Skip to content

Commit

Permalink
nit
Browse files Browse the repository at this point in the history
Signed-off-by: Maia Iyer <[email protected]>
  • Loading branch information
maia-iyer committed Oct 11, 2024
1 parent 98da13d commit c312572
Showing 1 changed file with 10 additions and 8 deletions.
18 changes: 10 additions & 8 deletions docs/config-tornjak-server.md
Original file line number Diff line number Diff line change
Expand Up @@ -72,19 +72,21 @@ Tornjak supports several different plugin types, each representing a different f

### Plugin types

| Type | Description | Required |
|:--------------|:------------|:---------|
| DataStore | Provides persistent storage for Tornjak metadata. | True |
| Authenticator | Verify tokens signed by external OIDC server and extract user information to be passed to the Authorization layer. Any user information or errors from this layer are to be interpreted by an Authorizer layer. | False |
| Authorizer | Based on user information or errors passed from authentication layer and API call details, apply authorization logic. | False |
| Type | Description | Required |
|:----------------|:------------|:---------|
| DataStore | Provides persistent storage for Tornjak metadata. | True |
| SPIRECRDManager | Enables SPIRE CRD Management via Tornjak API. | False |

Check failure on line 78 in docs/config-tornjak-server.md

View workflow job for this annotation

GitHub Actions / lint

Trailing spaces

docs/config-tornjak-server.md:78:76 MD009/no-trailing-spaces Trailing spaces [Expected: 0 or 2; Actual: 1] https://github.com/DavidAnson/markdownlint/blob/v0.35.0/doc/md009.md
| Authenticator | Verify tokens signed by external OIDC server and extract user information to be passed to the Authorization layer. Any user information or errors from this layer are to be interpreted by an Authorizer layer. | False |
| Authorizer | Based on user information or errors passed from authentication layer and API call details, apply authorization logic. | False |

### Built-in plugins

| Type | Name | Description |
| ---- | ---- | ----------- |
| DataStore | SQL | Default SQL storage for Tornjak metadata |
| Authenticator | [keycloak](/docs/plugin_server_authentication_keycloak.md) | Perform OIDC Discovery and extract roles from `realmAccess.roles` field |
| Authorizer | [RBAC](/docs/plugin_server_authorization_rbac.md) | Check api permission based on user role and defined authorization logic |
| DataStore | SQL | Default SQL storage for Tornjak metadata |
| SPIRECRDManager | [](/docs/plugin_server_spirecrd.md) | CRD Manager |
| Authenticator | [keycloak](/docs/plugin_server_authentication_keycloak.md) | Perform OIDC Discovery and extract roles from `realmAccess.roles` field |
| Authorizer | [RBAC](/docs/plugin_server_authorization_rbac.md) | Check api permission based on user role and defined authorization logic |

### Plugin configuration

Expand Down

0 comments on commit c312572

Please sign in to comment.