CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update target credential library service, API, SDK, CLI (#1343)

Browse Source
This commit is contained in:
Jeff Mitchell authored and GitHub committed 2021-06-25 14:06:31 -04:00
1 parent 83c65d0d4b
commit 86c9a90554
27 files changed
+1474 -1127
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

internal/proto/local/controller/api/resources/targets/v1/target.proto
+18 -9
View File
@@ -31,9 +31,6 @@ message CredentialLibrary{
// Output only. The Credential Store to which this Credential Library belongs.
string credential_store_id = 40 [json_name="credential_store_id"];
// The library's purpose for this target.
string purpose = 50;
// Output only. The type of the credential library.
string type = 60;
}
@@ -41,10 +38,10 @@ message CredentialLibrary{
// A credential for a session.
message SessionCredential {
// Output only. The library which generated this credential.
CredentialLibrary credential_library = 1;
CredentialLibrary credential_library = 10;
// Output only. The secret of this credential base64 encoded.
string secret = 2;
string secret = 30;
}
// Target contains all fields related to a Target resource
@@ -92,11 +89,23 @@ message Target {
// Optional boolean expression to filter the workers that are allowed to satisfy this request.
google.protobuf.StringValue worker_filter = 140 [json_name="worker_filter", (custom_options.v1.generate_sdk_option) = true, (custom_options.v1.mask_mapping) = {this: "worker_filter" that: "WorkerFilter"}];
// The IDs of the credential libraries associated with this Target.
repeated string credential_library_ids = 150 [json_name="credential_library_ids"];
// The IDs of the application credential library ids associated with this Target.
repeated string application_credential_library_ids = 150 [json_name="application_credential_library_ids"];
// Output only. The credential libraries associated with this Target.
repeated CredentialLibrary credential_libraries = 160 [json_name="credential_libraries"];
// TODO: Uncomment when we suport more purposes beyond application
// // The IDs of the egress credential libraries associated with this Target.
// repeated string egress_credential_library_ids = 160 [json_name="egress_credential_library_ids"];
// // The IDs of the ingress credential libraries associated with this Target.
// repeated string ingress_credential_library_ids = 170 [json_name="ingress_credential_library_ids"];
// Output only. The application credential libraries associated with this Target.
repeated CredentialLibrary application_credential_libraries = 180 [json_name="application_credential_libraries"];
// TODO: Uncomment when we suport more purposes beyond application
// // Output only. The egress credential libraries associated with this Target.
// repeated CredentialLibrary egress_credential_libraries = 190 [json_name="egress_credential_libraries"];
// // Output only. The credential libraries associated with this Target.
// repeated CredentialLibrary ingress_credential_libraries = 200 [json_name="ingress_credential_libraries"];
// The attributes that are applicable for the specific Target.
google.protobuf.Struct attributes = 200 [(custom_options.v1.generate_sdk_option) = true];
internal/proto/local/controller/api/services/v1/target_service.proto
+15 -20
View File
@@ -284,41 +284,33 @@ message RemoveTargetHostSetsResponse {
api.resources.targets.v1.Target item = 1;
}
message CredentialLibrary {
// The id of the credential library.
string id = 1;
// The purpose of the credential library for this target. Currently this can
// only be "application" or left empty (which defaults the value to
// "application").
string purpose = 2;
}
// The ids from both credential_library_ids and credential_libraries are used.
// When using credential_library_ids the default value "application" is used
// for the purpose.
message AddTargetCredentialLibrariesRequest {
string id = 1;
// Version is used to ensure this resource has not changed.
// The mutation will fail if the version does not match the latest known good version.
uint32 version = 2;
repeated string credential_library_ids = 3 [json_name="credential_library_ids"];
repeated CredentialLibrary credential_libraries = 4 [json_name="credential_libraries"];
repeated string application_credential_library_ids = 3 [json_name="application_credential_library_ids"];
// TODO: Uncomment when we support more purposes beyond application
// repeated string egress_credential_library_ids = 4 [json_name="egress_credential_library_ids"];
// repeated string ingress_credential_library_ids = 5 [json_name="ingress_credential_library_ids"];
}
message AddTargetCredentialLibrariesResponse {
api.resources.targets.v1.Target item = 1;
}
// The ids from both credential_library_ids and credential_libraries are used.
// When using credential_library_ids the default value "application" is used
// for the purpose.
// Sets the values for application_credential_library_ids. If any
// credential_library_id field that is not set in the request will result in
// those fields being cleared.
message SetTargetCredentialLibrariesRequest {
string id = 1;
// Version is used to ensure this resource has not changed.
// The mutation will fail if the version does not match the latest known good version.
uint32 version = 2;
repeated string credential_library_ids = 3 [json_name="credential_library_ids"];
repeated CredentialLibrary credential_libraries = 4 [json_name="credential_libraries"];
repeated string application_credential_library_ids = 3 [json_name="application_credential_library_ids"];
// TODO: Uncomment when we support more purposes beyond application
// repeated string egress_credential_library_ids = 4 [json_name="egress_credential_library_ids"];
// repeated string ingress_credential_library_ids = 5 [json_name="ingress_credential_library_ids"];
}
message SetTargetCredentialLibrariesResponse {
@@ -330,7 +322,10 @@ message RemoveTargetCredentialLibrariesRequest {
// Version is used to ensure this resource has not changed.
// The mutation will fail if the version does not match the latest known good version.
uint32 version = 2;
repeated string credential_library_ids = 3 [json_name="credential_library_ids"];
repeated string application_credential_library_ids = 3 [json_name="application_credential_library_ids"];
// TODO: Uncomment when we support more purposes beyond application
// repeated string egress_credential_library_ids = 4 [json_name="egress_credential_library_ids"];
// repeated string ingress_credential_library_ids = 5 [json_name="ingress_credential_library_ids"];
}
message RemoveTargetCredentialLibrariesResponse {