CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(credentials): Refactor credential purposes (#2260)

Browse Source 
* feat(credentials): Refactor credential purposes

 * Application credentials have been refactored to Brokered credentials
 * Egress credentials have been refactored to Injected Application
credentials

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
This commit is contained in:
Louis RuchandJeff Mitchell authored and GitHub committed 2022-07-19 15:16:24 -07:00
1 parent 271cc8f781
commit a17e973712
49 files changed
+1516 -1051
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

internal/proto/controller/api/resources/targets/v1/target.proto
+21 -6
View File
@@ -159,14 +159,27 @@ message Target {
]; // @gotags: `class:"public"`
// Output only. The IDs of the application credential source ids associated with this Target.
repeated string application_credential_source_ids = 400 [json_name = "application_credential_source_ids"]; // @gotags: `class:"public"`
// Deprecated use "brokered_credential_source_ids" instead.
repeated string application_credential_source_ids = 400 [
json_name = "application_credential_source_ids",
deprecated = true
]; // @gotags: `class:"public"`
// Output only. The application credential sources associated with this Target.
repeated CredentialSource application_credential_sources = 410 [json_name = "application_credential_sources"];
// Deprecated use "brokered_credential_sources" instead.
repeated CredentialSource application_credential_sources = 410 [
json_name = "application_credential_sources",
deprecated = true
];
// Output only. The IDs of the egress credential source ids associated with this Target.
repeated string egress_credential_source_ids = 500 [json_name = "egress_credential_source_ids"]; // @gotags: `class:"public"`
// Output only. The egress credential sources associated with this Target.
repeated CredentialSource egress_credential_sources = 510 [json_name = "egress_credential_sources"];
// Output only. The IDs of the brokered credential source ids associated with this Target.
repeated string brokered_credential_source_ids = 440 [json_name = "brokered_credential_source_ids"]; // @gotags: `class:"public"`
// Output only. The brokered credential sources associated with this Target.
repeated CredentialSource brokered_credential_sources = 450 [json_name = "brokered_credential_sources"];
// Output only. The IDs of the injected application credential source ids associated with this Target.
repeated string injected_application_credential_source_ids = 520 [json_name = "injected_application_credential_source_ids"]; // @gotags: `class:"public"`
// Output only. The injected application credential sources associated with this Target.
repeated CredentialSource injected_application_credential_sources = 530 [json_name = "injected_application_credential_sources"];
oneof attrs {
// The attributes that are applicable for the specific Target.
@@ -187,6 +200,8 @@ message Target {
// Deprecated fields
reserved "application_credential_library_ids", "application_credential_libraries";
reserved 150, 180;
reserved "egress_credential_source_ids", "egress_credential_sources";
reserved 500, 510;
}
// TcpTargetAttributes contains attributes relevant to Targets of type "tcp"
internal/proto/controller/api/services/v1/target_service.proto
+54 -6
View File
@@ -378,8 +378,24 @@ message AddTargetCredentialSourcesRequest {
// Version is used to ensure this resource has not changed.
// The mutation will fail if the version does not match the latest known good version.
uint32 version = 2; // @gotags: `class:"public"`
repeated string application_credential_source_ids = 3 [json_name = "application_credential_source_ids"]; // @gotags: `class:"public"`
repeated string egress_credential_source_ids = 4 [json_name = "egress_credential_source_ids"]; // @gotags: `class:"public"`
// Deprecated use brokered_credential_source_ids instead
repeated string application_credential_source_ids = 3 [
json_name = "application_credential_source_ids",
deprecated = true
]; // @gotags: `class:"public"`
// Brokered credentials are returned to the user during session authorization.
repeated string brokered_credential_source_ids = 10 [json_name = "brokered_credential_source_ids"]; // @gotags: `class:"public"`
// Injected application credentials are used by a Boundary worker to secure the
// connection between the worker and the endpoint. Injected application credentials are
// never returned to the user.
repeated string injected_application_credential_source_ids = 20 [json_name = "injected_application_credential_source_ids"]; // @gotags: `class:"public"`
// Deprecated fields
reserved "egress_credential_source_ids";
reserved 4;
}
message AddTargetCredentialSourcesResponse {
@@ -393,8 +409,24 @@ message SetTargetCredentialSourcesRequest {
// Version is used to ensure this resource has not changed.
// The mutation will fail if the version does not match the latest known good version.
uint32 version = 2; // @gotags: `class:"public"`
repeated string application_credential_source_ids = 3 [json_name = "application_credential_source_ids"]; // @gotags: `class:"public"`
repeated string egress_credential_source_ids = 4 [json_name = "egress_credential_source_ids"]; // @gotags: `class:"public"`
// Deprecated use brokered_credential_source_ids instead
repeated string application_credential_source_ids = 3 [
json_name = "application_credential_source_ids",
deprecated = true
]; // @gotags: `class:"public"`
// Brokered credentials are returned to the user during session authorization.
repeated string brokered_credential_source_ids = 10 [json_name = "brokered_credential_source_ids"]; // @gotags: `class:"public"`
// Injected application credentials are used by a Boundary worker to secure the
// connection between the worker and the endpoint. Injected application credentials are
// never returned to the user.
repeated string injected_application_credential_source_ids = 20 [json_name = "injected_application_credential_source_ids"]; // @gotags: `class:"public"`
// Deprecated fields
reserved "egress_credential_source_ids";
reserved 4;
}
message SetTargetCredentialSourcesResponse {
@@ -406,8 +438,24 @@ message RemoveTargetCredentialSourcesRequest {
// Version is used to ensure this resource has not changed.
// The mutation will fail if the version does not match the latest known good version.
uint32 version = 2; // @gotags: `class:"public"`
repeated string application_credential_source_ids = 3 [json_name = "application_credential_source_id"]; // @gotags: `class:"public"`
repeated string egress_credential_source_ids = 4 [json_name = "egress_credential_source_ids"]; // @gotags: `class:"public"`
// Deprecated use brokered_credential_source_ids instead
repeated string application_credential_source_ids = 3 [
json_name = "application_credential_source_id",
deprecated = true
]; // @gotags: `class:"public"`
// Brokered credentials are returned to the user during session authorization.
repeated string brokered_credential_source_ids = 10 [json_name = "brokered_credential_source_ids"]; // @gotags: `class:"public"`
// Injected application credentials are used by a Boundary worker to secure the
// connection between the worker and the endpoint. Injected application credentials are
// never returned to the user.
repeated string injected_application_credential_source_ids = 20 [json_name = "injected_application_credential_source_ids"]; // @gotags: `class:"public"`
// Deprecated fields
reserved "egress_credential_source_ids";
reserved 4;
}
message RemoveTargetCredentialSourcesResponse {