
|
||||
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
|
||||
| *`name`* __string__ | Name is the resource name of the secret or configmap from which to read the CA bundle. +
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed. +
|
||||
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|
||||
| *`key`* __string__ | Key is the key name within the secret or configmap from which to read the CA bundle. +
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded +
|
||||
certificate bundle. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -147,7 +148,7 @@ username from the JWT token. When not specified, it will default to "username".
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-27-apis-concierge-authentication-v1alpha1-tlsspec"]
|
||||
==== TLSSpec
|
||||
|
||||
Configuration for configuring TLS on various authenticators.
|
||||
TLSSpec provides TLS configuration on various authenticators.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -159,7 +160,8 @@ Configuration for configuring TLS on various authenticators.
|
||||
|===
|
||||
| Field | Description
|
||||
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-27-apis-concierge-authentication-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-27-apis-concierge-authentication-v1alpha1-certificateauthoritydatasourcespec[$$CertificateAuthorityDataSourceSpec$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -1668,10 +1670,10 @@ Optional, when empty this defaults to "objectGUID". +
|
||||
|===
|
||||
|
||||
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-27-apis-supervisor-idp-v1alpha1-cabundlesource"]
|
||||
==== CABundleSource
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-27-apis-supervisor-idp-v1alpha1-certificateauthoritydatasourcespec"]
|
||||
==== CertificateAuthorityDataSourceSpec
|
||||
|
||||
CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -1681,12 +1683,13 @@ CABundleSource provides a source for CA bundle used for client-side TLS verifica
|
||||
[cols="25a,75a", options="header"]
|
||||
|===
|
||||
| Field | Description
|
||||
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
|
||||
| *`kind`* __string__ | Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap. +
|
||||
Secrets must be of type kubernetes.io/tls or Opaque. +
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded. +
|
||||
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
|
||||
| *`name`* __string__ | Name is the resource name of the secret or configmap from which to read the CA bundle. +
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed. +
|
||||
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|
||||
| *`key`* __string__ | Key is the key name within the secret or configmap from which to read the CA bundle. +
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded +
|
||||
certificate bundle. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -2446,7 +2449,8 @@ TLSSpec provides TLS configuration for identity provider integration.
|
||||
|===
|
||||
| Field | Description
|
||||
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-27-apis-supervisor-idp-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-27-apis-supervisor-idp-v1alpha1-certificateauthoritydatasourcespec[$$CertificateAuthorityDataSourceSpec$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded. +
|
||||
|===
|
||||
|
||||
|
||||
|
||||
@@ -3,28 +3,30 @@
|
||||
|
||||
package v1alpha1
|
||||
|
||||
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
type CABundleSource struct {
|
||||
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
// CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
type CertificateAuthorityDataSourceSpec struct {
|
||||
// Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
// Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
// For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
// +kubebuilder:validation:Enum=Secret;ConfigMap
|
||||
Kind string `json:"kind"`
|
||||
// Name of the secret or configmap from which to read the CA bundle.
|
||||
// Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
// The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Name string `json:"name"`
|
||||
// Key within the secret or configmap from which to read the CA bundle.
|
||||
// Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
// The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
// certificate bundle.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Key string `json:"key"`
|
||||
}
|
||||
|
||||
// Configuration for configuring TLS on various authenticators.
|
||||
// TLSSpec provides TLS configuration on various authenticators.
|
||||
type TLSSpec struct {
|
||||
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
|
||||
// +optional
|
||||
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
|
||||
// Reference to a CA bundle in a secret or a configmap.
|
||||
// Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
// +optional
|
||||
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
|
||||
CertificateAuthorityDataSource *CertificateAuthorityDataSourceSpec `json:"certificateAuthorityDataSource,omitempty"`
|
||||
}
|
||||
|
||||
+5
-5
@@ -14,17 +14,17 @@ import (
|
||||
)
|
||||
|
||||
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
|
||||
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopyInto(out *CertificateAuthorityDataSourceSpec) {
|
||||
*out = *in
|
||||
return
|
||||
}
|
||||
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
|
||||
func (in *CABundleSource) DeepCopy() *CABundleSource {
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthorityDataSourceSpec.
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopy() *CertificateAuthorityDataSourceSpec {
|
||||
if in == nil {
|
||||
return nil
|
||||
}
|
||||
out := new(CABundleSource)
|
||||
out := new(CertificateAuthorityDataSourceSpec)
|
||||
in.DeepCopyInto(out)
|
||||
return out
|
||||
}
|
||||
@@ -156,7 +156,7 @@ func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
|
||||
*out = *in
|
||||
if in.CertificateAuthorityDataSource != nil {
|
||||
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
|
||||
*out = new(CABundleSource)
|
||||
*out = new(CertificateAuthorityDataSourceSpec)
|
||||
**out = **in
|
||||
}
|
||||
return
|
||||
|
||||
+9
-8
@@ -3,19 +3,19 @@
|
||||
|
||||
package v1alpha1
|
||||
|
||||
|
||||
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
type CABundleSource struct {
|
||||
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
// CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
type CertificateAuthorityDataSourceSpec struct {
|
||||
// Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
// Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
// For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
// +kubebuilder:validation:Enum=Secret;ConfigMap
|
||||
Kind string `json:"kind"`
|
||||
// Name of the secret or configmap from which to read the CA bundle.
|
||||
// Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
// The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Name string `json:"name"`
|
||||
// Key within the secret or configmap from which to read the CA bundle.
|
||||
// Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
// The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
// certificate bundle.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Key string `json:"key"`
|
||||
}
|
||||
@@ -26,6 +26,7 @@ type TLSSpec struct {
|
||||
// +optional
|
||||
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
|
||||
// Reference to a CA bundle in a secret or a configmap.
|
||||
// Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
// +optional
|
||||
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
|
||||
CertificateAuthorityDataSource *CertificateAuthorityDataSourceSpec `json:"certificateAuthorityDataSource,omitempty"`
|
||||
}
|
||||
|
||||
@@ -204,17 +204,17 @@ func (in *ActiveDirectoryIdentityProviderUserSearchAttributes) DeepCopy() *Activ
|
||||
}
|
||||
|
||||
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
|
||||
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopyInto(out *CertificateAuthorityDataSourceSpec) {
|
||||
*out = *in
|
||||
return
|
||||
}
|
||||
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
|
||||
func (in *CABundleSource) DeepCopy() *CABundleSource {
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthorityDataSourceSpec.
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopy() *CertificateAuthorityDataSourceSpec {
|
||||
if in == nil {
|
||||
return nil
|
||||
}
|
||||
out := new(CABundleSource)
|
||||
out := new(CertificateAuthorityDataSourceSpec)
|
||||
in.DeepCopyInto(out)
|
||||
return out
|
||||
}
|
||||
@@ -818,7 +818,7 @@ func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
|
||||
*out = *in
|
||||
if in.CertificateAuthorityDataSource != nil {
|
||||
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
|
||||
*out = new(CABundleSource)
|
||||
*out = new(CertificateAuthorityDataSourceSpec)
|
||||
**out = **in
|
||||
}
|
||||
return
|
||||
|
||||
+9
-6
@@ -96,25 +96,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -67,25 +67,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -171,25 +171,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -226,25 +226,28 @@ spec:
|
||||
be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -162,25 +162,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -212,25 +212,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
Generated
+21
-17
@@ -23,10 +23,10 @@ Package v1alpha1 is the v1alpha1 version of the Pinniped concierge authenticatio
|
||||
|
||||
|
||||
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-28-apis-concierge-authentication-v1alpha1-cabundlesource"]
|
||||
==== CABundleSource
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-28-apis-concierge-authentication-v1alpha1-certificateauthoritydatasourcespec"]
|
||||
==== CertificateAuthorityDataSourceSpec
|
||||
|
||||
CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -36,12 +36,13 @@ CABundleSource provides a source for CA bundle used for client-side TLS verifica
|
||||
[cols="25a,75a", options="header"]
|
||||
|===
|
||||
| Field | Description
|
||||
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
|
||||
| *`kind`* __string__ | Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap. +
|
||||
Secrets must be of type kubernetes.io/tls or Opaque. +
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded. +
|
||||
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
|
||||
| *`name`* __string__ | Name is the resource name of the secret or configmap from which to read the CA bundle. +
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed. +
|
||||
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|
||||
| *`key`* __string__ | Key is the key name within the secret or configmap from which to read the CA bundle. +
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded +
|
||||
certificate bundle. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -147,7 +148,7 @@ username from the JWT token. When not specified, it will default to "username".
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-28-apis-concierge-authentication-v1alpha1-tlsspec"]
|
||||
==== TLSSpec
|
||||
|
||||
Configuration for configuring TLS on various authenticators.
|
||||
TLSSpec provides TLS configuration on various authenticators.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -159,7 +160,8 @@ Configuration for configuring TLS on various authenticators.
|
||||
|===
|
||||
| Field | Description
|
||||
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-28-apis-concierge-authentication-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-28-apis-concierge-authentication-v1alpha1-certificateauthoritydatasourcespec[$$CertificateAuthorityDataSourceSpec$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -1668,10 +1670,10 @@ Optional, when empty this defaults to "objectGUID". +
|
||||
|===
|
||||
|
||||
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-28-apis-supervisor-idp-v1alpha1-cabundlesource"]
|
||||
==== CABundleSource
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-28-apis-supervisor-idp-v1alpha1-certificateauthoritydatasourcespec"]
|
||||
==== CertificateAuthorityDataSourceSpec
|
||||
|
||||
CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -1681,12 +1683,13 @@ CABundleSource provides a source for CA bundle used for client-side TLS verifica
|
||||
[cols="25a,75a", options="header"]
|
||||
|===
|
||||
| Field | Description
|
||||
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
|
||||
| *`kind`* __string__ | Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap. +
|
||||
Secrets must be of type kubernetes.io/tls or Opaque. +
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded. +
|
||||
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
|
||||
| *`name`* __string__ | Name is the resource name of the secret or configmap from which to read the CA bundle. +
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed. +
|
||||
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|
||||
| *`key`* __string__ | Key is the key name within the secret or configmap from which to read the CA bundle. +
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded +
|
||||
certificate bundle. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -2446,7 +2449,8 @@ TLSSpec provides TLS configuration for identity provider integration.
|
||||
|===
|
||||
| Field | Description
|
||||
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-28-apis-supervisor-idp-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-28-apis-supervisor-idp-v1alpha1-certificateauthoritydatasourcespec[$$CertificateAuthorityDataSourceSpec$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded. +
|
||||
|===
|
||||
|
||||
|
||||
|
||||
@@ -3,28 +3,30 @@
|
||||
|
||||
package v1alpha1
|
||||
|
||||
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
type CABundleSource struct {
|
||||
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
// CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
type CertificateAuthorityDataSourceSpec struct {
|
||||
// Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
// Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
// For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
// +kubebuilder:validation:Enum=Secret;ConfigMap
|
||||
Kind string `json:"kind"`
|
||||
// Name of the secret or configmap from which to read the CA bundle.
|
||||
// Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
// The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Name string `json:"name"`
|
||||
// Key within the secret or configmap from which to read the CA bundle.
|
||||
// Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
// The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
// certificate bundle.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Key string `json:"key"`
|
||||
}
|
||||
|
||||
// Configuration for configuring TLS on various authenticators.
|
||||
// TLSSpec provides TLS configuration on various authenticators.
|
||||
type TLSSpec struct {
|
||||
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
|
||||
// +optional
|
||||
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
|
||||
// Reference to a CA bundle in a secret or a configmap.
|
||||
// Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
// +optional
|
||||
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
|
||||
CertificateAuthorityDataSource *CertificateAuthorityDataSourceSpec `json:"certificateAuthorityDataSource,omitempty"`
|
||||
}
|
||||
|
||||
+5
-5
@@ -14,17 +14,17 @@ import (
|
||||
)
|
||||
|
||||
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
|
||||
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopyInto(out *CertificateAuthorityDataSourceSpec) {
|
||||
*out = *in
|
||||
return
|
||||
}
|
||||
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
|
||||
func (in *CABundleSource) DeepCopy() *CABundleSource {
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthorityDataSourceSpec.
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopy() *CertificateAuthorityDataSourceSpec {
|
||||
if in == nil {
|
||||
return nil
|
||||
}
|
||||
out := new(CABundleSource)
|
||||
out := new(CertificateAuthorityDataSourceSpec)
|
||||
in.DeepCopyInto(out)
|
||||
return out
|
||||
}
|
||||
@@ -156,7 +156,7 @@ func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
|
||||
*out = *in
|
||||
if in.CertificateAuthorityDataSource != nil {
|
||||
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
|
||||
*out = new(CABundleSource)
|
||||
*out = new(CertificateAuthorityDataSourceSpec)
|
||||
**out = **in
|
||||
}
|
||||
return
|
||||
|
||||
+9
-8
@@ -3,19 +3,19 @@
|
||||
|
||||
package v1alpha1
|
||||
|
||||
|
||||
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
type CABundleSource struct {
|
||||
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
// CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
type CertificateAuthorityDataSourceSpec struct {
|
||||
// Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
// Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
// For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
// +kubebuilder:validation:Enum=Secret;ConfigMap
|
||||
Kind string `json:"kind"`
|
||||
// Name of the secret or configmap from which to read the CA bundle.
|
||||
// Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
// The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Name string `json:"name"`
|
||||
// Key within the secret or configmap from which to read the CA bundle.
|
||||
// Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
// The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
// certificate bundle.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Key string `json:"key"`
|
||||
}
|
||||
@@ -26,6 +26,7 @@ type TLSSpec struct {
|
||||
// +optional
|
||||
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
|
||||
// Reference to a CA bundle in a secret or a configmap.
|
||||
// Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
// +optional
|
||||
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
|
||||
CertificateAuthorityDataSource *CertificateAuthorityDataSourceSpec `json:"certificateAuthorityDataSource,omitempty"`
|
||||
}
|
||||
|
||||
@@ -204,17 +204,17 @@ func (in *ActiveDirectoryIdentityProviderUserSearchAttributes) DeepCopy() *Activ
|
||||
}
|
||||
|
||||
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
|
||||
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopyInto(out *CertificateAuthorityDataSourceSpec) {
|
||||
*out = *in
|
||||
return
|
||||
}
|
||||
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
|
||||
func (in *CABundleSource) DeepCopy() *CABundleSource {
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthorityDataSourceSpec.
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopy() *CertificateAuthorityDataSourceSpec {
|
||||
if in == nil {
|
||||
return nil
|
||||
}
|
||||
out := new(CABundleSource)
|
||||
out := new(CertificateAuthorityDataSourceSpec)
|
||||
in.DeepCopyInto(out)
|
||||
return out
|
||||
}
|
||||
@@ -818,7 +818,7 @@ func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
|
||||
*out = *in
|
||||
if in.CertificateAuthorityDataSource != nil {
|
||||
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
|
||||
*out = new(CABundleSource)
|
||||
*out = new(CertificateAuthorityDataSourceSpec)
|
||||
**out = **in
|
||||
}
|
||||
return
|
||||
|
||||
+9
-6
@@ -96,25 +96,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -67,25 +67,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -171,25 +171,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -226,25 +226,28 @@ spec:
|
||||
be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -162,25 +162,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -212,25 +212,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
Generated
+21
-17
@@ -23,10 +23,10 @@ Package v1alpha1 is the v1alpha1 version of the Pinniped concierge authenticatio
|
||||
|
||||
|
||||
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-29-apis-concierge-authentication-v1alpha1-cabundlesource"]
|
||||
==== CABundleSource
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-29-apis-concierge-authentication-v1alpha1-certificateauthoritydatasourcespec"]
|
||||
==== CertificateAuthorityDataSourceSpec
|
||||
|
||||
CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -36,12 +36,13 @@ CABundleSource provides a source for CA bundle used for client-side TLS verifica
|
||||
[cols="25a,75a", options="header"]
|
||||
|===
|
||||
| Field | Description
|
||||
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
|
||||
| *`kind`* __string__ | Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap. +
|
||||
Secrets must be of type kubernetes.io/tls or Opaque. +
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded. +
|
||||
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
|
||||
| *`name`* __string__ | Name is the resource name of the secret or configmap from which to read the CA bundle. +
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed. +
|
||||
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|
||||
| *`key`* __string__ | Key is the key name within the secret or configmap from which to read the CA bundle. +
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded +
|
||||
certificate bundle. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -147,7 +148,7 @@ username from the JWT token. When not specified, it will default to "username".
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-29-apis-concierge-authentication-v1alpha1-tlsspec"]
|
||||
==== TLSSpec
|
||||
|
||||
Configuration for configuring TLS on various authenticators.
|
||||
TLSSpec provides TLS configuration on various authenticators.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -159,7 +160,8 @@ Configuration for configuring TLS on various authenticators.
|
||||
|===
|
||||
| Field | Description
|
||||
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-29-apis-concierge-authentication-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-29-apis-concierge-authentication-v1alpha1-certificateauthoritydatasourcespec[$$CertificateAuthorityDataSourceSpec$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -1668,10 +1670,10 @@ Optional, when empty this defaults to "objectGUID". +
|
||||
|===
|
||||
|
||||
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-29-apis-supervisor-idp-v1alpha1-cabundlesource"]
|
||||
==== CABundleSource
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-29-apis-supervisor-idp-v1alpha1-certificateauthoritydatasourcespec"]
|
||||
==== CertificateAuthorityDataSourceSpec
|
||||
|
||||
CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -1681,12 +1683,13 @@ CABundleSource provides a source for CA bundle used for client-side TLS verifica
|
||||
[cols="25a,75a", options="header"]
|
||||
|===
|
||||
| Field | Description
|
||||
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
|
||||
| *`kind`* __string__ | Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap. +
|
||||
Secrets must be of type kubernetes.io/tls or Opaque. +
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded. +
|
||||
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
|
||||
| *`name`* __string__ | Name is the resource name of the secret or configmap from which to read the CA bundle. +
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed. +
|
||||
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|
||||
| *`key`* __string__ | Key is the key name within the secret or configmap from which to read the CA bundle. +
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded +
|
||||
certificate bundle. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -2446,7 +2449,8 @@ TLSSpec provides TLS configuration for identity provider integration.
|
||||
|===
|
||||
| Field | Description
|
||||
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-29-apis-supervisor-idp-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-29-apis-supervisor-idp-v1alpha1-certificateauthoritydatasourcespec[$$CertificateAuthorityDataSourceSpec$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded. +
|
||||
|===
|
||||
|
||||
|
||||
|
||||
@@ -3,28 +3,30 @@
|
||||
|
||||
package v1alpha1
|
||||
|
||||
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
type CABundleSource struct {
|
||||
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
// CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
type CertificateAuthorityDataSourceSpec struct {
|
||||
// Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
// Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
// For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
// +kubebuilder:validation:Enum=Secret;ConfigMap
|
||||
Kind string `json:"kind"`
|
||||
// Name of the secret or configmap from which to read the CA bundle.
|
||||
// Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
// The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Name string `json:"name"`
|
||||
// Key within the secret or configmap from which to read the CA bundle.
|
||||
// Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
// The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
// certificate bundle.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Key string `json:"key"`
|
||||
}
|
||||
|
||||
// Configuration for configuring TLS on various authenticators.
|
||||
// TLSSpec provides TLS configuration on various authenticators.
|
||||
type TLSSpec struct {
|
||||
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
|
||||
// +optional
|
||||
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
|
||||
// Reference to a CA bundle in a secret or a configmap.
|
||||
// Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
// +optional
|
||||
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
|
||||
CertificateAuthorityDataSource *CertificateAuthorityDataSourceSpec `json:"certificateAuthorityDataSource,omitempty"`
|
||||
}
|
||||
|
||||
+5
-5
@@ -14,17 +14,17 @@ import (
|
||||
)
|
||||
|
||||
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
|
||||
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopyInto(out *CertificateAuthorityDataSourceSpec) {
|
||||
*out = *in
|
||||
return
|
||||
}
|
||||
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
|
||||
func (in *CABundleSource) DeepCopy() *CABundleSource {
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthorityDataSourceSpec.
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopy() *CertificateAuthorityDataSourceSpec {
|
||||
if in == nil {
|
||||
return nil
|
||||
}
|
||||
out := new(CABundleSource)
|
||||
out := new(CertificateAuthorityDataSourceSpec)
|
||||
in.DeepCopyInto(out)
|
||||
return out
|
||||
}
|
||||
@@ -156,7 +156,7 @@ func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
|
||||
*out = *in
|
||||
if in.CertificateAuthorityDataSource != nil {
|
||||
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
|
||||
*out = new(CABundleSource)
|
||||
*out = new(CertificateAuthorityDataSourceSpec)
|
||||
**out = **in
|
||||
}
|
||||
return
|
||||
|
||||
+9
-8
@@ -3,19 +3,19 @@
|
||||
|
||||
package v1alpha1
|
||||
|
||||
|
||||
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
type CABundleSource struct {
|
||||
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
// CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
type CertificateAuthorityDataSourceSpec struct {
|
||||
// Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
// Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
// For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
// +kubebuilder:validation:Enum=Secret;ConfigMap
|
||||
Kind string `json:"kind"`
|
||||
// Name of the secret or configmap from which to read the CA bundle.
|
||||
// Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
// The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Name string `json:"name"`
|
||||
// Key within the secret or configmap from which to read the CA bundle.
|
||||
// Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
// The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
// certificate bundle.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Key string `json:"key"`
|
||||
}
|
||||
@@ -26,6 +26,7 @@ type TLSSpec struct {
|
||||
// +optional
|
||||
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
|
||||
// Reference to a CA bundle in a secret or a configmap.
|
||||
// Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
// +optional
|
||||
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
|
||||
CertificateAuthorityDataSource *CertificateAuthorityDataSourceSpec `json:"certificateAuthorityDataSource,omitempty"`
|
||||
}
|
||||
|
||||
@@ -204,17 +204,17 @@ func (in *ActiveDirectoryIdentityProviderUserSearchAttributes) DeepCopy() *Activ
|
||||
}
|
||||
|
||||
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
|
||||
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopyInto(out *CertificateAuthorityDataSourceSpec) {
|
||||
*out = *in
|
||||
return
|
||||
}
|
||||
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
|
||||
func (in *CABundleSource) DeepCopy() *CABundleSource {
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthorityDataSourceSpec.
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopy() *CertificateAuthorityDataSourceSpec {
|
||||
if in == nil {
|
||||
return nil
|
||||
}
|
||||
out := new(CABundleSource)
|
||||
out := new(CertificateAuthorityDataSourceSpec)
|
||||
in.DeepCopyInto(out)
|
||||
return out
|
||||
}
|
||||
@@ -818,7 +818,7 @@ func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
|
||||
*out = *in
|
||||
if in.CertificateAuthorityDataSource != nil {
|
||||
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
|
||||
*out = new(CABundleSource)
|
||||
*out = new(CertificateAuthorityDataSourceSpec)
|
||||
**out = **in
|
||||
}
|
||||
return
|
||||
|
||||
+9
-6
@@ -96,25 +96,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -67,25 +67,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -171,25 +171,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -226,25 +226,28 @@ spec:
|
||||
be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -162,25 +162,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -212,25 +212,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
Generated
+21
-17
@@ -23,10 +23,10 @@ Package v1alpha1 is the v1alpha1 version of the Pinniped concierge authenticatio
|
||||
|
||||
|
||||
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-concierge-authentication-v1alpha1-cabundlesource"]
|
||||
==== CABundleSource
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-concierge-authentication-v1alpha1-certificateauthoritydatasourcespec"]
|
||||
==== CertificateAuthorityDataSourceSpec
|
||||
|
||||
CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -36,12 +36,13 @@ CABundleSource provides a source for CA bundle used for client-side TLS verifica
|
||||
[cols="25a,75a", options="header"]
|
||||
|===
|
||||
| Field | Description
|
||||
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
|
||||
| *`kind`* __string__ | Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap. +
|
||||
Secrets must be of type kubernetes.io/tls or Opaque. +
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded. +
|
||||
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
|
||||
| *`name`* __string__ | Name is the resource name of the secret or configmap from which to read the CA bundle. +
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed. +
|
||||
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|
||||
| *`key`* __string__ | Key is the key name within the secret or configmap from which to read the CA bundle. +
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded +
|
||||
certificate bundle. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -147,7 +148,7 @@ username from the JWT token. When not specified, it will default to "username".
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-concierge-authentication-v1alpha1-tlsspec"]
|
||||
==== TLSSpec
|
||||
|
||||
Configuration for configuring TLS on various authenticators.
|
||||
TLSSpec provides TLS configuration on various authenticators.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -159,7 +160,8 @@ Configuration for configuring TLS on various authenticators.
|
||||
|===
|
||||
| Field | Description
|
||||
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-concierge-authentication-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-concierge-authentication-v1alpha1-certificateauthoritydatasourcespec[$$CertificateAuthorityDataSourceSpec$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -1668,10 +1670,10 @@ Optional, when empty this defaults to "objectGUID". +
|
||||
|===
|
||||
|
||||
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-supervisor-idp-v1alpha1-cabundlesource"]
|
||||
==== CABundleSource
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-supervisor-idp-v1alpha1-certificateauthoritydatasourcespec"]
|
||||
==== CertificateAuthorityDataSourceSpec
|
||||
|
||||
CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -1681,12 +1683,13 @@ CABundleSource provides a source for CA bundle used for client-side TLS verifica
|
||||
[cols="25a,75a", options="header"]
|
||||
|===
|
||||
| Field | Description
|
||||
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
|
||||
| *`kind`* __string__ | Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap. +
|
||||
Secrets must be of type kubernetes.io/tls or Opaque. +
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded. +
|
||||
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
|
||||
| *`name`* __string__ | Name is the resource name of the secret or configmap from which to read the CA bundle. +
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed. +
|
||||
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|
||||
| *`key`* __string__ | Key is the key name within the secret or configmap from which to read the CA bundle. +
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded +
|
||||
certificate bundle. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -2446,7 +2449,8 @@ TLSSpec provides TLS configuration for identity provider integration.
|
||||
|===
|
||||
| Field | Description
|
||||
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-supervisor-idp-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-supervisor-idp-v1alpha1-certificateauthoritydatasourcespec[$$CertificateAuthorityDataSourceSpec$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded. +
|
||||
|===
|
||||
|
||||
|
||||
|
||||
@@ -3,28 +3,30 @@
|
||||
|
||||
package v1alpha1
|
||||
|
||||
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
type CABundleSource struct {
|
||||
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
// CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
type CertificateAuthorityDataSourceSpec struct {
|
||||
// Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
// Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
// For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
// +kubebuilder:validation:Enum=Secret;ConfigMap
|
||||
Kind string `json:"kind"`
|
||||
// Name of the secret or configmap from which to read the CA bundle.
|
||||
// Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
// The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Name string `json:"name"`
|
||||
// Key within the secret or configmap from which to read the CA bundle.
|
||||
// Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
// The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
// certificate bundle.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Key string `json:"key"`
|
||||
}
|
||||
|
||||
// Configuration for configuring TLS on various authenticators.
|
||||
// TLSSpec provides TLS configuration on various authenticators.
|
||||
type TLSSpec struct {
|
||||
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
|
||||
// +optional
|
||||
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
|
||||
// Reference to a CA bundle in a secret or a configmap.
|
||||
// Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
// +optional
|
||||
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
|
||||
CertificateAuthorityDataSource *CertificateAuthorityDataSourceSpec `json:"certificateAuthorityDataSource,omitempty"`
|
||||
}
|
||||
|
||||
+5
-5
@@ -14,17 +14,17 @@ import (
|
||||
)
|
||||
|
||||
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
|
||||
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopyInto(out *CertificateAuthorityDataSourceSpec) {
|
||||
*out = *in
|
||||
return
|
||||
}
|
||||
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
|
||||
func (in *CABundleSource) DeepCopy() *CABundleSource {
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthorityDataSourceSpec.
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopy() *CertificateAuthorityDataSourceSpec {
|
||||
if in == nil {
|
||||
return nil
|
||||
}
|
||||
out := new(CABundleSource)
|
||||
out := new(CertificateAuthorityDataSourceSpec)
|
||||
in.DeepCopyInto(out)
|
||||
return out
|
||||
}
|
||||
@@ -156,7 +156,7 @@ func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
|
||||
*out = *in
|
||||
if in.CertificateAuthorityDataSource != nil {
|
||||
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
|
||||
*out = new(CABundleSource)
|
||||
*out = new(CertificateAuthorityDataSourceSpec)
|
||||
**out = **in
|
||||
}
|
||||
return
|
||||
|
||||
+9
-8
@@ -3,19 +3,19 @@
|
||||
|
||||
package v1alpha1
|
||||
|
||||
|
||||
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
type CABundleSource struct {
|
||||
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
// CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
type CertificateAuthorityDataSourceSpec struct {
|
||||
// Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
// Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
// For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
// +kubebuilder:validation:Enum=Secret;ConfigMap
|
||||
Kind string `json:"kind"`
|
||||
// Name of the secret or configmap from which to read the CA bundle.
|
||||
// Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
// The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Name string `json:"name"`
|
||||
// Key within the secret or configmap from which to read the CA bundle.
|
||||
// Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
// The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
// certificate bundle.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Key string `json:"key"`
|
||||
}
|
||||
@@ -26,6 +26,7 @@ type TLSSpec struct {
|
||||
// +optional
|
||||
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
|
||||
// Reference to a CA bundle in a secret or a configmap.
|
||||
// Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
// +optional
|
||||
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
|
||||
CertificateAuthorityDataSource *CertificateAuthorityDataSourceSpec `json:"certificateAuthorityDataSource,omitempty"`
|
||||
}
|
||||
|
||||
@@ -204,17 +204,17 @@ func (in *ActiveDirectoryIdentityProviderUserSearchAttributes) DeepCopy() *Activ
|
||||
}
|
||||
|
||||
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
|
||||
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopyInto(out *CertificateAuthorityDataSourceSpec) {
|
||||
*out = *in
|
||||
return
|
||||
}
|
||||
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
|
||||
func (in *CABundleSource) DeepCopy() *CABundleSource {
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthorityDataSourceSpec.
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopy() *CertificateAuthorityDataSourceSpec {
|
||||
if in == nil {
|
||||
return nil
|
||||
}
|
||||
out := new(CABundleSource)
|
||||
out := new(CertificateAuthorityDataSourceSpec)
|
||||
in.DeepCopyInto(out)
|
||||
return out
|
||||
}
|
||||
@@ -818,7 +818,7 @@ func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
|
||||
*out = *in
|
||||
if in.CertificateAuthorityDataSource != nil {
|
||||
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
|
||||
*out = new(CABundleSource)
|
||||
*out = new(CertificateAuthorityDataSourceSpec)
|
||||
**out = **in
|
||||
}
|
||||
return
|
||||
|
||||
+9
-6
@@ -96,25 +96,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -67,25 +67,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -171,25 +171,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -226,25 +226,28 @@ spec:
|
||||
be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -162,25 +162,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
+9
-6
@@ -212,25 +212,28 @@ spec:
|
||||
If omitted, a default set of system roots will be trusted.
|
||||
type: string
|
||||
certificateAuthorityDataSource:
|
||||
description: Reference to a CA bundle in a secret or a configmap.
|
||||
description: |-
|
||||
Reference to a CA bundle in a secret or a configmap.
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
properties:
|
||||
key:
|
||||
description: Key within the secret or configmap from which
|
||||
to read the CA bundle.
|
||||
description: |-
|
||||
Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
certificate bundle.
|
||||
minLength: 1
|
||||
type: string
|
||||
kind:
|
||||
description: |-
|
||||
Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
enum:
|
||||
- Secret
|
||||
- ConfigMap
|
||||
type: string
|
||||
name:
|
||||
description: |-
|
||||
Name of the secret or configmap from which to read the CA bundle.
|
||||
Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
minLength: 1
|
||||
type: string
|
||||
|
||||
Generated
+21
-17
@@ -23,10 +23,10 @@ Package v1alpha1 is the v1alpha1 version of the Pinniped concierge authenticatio
|
||||
|
||||
|
||||
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-concierge-authentication-v1alpha1-cabundlesource"]
|
||||
==== CABundleSource
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-concierge-authentication-v1alpha1-certificateauthoritydatasourcespec"]
|
||||
==== CertificateAuthorityDataSourceSpec
|
||||
|
||||
CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -36,12 +36,13 @@ CABundleSource provides a source for CA bundle used for client-side TLS verifica
|
||||
[cols="25a,75a", options="header"]
|
||||
|===
|
||||
| Field | Description
|
||||
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
|
||||
| *`kind`* __string__ | Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap. +
|
||||
Secrets must be of type kubernetes.io/tls or Opaque. +
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded. +
|
||||
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
|
||||
| *`name`* __string__ | Name is the resource name of the secret or configmap from which to read the CA bundle. +
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed. +
|
||||
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|
||||
| *`key`* __string__ | Key is the key name within the secret or configmap from which to read the CA bundle. +
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded +
|
||||
certificate bundle. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -147,7 +148,7 @@ username from the JWT token. When not specified, it will default to "username".
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-concierge-authentication-v1alpha1-tlsspec"]
|
||||
==== TLSSpec
|
||||
|
||||
Configuration for configuring TLS on various authenticators.
|
||||
TLSSpec provides TLS configuration on various authenticators.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -159,7 +160,8 @@ Configuration for configuring TLS on various authenticators.
|
||||
|===
|
||||
| Field | Description
|
||||
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-concierge-authentication-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-concierge-authentication-v1alpha1-certificateauthoritydatasourcespec[$$CertificateAuthorityDataSourceSpec$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -1668,10 +1670,10 @@ Optional, when empty this defaults to "objectGUID". +
|
||||
|===
|
||||
|
||||
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-supervisor-idp-v1alpha1-cabundlesource"]
|
||||
==== CABundleSource
|
||||
[id="{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-supervisor-idp-v1alpha1-certificateauthoritydatasourcespec"]
|
||||
==== CertificateAuthorityDataSourceSpec
|
||||
|
||||
CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
|
||||
.Appears In:
|
||||
****
|
||||
@@ -1681,12 +1683,13 @@ CABundleSource provides a source for CA bundle used for client-side TLS verifica
|
||||
[cols="25a,75a", options="header"]
|
||||
|===
|
||||
| Field | Description
|
||||
| *`kind`* __string__ | Whether the CA bundle is being sourced from a kubernetes secret or a configmap. +
|
||||
| *`kind`* __string__ | Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap. +
|
||||
Secrets must be of type kubernetes.io/tls or Opaque. +
|
||||
For configmaps, the value associated with the key is not expected to be base64 encoded. +
|
||||
| *`name`* __string__ | Name of the secret or configmap from which to read the CA bundle. +
|
||||
| *`name`* __string__ | Name is the resource name of the secret or configmap from which to read the CA bundle. +
|
||||
The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed. +
|
||||
| *`key`* __string__ | Key within the secret or configmap from which to read the CA bundle. +
|
||||
| *`key`* __string__ | Key is the key name within the secret or configmap from which to read the CA bundle. +
|
||||
The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded +
|
||||
certificate bundle. +
|
||||
|===
|
||||
|
||||
|
||||
@@ -2446,7 +2449,8 @@ TLSSpec provides TLS configuration for identity provider integration.
|
||||
|===
|
||||
| Field | Description
|
||||
| *`certificateAuthorityData`* __string__ | X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-supervisor-idp-v1alpha1-cabundlesource[$$CABundleSource$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
| *`certificateAuthorityDataSource`* __xref:{anchor_prefix}-go-pinniped-dev-generated-1-30-apis-supervisor-idp-v1alpha1-certificateauthoritydatasourcespec[$$CertificateAuthorityDataSourceSpec$$]__ | Reference to a CA bundle in a secret or a configmap. +
|
||||
Any changes to the CA bundle in the secret or configmap will be dynamically reloaded. +
|
||||
|===
|
||||
|
||||
|
||||
|
||||
@@ -3,28 +3,30 @@
|
||||
|
||||
package v1alpha1
|
||||
|
||||
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
type CABundleSource struct {
|
||||
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
// CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
type CertificateAuthorityDataSourceSpec struct {
|
||||
// Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
// Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
// For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
// +kubebuilder:validation:Enum=Secret;ConfigMap
|
||||
Kind string `json:"kind"`
|
||||
// Name of the secret or configmap from which to read the CA bundle.
|
||||
// Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
// The referenced secret or configmap must be created in the same namespace where Pinniped Concierge is installed.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Name string `json:"name"`
|
||||
// Key within the secret or configmap from which to read the CA bundle.
|
||||
// Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
// The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
// certificate bundle.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Key string `json:"key"`
|
||||
}
|
||||
|
||||
// Configuration for configuring TLS on various authenticators.
|
||||
// TLSSpec provides TLS configuration on various authenticators.
|
||||
type TLSSpec struct {
|
||||
// X.509 Certificate Authority (base64-encoded PEM bundle). If omitted, a default set of system roots will be trusted.
|
||||
// +optional
|
||||
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
|
||||
// Reference to a CA bundle in a secret or a configmap.
|
||||
// Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
// +optional
|
||||
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
|
||||
CertificateAuthorityDataSource *CertificateAuthorityDataSourceSpec `json:"certificateAuthorityDataSource,omitempty"`
|
||||
}
|
||||
|
||||
+5
-5
@@ -14,17 +14,17 @@ import (
|
||||
)
|
||||
|
||||
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
|
||||
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopyInto(out *CertificateAuthorityDataSourceSpec) {
|
||||
*out = *in
|
||||
return
|
||||
}
|
||||
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
|
||||
func (in *CABundleSource) DeepCopy() *CABundleSource {
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthorityDataSourceSpec.
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopy() *CertificateAuthorityDataSourceSpec {
|
||||
if in == nil {
|
||||
return nil
|
||||
}
|
||||
out := new(CABundleSource)
|
||||
out := new(CertificateAuthorityDataSourceSpec)
|
||||
in.DeepCopyInto(out)
|
||||
return out
|
||||
}
|
||||
@@ -156,7 +156,7 @@ func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
|
||||
*out = *in
|
||||
if in.CertificateAuthorityDataSource != nil {
|
||||
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
|
||||
*out = new(CABundleSource)
|
||||
*out = new(CertificateAuthorityDataSourceSpec)
|
||||
**out = **in
|
||||
}
|
||||
return
|
||||
|
||||
+9
-8
@@ -3,19 +3,19 @@
|
||||
|
||||
package v1alpha1
|
||||
|
||||
|
||||
// CABundleSource provides a source for CA bundle used for client-side TLS verification.
|
||||
type CABundleSource struct {
|
||||
// Whether the CA bundle is being sourced from a kubernetes secret or a configmap.
|
||||
// CertificateAuthorityDataSourceSpec provides a source for CA bundle used for client-side TLS verification.
|
||||
type CertificateAuthorityDataSourceSpec struct {
|
||||
// Kind configures whether the CA bundle is being sourced from a Kubernetes secret or a configmap.
|
||||
// Secrets must be of type kubernetes.io/tls or Opaque.
|
||||
// For configmaps, the value associated with the key is not expected to be base64 encoded.
|
||||
// +kubebuilder:validation:Enum=Secret;ConfigMap
|
||||
Kind string `json:"kind"`
|
||||
// Name of the secret or configmap from which to read the CA bundle.
|
||||
// Name is the resource name of the secret or configmap from which to read the CA bundle.
|
||||
// The referenced secret or configmap must be created in the same namespace where Pinniped Supervisor is installed.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Name string `json:"name"`
|
||||
// Key within the secret or configmap from which to read the CA bundle.
|
||||
// Key is the key name within the secret or configmap from which to read the CA bundle.
|
||||
// The value found at this key in the secret or configmap must not be empty, and must be a valid PEM-encoded
|
||||
// certificate bundle.
|
||||
// +kubebuilder:validation:MinLength=1
|
||||
Key string `json:"key"`
|
||||
}
|
||||
@@ -26,6 +26,7 @@ type TLSSpec struct {
|
||||
// +optional
|
||||
CertificateAuthorityData string `json:"certificateAuthorityData,omitempty"`
|
||||
// Reference to a CA bundle in a secret or a configmap.
|
||||
// Any changes to the CA bundle in the secret or configmap will be dynamically reloaded.
|
||||
// +optional
|
||||
CertificateAuthorityDataSource *CABundleSource `json:"certificateAuthorityDataSource,omitempty"`
|
||||
CertificateAuthorityDataSource *CertificateAuthorityDataSourceSpec `json:"certificateAuthorityDataSource,omitempty"`
|
||||
}
|
||||
|
||||
@@ -204,17 +204,17 @@ func (in *ActiveDirectoryIdentityProviderUserSearchAttributes) DeepCopy() *Activ
|
||||
}
|
||||
|
||||
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
|
||||
func (in *CABundleSource) DeepCopyInto(out *CABundleSource) {
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopyInto(out *CertificateAuthorityDataSourceSpec) {
|
||||
*out = *in
|
||||
return
|
||||
}
|
||||
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CABundleSource.
|
||||
func (in *CABundleSource) DeepCopy() *CABundleSource {
|
||||
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateAuthorityDataSourceSpec.
|
||||
func (in *CertificateAuthorityDataSourceSpec) DeepCopy() *CertificateAuthorityDataSourceSpec {
|
||||
if in == nil {
|
||||
return nil
|
||||
}
|
||||
out := new(CABundleSource)
|
||||
out := new(CertificateAuthorityDataSourceSpec)
|
||||
in.DeepCopyInto(out)
|
||||
return out
|
||||
}
|
||||
@@ -818,7 +818,7 @@ func (in *TLSSpec) DeepCopyInto(out *TLSSpec) {
|
||||
*out = *in
|
||||
if in.CertificateAuthorityDataSource != nil {
|
||||
in, out := &in.CertificateAuthorityDataSource, &out.CertificateAuthorityDataSource
|
||||
*out = new(CABundleSource)
|
||||
*out = new(CertificateAuthorityDataSourceSpec)
|
||||
**out = **in
|
||||
}
|
||||
return
|
||||
|
||||
@@ -309,7 +309,7 @@ func TestController(t *testing.T) {
|
||||
Issuer: goodIssuer,
|
||||
Audience: goodAudience,
|
||||
TLS: &authenticationv1alpha1.TLSSpec{
|
||||
CertificateAuthorityDataSource: &authenticationv1alpha1.CABundleSource{
|
||||
CertificateAuthorityDataSource: &authenticationv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: "Secret",
|
||||
Name: "secret-with-ca",
|
||||
Key: "ca.crt",
|
||||
@@ -330,7 +330,7 @@ func TestController(t *testing.T) {
|
||||
Issuer: goodIssuer,
|
||||
Audience: goodAudience,
|
||||
TLS: &authenticationv1alpha1.TLSSpec{
|
||||
CertificateAuthorityDataSource: &authenticationv1alpha1.CABundleSource{
|
||||
CertificateAuthorityDataSource: &authenticationv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: "ConfigMap",
|
||||
Name: "configmap-with-ca",
|
||||
Key: "ca.crt",
|
||||
|
||||
@@ -155,7 +155,7 @@ func TestController(t *testing.T) {
|
||||
goodWebhookAuthenticatorSpecWithCAFromSecret := authenticationv1alpha1.WebhookAuthenticatorSpec{
|
||||
Endpoint: goodWebhookDefaultServingCertEndpoint,
|
||||
TLS: &authenticationv1alpha1.TLSSpec{
|
||||
CertificateAuthorityDataSource: &authenticationv1alpha1.CABundleSource{
|
||||
CertificateAuthorityDataSource: &authenticationv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: "Secret",
|
||||
Name: "secret-with-ca",
|
||||
Key: "ca.crt",
|
||||
@@ -175,7 +175,7 @@ func TestController(t *testing.T) {
|
||||
goodWebhookAuthenticatorSpecWithCAFromConfigMap := authenticationv1alpha1.WebhookAuthenticatorSpec{
|
||||
Endpoint: goodWebhookDefaultServingCertEndpoint,
|
||||
TLS: &authenticationv1alpha1.TLSSpec{
|
||||
CertificateAuthorityDataSource: &authenticationv1alpha1.CABundleSource{
|
||||
CertificateAuthorityDataSource: &authenticationv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: "ConfigMap",
|
||||
Name: "configmap-with-ca",
|
||||
Key: "ca.crt",
|
||||
|
||||
+3
-3
@@ -275,7 +275,7 @@ func TestActiveDirectoryUpstreamWatcherControllerSync(t *testing.T) {
|
||||
|
||||
validUpstreamWithConfigMapCABundleSource := validUpstream.DeepCopy()
|
||||
validUpstreamWithConfigMapCABundleSource.Spec.TLS.CertificateAuthorityData = ""
|
||||
validUpstreamWithConfigMapCABundleSource.Spec.TLS.CertificateAuthorityDataSource = &idpv1alpha1.CABundleSource{
|
||||
validUpstreamWithConfigMapCABundleSource.Spec.TLS.CertificateAuthorityDataSource = &idpv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: "ConfigMap",
|
||||
Name: caBundleConfigMapName,
|
||||
Key: "ca.crt",
|
||||
@@ -289,7 +289,7 @@ func TestActiveDirectoryUpstreamWatcherControllerSync(t *testing.T) {
|
||||
|
||||
validUpstreamWithOpaqueSecretCABundleSource := validUpstream.DeepCopy()
|
||||
validUpstreamWithOpaqueSecretCABundleSource.Spec.TLS.CertificateAuthorityData = ""
|
||||
validUpstreamWithOpaqueSecretCABundleSource.Spec.TLS.CertificateAuthorityDataSource = &idpv1alpha1.CABundleSource{
|
||||
validUpstreamWithOpaqueSecretCABundleSource.Spec.TLS.CertificateAuthorityDataSource = &idpv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: "Secret",
|
||||
Name: caBundleSecretName,
|
||||
Key: "ca.crt",
|
||||
@@ -304,7 +304,7 @@ func TestActiveDirectoryUpstreamWatcherControllerSync(t *testing.T) {
|
||||
|
||||
validUpstreamWithTLSSecretCABundleSource := validUpstream.DeepCopy()
|
||||
validUpstreamWithTLSSecretCABundleSource.Spec.TLS.CertificateAuthorityData = ""
|
||||
validUpstreamWithTLSSecretCABundleSource.Spec.TLS.CertificateAuthorityDataSource = &idpv1alpha1.CABundleSource{
|
||||
validUpstreamWithTLSSecretCABundleSource.Spec.TLS.CertificateAuthorityDataSource = &idpv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: "Secret",
|
||||
Name: caBundleSecretName,
|
||||
Key: "ca.crt",
|
||||
|
||||
+4
-4
@@ -894,7 +894,7 @@ func TestController(t *testing.T) {
|
||||
otherIDP := validFilledOutIDP.DeepCopy()
|
||||
otherIDP.Name = "idp-with-tls-in-secret"
|
||||
otherIDP.Spec.GitHubAPI.TLS = &idpv1alpha1.TLSSpec{
|
||||
CertificateAuthorityDataSource: &idpv1alpha1.CABundleSource{
|
||||
CertificateAuthorityDataSource: &idpv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: "Secret",
|
||||
Name: goodCABundleSecret.Name,
|
||||
Key: "ca.crt",
|
||||
@@ -906,7 +906,7 @@ func TestController(t *testing.T) {
|
||||
otherIDP := validFilledOutIDP.DeepCopy()
|
||||
otherIDP.Name = "idp-with-tls-in-config-map"
|
||||
otherIDP.Spec.GitHubAPI.TLS = &idpv1alpha1.TLSSpec{
|
||||
CertificateAuthorityDataSource: &idpv1alpha1.CABundleSource{
|
||||
CertificateAuthorityDataSource: &idpv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: "ConfigMap",
|
||||
Name: goodCABundleConfigMap.Name,
|
||||
Key: "ca.crt",
|
||||
@@ -975,7 +975,7 @@ func TestController(t *testing.T) {
|
||||
Spec: func() idpv1alpha1.GitHubIdentityProviderSpec {
|
||||
otherSpec := validFilledOutIDP.Spec.DeepCopy()
|
||||
otherSpec.GitHubAPI.TLS = &idpv1alpha1.TLSSpec{
|
||||
CertificateAuthorityDataSource: &idpv1alpha1.CABundleSource{
|
||||
CertificateAuthorityDataSource: &idpv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: "ConfigMap",
|
||||
Name: goodCABundleSecret.Name,
|
||||
Key: "ca.crt",
|
||||
@@ -1004,7 +1004,7 @@ func TestController(t *testing.T) {
|
||||
Spec: func() idpv1alpha1.GitHubIdentityProviderSpec {
|
||||
otherSpec := validFilledOutIDP.Spec.DeepCopy()
|
||||
otherSpec.GitHubAPI.TLS = &idpv1alpha1.TLSSpec{
|
||||
CertificateAuthorityDataSource: &idpv1alpha1.CABundleSource{
|
||||
CertificateAuthorityDataSource: &idpv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: "Secret",
|
||||
Name: goodCABundleSecret.Name,
|
||||
Key: "ca.crt",
|
||||
|
||||
+3
-3
@@ -284,7 +284,7 @@ func TestLDAPUpstreamWatcherControllerSync(t *testing.T) {
|
||||
|
||||
validUpstreamWithConfigMapCABundleSource := validUpstream.DeepCopy()
|
||||
validUpstreamWithConfigMapCABundleSource.Spec.TLS.CertificateAuthorityData = ""
|
||||
validUpstreamWithConfigMapCABundleSource.Spec.TLS.CertificateAuthorityDataSource = &idpv1alpha1.CABundleSource{
|
||||
validUpstreamWithConfigMapCABundleSource.Spec.TLS.CertificateAuthorityDataSource = &idpv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: "ConfigMap",
|
||||
Name: caBundleConfigMapName,
|
||||
Key: "ca.crt",
|
||||
@@ -298,7 +298,7 @@ func TestLDAPUpstreamWatcherControllerSync(t *testing.T) {
|
||||
|
||||
validUpstreamWithOpaqueSecretCABundleSource := validUpstream.DeepCopy()
|
||||
validUpstreamWithOpaqueSecretCABundleSource.Spec.TLS.CertificateAuthorityData = ""
|
||||
validUpstreamWithOpaqueSecretCABundleSource.Spec.TLS.CertificateAuthorityDataSource = &idpv1alpha1.CABundleSource{
|
||||
validUpstreamWithOpaqueSecretCABundleSource.Spec.TLS.CertificateAuthorityDataSource = &idpv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: "Secret",
|
||||
Name: caBundleSecretName,
|
||||
Key: "ca.crt",
|
||||
@@ -313,7 +313,7 @@ func TestLDAPUpstreamWatcherControllerSync(t *testing.T) {
|
||||
|
||||
validUpstreamWithTLSSecretCABundleSource := validUpstream.DeepCopy()
|
||||
validUpstreamWithTLSSecretCABundleSource.Spec.TLS.CertificateAuthorityData = ""
|
||||
validUpstreamWithTLSSecretCABundleSource.Spec.TLS.CertificateAuthorityDataSource = &idpv1alpha1.CABundleSource{
|
||||
validUpstreamWithTLSSecretCABundleSource.Spec.TLS.CertificateAuthorityDataSource = &idpv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: "Secret",
|
||||
Name: caBundleSecretName,
|
||||
Key: "ca.crt",
|
||||
|
||||
+2
-2
@@ -1162,7 +1162,7 @@ func TestOIDCUpstreamWatcherControllerSync(t *testing.T) {
|
||||
Spec: idpv1alpha1.OIDCIdentityProviderSpec{
|
||||
Issuer: testIssuerURL,
|
||||
TLS: &idpv1alpha1.TLSSpec{
|
||||
CertificateAuthorityDataSource: &idpv1alpha1.CABundleSource{
|
||||
CertificateAuthorityDataSource: &idpv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: "Secret",
|
||||
Name: "ca-bundle-secret",
|
||||
Key: "ca.crt",
|
||||
@@ -1229,7 +1229,7 @@ func TestOIDCUpstreamWatcherControllerSync(t *testing.T) {
|
||||
Spec: idpv1alpha1.OIDCIdentityProviderSpec{
|
||||
Issuer: testIssuerURL,
|
||||
TLS: &idpv1alpha1.TLSSpec{
|
||||
CertificateAuthorityDataSource: &idpv1alpha1.CABundleSource{
|
||||
CertificateAuthorityDataSource: &idpv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: "ConfigMap",
|
||||
Name: "ca-bundle-configmap",
|
||||
Key: "ca.crt",
|
||||
|
||||
@@ -535,7 +535,7 @@ func TestTLSSpecForSupervisor(t *testing.T) {
|
||||
{
|
||||
name: "should return tls spec with certificateAuthorityDataSource",
|
||||
supervisorTLSSpec: &idpv1alpha1.TLSSpec{
|
||||
CertificateAuthorityDataSource: &idpv1alpha1.CABundleSource{
|
||||
CertificateAuthorityDataSource: &idpv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: "Secret",
|
||||
Name: "awesome-secret",
|
||||
Key: "ca-bundle",
|
||||
@@ -553,7 +553,7 @@ func TestTLSSpecForSupervisor(t *testing.T) {
|
||||
name: "should return tls spec when source has all fields filled",
|
||||
supervisorTLSSpec: &idpv1alpha1.TLSSpec{
|
||||
CertificateAuthorityData: base64EncodedBundle,
|
||||
CertificateAuthorityDataSource: &idpv1alpha1.CABundleSource{
|
||||
CertificateAuthorityDataSource: &idpv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: "Secret",
|
||||
Name: "awesome-secret",
|
||||
Key: "ca-bundle",
|
||||
@@ -609,7 +609,7 @@ func TestTLSSpecForConcierge(t *testing.T) {
|
||||
{
|
||||
name: "should return tls spec with certificateAuthorityDataSource",
|
||||
conciergeTLSSpec: &authenticationv1alpha1.TLSSpec{
|
||||
CertificateAuthorityDataSource: &authenticationv1alpha1.CABundleSource{
|
||||
CertificateAuthorityDataSource: &authenticationv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: "Secret",
|
||||
Name: "awesome-secret",
|
||||
Key: "ca-bundle",
|
||||
@@ -627,7 +627,7 @@ func TestTLSSpecForConcierge(t *testing.T) {
|
||||
name: "should return tls spec when source has all fields filled",
|
||||
conciergeTLSSpec: &authenticationv1alpha1.TLSSpec{
|
||||
CertificateAuthorityData: base64EncodedBundle,
|
||||
CertificateAuthorityDataSource: &authenticationv1alpha1.CABundleSource{
|
||||
CertificateAuthorityDataSource: &authenticationv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: "Secret",
|
||||
Name: "awesome-secret",
|
||||
Key: "ca-bundle",
|
||||
|
||||
@@ -83,7 +83,7 @@ func TestClient(t *testing.T) {
|
||||
"tls.key": "",
|
||||
})
|
||||
spec.TLS.CertificateAuthorityData = ""
|
||||
spec.TLS.CertificateAuthorityDataSource = &authenticationv1alpha1.CABundleSource{
|
||||
spec.TLS.CertificateAuthorityDataSource = &authenticationv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: "Secret",
|
||||
Name: caSecret.Name,
|
||||
Key: "ca.crt",
|
||||
@@ -98,7 +98,7 @@ func TestClient(t *testing.T) {
|
||||
"ca.crt": string(TLSCABundle),
|
||||
})
|
||||
spec.TLS.CertificateAuthorityData = ""
|
||||
spec.TLS.CertificateAuthorityDataSource = &authenticationv1alpha1.CABundleSource{
|
||||
spec.TLS.CertificateAuthorityDataSource = &authenticationv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: "Secret",
|
||||
Name: caSecret.Name,
|
||||
Key: "ca.crt",
|
||||
@@ -113,7 +113,7 @@ func TestClient(t *testing.T) {
|
||||
"ca.crt": string(TLSCABundle),
|
||||
})
|
||||
spec.TLS.CertificateAuthorityData = ""
|
||||
spec.TLS.CertificateAuthorityDataSource = &authenticationv1alpha1.CABundleSource{
|
||||
spec.TLS.CertificateAuthorityDataSource = &authenticationv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: "ConfigMap",
|
||||
Name: caConfigmap.Name,
|
||||
Key: "ca.crt",
|
||||
|
||||
@@ -93,7 +93,7 @@ func TestConciergeJWTAuthenticatorWithExternalCABundleStatusIsUpdatedWhenExterna
|
||||
Issuer: env.SupervisorUpstreamOIDC.Issuer,
|
||||
Audience: "does-not-matter",
|
||||
TLS: &authenticationv1alpha1.TLSSpec{
|
||||
CertificateAuthorityDataSource: &authenticationv1alpha1.CABundleSource{
|
||||
CertificateAuthorityDataSource: &authenticationv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: test.caBundleSourceSpecKind,
|
||||
Name: caBundleResourceName,
|
||||
Key: "ca.crt",
|
||||
|
||||
@@ -90,7 +90,7 @@ func TestConciergeWebhookAuthenticatorWithExternalCABundleStatusIsUpdatedWhenExt
|
||||
authenticator := testlib.CreateTestWebhookAuthenticator(ctx, t, &authenticationv1alpha1.WebhookAuthenticatorSpec{
|
||||
Endpoint: env.TestWebhook.Endpoint,
|
||||
TLS: &authenticationv1alpha1.TLSSpec{
|
||||
CertificateAuthorityDataSource: &authenticationv1alpha1.CABundleSource{
|
||||
CertificateAuthorityDataSource: &authenticationv1alpha1.CertificateAuthorityDataSourceSpec{
|
||||
Kind: test.caBundleSourceSpecKind,
|
||||
Name: caBundleResourceName,
|
||||
Key: "ca.crt",
|
||||
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user