-
Notifications
You must be signed in to change notification settings - Fork 42
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Signed-off-by: Maia Iyer <[email protected]>
- Loading branch information
Showing
1 changed file
with
10 additions
and
8 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -72,19 +72,21 @@ Tornjak supports several different plugin types, each representing a different f | |
|
||
### Plugin types | ||
|
||
| Type | Description | Required | | ||
|:--------------|:------------|:---------| | ||
| DataStore | Provides persistent storage for Tornjak metadata. | True | | ||
| Authenticator | Verify tokens signed by external OIDC server and extract user information to be passed to the Authorization layer. Any user information or errors from this layer are to be interpreted by an Authorizer layer. | False | | ||
| Authorizer | Based on user information or errors passed from authentication layer and API call details, apply authorization logic. | False | | ||
| Type | Description | Required | | ||
|:----------------|:------------|:---------| | ||
| DataStore | Provides persistent storage for Tornjak metadata. | True | | ||
| SPIRECRDManager | Enables SPIRE CRD Management via Tornjak API. | False | | ||
Check failure on line 78 in docs/config-tornjak-server.md GitHub Actions / lintTrailing spaces
|
||
| Authenticator | Verify tokens signed by external OIDC server and extract user information to be passed to the Authorization layer. Any user information or errors from this layer are to be interpreted by an Authorizer layer. | False | | ||
| Authorizer | Based on user information or errors passed from authentication layer and API call details, apply authorization logic. | False | | ||
|
||
### Built-in plugins | ||
|
||
| Type | Name | Description | | ||
| ---- | ---- | ----------- | | ||
| DataStore | SQL | Default SQL storage for Tornjak metadata | | ||
| Authenticator | [keycloak](/docs/plugin_server_authentication_keycloak.md) | Perform OIDC Discovery and extract roles from `realmAccess.roles` field | | ||
| Authorizer | [RBAC](/docs/plugin_server_authorization_rbac.md) | Check api permission based on user role and defined authorization logic | | ||
| DataStore | SQL | Default SQL storage for Tornjak metadata | | ||
| SPIRECRDManager | [](/docs/plugin_server_spirecrd.md) | CRD Manager | | ||
| Authenticator | [keycloak](/docs/plugin_server_authentication_keycloak.md) | Perform OIDC Discovery and extract roles from `realmAccess.roles` field | | ||
| Authorizer | [RBAC](/docs/plugin_server_authorization_rbac.md) | Check api permission based on user role and defined authorization logic | | ||
|
||
### Plugin configuration | ||
|
||
|