mirror of
https://github.com/gravitational/teleport.git
synced 2026-10-12 02:15:01 +00:00
Maxim
d6ae3d6e36
- Add new ResourcePrincipalSet message and a Principals field on PaginatedResource to carry resources' principals per-dimension, split between granted/requestable values. The flat Logins field is kept for backwards-compatibility with older clients. - Each dimension can attribute its values to the granting role(s) via the by_role field. - Add RESOURCE_CONSTRAINTS_SSH_V1 component feature ID as well. Constraint support is advertised per-kind going forward to ensure a gate is only satisfied by components able to parse and enforce that kind; SSH is the first per-kind ID while AWS Console app resources stay using RESOURCE_CONSTRAINTS_V1.
61 lines
2.1 KiB
Go
61 lines
2.1 KiB
Go
/*
|
|
* Teleport
|
|
* Copyright (C) 2025 Gravitational, Inc.
|
|
*
|
|
* This program is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Affero General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU Affero General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Affero General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
package componentfeatures
|
|
|
|
import (
|
|
componentfeaturesv1 "github.com/gravitational/teleport/api/gen/proto/go/teleport/componentfeatures/v1"
|
|
)
|
|
|
|
// FeatureID is used to wrap [componentfeaturesv1.ComponentFeatureID] for convenience methods.
|
|
type FeatureID int32
|
|
|
|
const (
|
|
// FeatureUnspecified is the unspecified feature ID.
|
|
FeatureUnspecified FeatureID = iota
|
|
// FeatureResourceConstraintsV1 indicates support for Resource Constraints in Access Requests,
|
|
// identity certificates, and AWS Console App resources.
|
|
FeatureResourceConstraintsV1
|
|
// FeatureResourceConstraintsSSHV1 indicates support for enforcing SSH login
|
|
// constraints on nodes.
|
|
FeatureResourceConstraintsSSHV1
|
|
)
|
|
|
|
var featureIDToName = map[FeatureID]string{
|
|
FeatureUnspecified: "UNSPECIFIED",
|
|
FeatureResourceConstraintsV1: "RESOURCE_CONSTRAINTS_V1",
|
|
FeatureResourceConstraintsSSHV1: "RESOURCE_CONSTRAINTS_SSH_V1",
|
|
}
|
|
|
|
// String returns a short name for the FeatureID, falling back to the
|
|
// [componentfeaturesv1.ComponentFeatureID] enum name if not specified.
|
|
func (f FeatureID) String() string {
|
|
if s, ok := featureIDToName[f]; ok {
|
|
return s
|
|
}
|
|
if s, ok := componentfeaturesv1.ComponentFeatureID_name[int32(f)]; ok {
|
|
return s
|
|
}
|
|
return "UNKNOWN"
|
|
}
|
|
|
|
// ToProto converts the FeatureID to its corresponding [componentfeaturesv1.ComponentFeatureID].
|
|
func (f FeatureID) ToProto() componentfeaturesv1.ComponentFeatureID {
|
|
return componentfeaturesv1.ComponentFeatureID(f)
|
|
}
|