Update doc comments for types_credentialissuer.go.tmpl.

Update to follow https://golang.org/doc/effective_go#commentary:

> The first sentence should be a one-sentence summary that starts with the name being declared.

Signed-off-by: Matt Moyer <moyerm@vmware.com>
This commit is contained in:
Matt Moyer 2021-05-11 21:23:43 -05:00
parent efeb25b8eb
commit 4a456446ff
No known key found for this signature in database
GPG Key ID: EAE88AD172C5AE2D
15 changed files with 94 additions and 53 deletions

View File

@ -5,15 +5,19 @@ package v1alpha1
import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
// StrategyType enumerates a type of "strategy" used to implement credential access on a cluster.
// +kubebuilder:validation:Enum=KubeClusterSigningCertificate;ImpersonationProxy // +kubebuilder:validation:Enum=KubeClusterSigningCertificate;ImpersonationProxy
type StrategyType string type StrategyType string
// FrontendType enumerates a type of "frontend" used to provide access to users of a cluster.
// +kubebuilder:validation:Enum=TokenCredentialRequestAPI;ImpersonationProxy // +kubebuilder:validation:Enum=TokenCredentialRequestAPI;ImpersonationProxy
type FrontendType string type FrontendType string
// StrategyStatus enumerates whether a strategy is working on a cluster.
// +kubebuilder:validation:Enum=Success;Error // +kubebuilder:validation:Enum=Success;Error
type StrategyStatus string type StrategyStatus string
// StrategyReason enumerates the detailed reason why a strategy is in a particular status.
// +kubebuilder:validation:Enum=Listening;Pending;Disabled;ErrorDuringSetup;CouldNotFetchKey;CouldNotGetClusterInfo;FetchedKey // +kubebuilder:validation:Enum=Listening;Pending;Disabled;ErrorDuringSetup;CouldNotFetchKey;CouldNotGetClusterInfo;FetchedKey
type StrategyReason string type StrategyReason string
@ -36,7 +40,7 @@ const (
FetchedKeyStrategyReason = StrategyReason("FetchedKey") FetchedKeyStrategyReason = StrategyReason("FetchedKey")
) )
// Status of a credential issuer. // CredentialIssuerStatus describes the status of the Concierge.
type CredentialIssuerStatus struct { type CredentialIssuerStatus struct {
// List of integration strategies that were attempted by Pinniped. // List of integration strategies that were attempted by Pinniped.
Strategies []CredentialIssuerStrategy `json:"strategies"` Strategies []CredentialIssuerStrategy `json:"strategies"`
@ -47,7 +51,8 @@ type CredentialIssuerStatus struct {
KubeConfigInfo *CredentialIssuerKubeConfigInfo `json:"kubeConfigInfo,omitempty"` KubeConfigInfo *CredentialIssuerKubeConfigInfo `json:"kubeConfigInfo,omitempty"`
} }
// Information needed to form a valid Pinniped-based kubeconfig using this credential issuer. // CredentialIssuerKubeConfigInfo provides the information needed to form a valid Pinniped-based kubeconfig using this credential issuer.
// This type is deprecated and will be removed in a future version.
type CredentialIssuerKubeConfigInfo struct { type CredentialIssuerKubeConfigInfo struct {
// The K8s API server URL. // The K8s API server URL.
// +kubebuilder:validation:MinLength=1 // +kubebuilder:validation:MinLength=1
@ -59,7 +64,7 @@ type CredentialIssuerKubeConfigInfo struct {
CertificateAuthorityData string `json:"certificateAuthorityData"` CertificateAuthorityData string `json:"certificateAuthorityData"`
} }
// Status of an integration strategy that was attempted by Pinniped. // CredentialIssuerStrategy describes the status of an integration strategy that was attempted by Pinniped.
type CredentialIssuerStrategy struct { type CredentialIssuerStrategy struct {
// Type of integration attempted. // Type of integration attempted.
Type StrategyType `json:"type"` Type StrategyType `json:"type"`
@ -81,6 +86,7 @@ type CredentialIssuerStrategy struct {
Frontend *CredentialIssuerFrontend `json:"frontend,omitempty"` Frontend *CredentialIssuerFrontend `json:"frontend,omitempty"`
} }
// CredentialIssuerFrontend describes how to connect using a particular integration strategy.
type CredentialIssuerFrontend struct { type CredentialIssuerFrontend struct {
// Type describes which frontend mechanism clients can use with a strategy. // Type describes which frontend mechanism clients can use with a strategy.
Type FrontendType `json:"type"` Type FrontendType `json:"type"`
@ -118,7 +124,7 @@ type ImpersonationProxyInfo struct {
CertificateAuthorityData string `json:"certificateAuthorityData"` CertificateAuthorityData string `json:"certificateAuthorityData"`
} }
// Describes the configuration status of a Pinniped credential issuer. // CredentialIssuer describes the configuration and status of the Pinniped Concierge credential issuer.
// +genclient // +genclient
// +genclient:nonNamespaced // +genclient:nonNamespaced
// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
@ -133,7 +139,7 @@ type CredentialIssuer struct {
Status CredentialIssuerStatus `json:"status"` Status CredentialIssuerStatus `json:"status"`
} }
// List of CredentialIssuer objects. // CredentialIssuerList is a list of CredentialIssuer objects.
// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
type CredentialIssuerList struct { type CredentialIssuerList struct {
metav1.TypeMeta `json:",inline"` metav1.TypeMeta `json:",inline"`

View File

@ -21,7 +21,8 @@ spec:
- name: v1alpha1 - name: v1alpha1
schema: schema:
openAPIV3Schema: openAPIV3Schema:
description: Describes the configuration status of a Pinniped credential issuer. description: CredentialIssuer describes the configuration and status of the
Pinniped Concierge credential issuer.
properties: properties:
apiVersion: apiVersion:
description: 'APIVersion defines the versioned schema of this representation description: 'APIVersion defines the versioned schema of this representation
@ -60,8 +61,8 @@ spec:
description: List of integration strategies that were attempted by description: List of integration strategies that were attempted by
Pinniped. Pinniped.
items: items:
description: Status of an integration strategy that was attempted description: CredentialIssuerStrategy describes the status of an
by Pinniped. integration strategy that was attempted by Pinniped.
properties: properties:
frontend: frontend:
description: Frontend describes how clients can connect using description: Frontend describes how clients can connect using

View File

@ -220,7 +220,7 @@ Package v1alpha1 is the v1alpha1 version of the Pinniped concierge configuration
[id="{anchor_prefix}-go-pinniped-dev-generated-1-17-apis-concierge-config-v1alpha1-credentialissuer"] [id="{anchor_prefix}-go-pinniped-dev-generated-1-17-apis-concierge-config-v1alpha1-credentialissuer"]
==== CredentialIssuer ==== CredentialIssuer
Describes the configuration status of a Pinniped credential issuer. CredentialIssuer describes the configuration and status of the Pinniped Concierge credential issuer.
.Appears In: .Appears In:
**** ****
@ -278,7 +278,7 @@ Describes the configuration status of a Pinniped credential issuer.
[id="{anchor_prefix}-go-pinniped-dev-generated-1-17-apis-concierge-config-v1alpha1-credentialissuerstatus"] [id="{anchor_prefix}-go-pinniped-dev-generated-1-17-apis-concierge-config-v1alpha1-credentialissuerstatus"]
==== CredentialIssuerStatus ==== CredentialIssuerStatus
Status of a credential issuer. CredentialIssuerStatus describes the status of the Concierge.
.Appears In: .Appears In:
**** ****

View File

@ -5,15 +5,19 @@ package v1alpha1
import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
// StrategyType enumerates a type of "strategy" used to implement credential access on a cluster.
// +kubebuilder:validation:Enum=KubeClusterSigningCertificate;ImpersonationProxy // +kubebuilder:validation:Enum=KubeClusterSigningCertificate;ImpersonationProxy
type StrategyType string type StrategyType string
// FrontendType enumerates a type of "frontend" used to provide access to users of a cluster.
// +kubebuilder:validation:Enum=TokenCredentialRequestAPI;ImpersonationProxy // +kubebuilder:validation:Enum=TokenCredentialRequestAPI;ImpersonationProxy
type FrontendType string type FrontendType string
// StrategyStatus enumerates whether a strategy is working on a cluster.
// +kubebuilder:validation:Enum=Success;Error // +kubebuilder:validation:Enum=Success;Error
type StrategyStatus string type StrategyStatus string
// StrategyReason enumerates the detailed reason why a strategy is in a particular status.
// +kubebuilder:validation:Enum=Listening;Pending;Disabled;ErrorDuringSetup;CouldNotFetchKey;CouldNotGetClusterInfo;FetchedKey // +kubebuilder:validation:Enum=Listening;Pending;Disabled;ErrorDuringSetup;CouldNotFetchKey;CouldNotGetClusterInfo;FetchedKey
type StrategyReason string type StrategyReason string
@ -36,7 +40,7 @@ const (
FetchedKeyStrategyReason = StrategyReason("FetchedKey") FetchedKeyStrategyReason = StrategyReason("FetchedKey")
) )
// Status of a credential issuer. // CredentialIssuerStatus describes the status of the Concierge.
type CredentialIssuerStatus struct { type CredentialIssuerStatus struct {
// List of integration strategies that were attempted by Pinniped. // List of integration strategies that were attempted by Pinniped.
Strategies []CredentialIssuerStrategy `json:"strategies"` Strategies []CredentialIssuerStrategy `json:"strategies"`
@ -47,7 +51,8 @@ type CredentialIssuerStatus struct {
KubeConfigInfo *CredentialIssuerKubeConfigInfo `json:"kubeConfigInfo,omitempty"` KubeConfigInfo *CredentialIssuerKubeConfigInfo `json:"kubeConfigInfo,omitempty"`
} }
// Information needed to form a valid Pinniped-based kubeconfig using this credential issuer. // CredentialIssuerKubeConfigInfo provides the information needed to form a valid Pinniped-based kubeconfig using this credential issuer.
// This type is deprecated and will be removed in a future version.
type CredentialIssuerKubeConfigInfo struct { type CredentialIssuerKubeConfigInfo struct {
// The K8s API server URL. // The K8s API server URL.
// +kubebuilder:validation:MinLength=1 // +kubebuilder:validation:MinLength=1
@ -59,7 +64,7 @@ type CredentialIssuerKubeConfigInfo struct {
CertificateAuthorityData string `json:"certificateAuthorityData"` CertificateAuthorityData string `json:"certificateAuthorityData"`
} }
// Status of an integration strategy that was attempted by Pinniped. // CredentialIssuerStrategy describes the status of an integration strategy that was attempted by Pinniped.
type CredentialIssuerStrategy struct { type CredentialIssuerStrategy struct {
// Type of integration attempted. // Type of integration attempted.
Type StrategyType `json:"type"` Type StrategyType `json:"type"`
@ -81,6 +86,7 @@ type CredentialIssuerStrategy struct {
Frontend *CredentialIssuerFrontend `json:"frontend,omitempty"` Frontend *CredentialIssuerFrontend `json:"frontend,omitempty"`
} }
// CredentialIssuerFrontend describes how to connect using a particular integration strategy.
type CredentialIssuerFrontend struct { type CredentialIssuerFrontend struct {
// Type describes which frontend mechanism clients can use with a strategy. // Type describes which frontend mechanism clients can use with a strategy.
Type FrontendType `json:"type"` Type FrontendType `json:"type"`
@ -118,7 +124,7 @@ type ImpersonationProxyInfo struct {
CertificateAuthorityData string `json:"certificateAuthorityData"` CertificateAuthorityData string `json:"certificateAuthorityData"`
} }
// Describes the configuration status of a Pinniped credential issuer. // CredentialIssuer describes the configuration and status of the Pinniped Concierge credential issuer.
// +genclient // +genclient
// +genclient:nonNamespaced // +genclient:nonNamespaced
// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
@ -133,7 +139,7 @@ type CredentialIssuer struct {
Status CredentialIssuerStatus `json:"status"` Status CredentialIssuerStatus `json:"status"`
} }
// List of CredentialIssuer objects. // CredentialIssuerList is a list of CredentialIssuer objects.
// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
type CredentialIssuerList struct { type CredentialIssuerList struct {
metav1.TypeMeta `json:",inline"` metav1.TypeMeta `json:",inline"`

View File

@ -21,7 +21,8 @@ spec:
- name: v1alpha1 - name: v1alpha1
schema: schema:
openAPIV3Schema: openAPIV3Schema:
description: Describes the configuration status of a Pinniped credential issuer. description: CredentialIssuer describes the configuration and status of the
Pinniped Concierge credential issuer.
properties: properties:
apiVersion: apiVersion:
description: 'APIVersion defines the versioned schema of this representation description: 'APIVersion defines the versioned schema of this representation
@ -60,8 +61,8 @@ spec:
description: List of integration strategies that were attempted by description: List of integration strategies that were attempted by
Pinniped. Pinniped.
items: items:
description: Status of an integration strategy that was attempted description: CredentialIssuerStrategy describes the status of an
by Pinniped. integration strategy that was attempted by Pinniped.
properties: properties:
frontend: frontend:
description: Frontend describes how clients can connect using description: Frontend describes how clients can connect using

View File

@ -220,7 +220,7 @@ Package v1alpha1 is the v1alpha1 version of the Pinniped concierge configuration
[id="{anchor_prefix}-go-pinniped-dev-generated-1-18-apis-concierge-config-v1alpha1-credentialissuer"] [id="{anchor_prefix}-go-pinniped-dev-generated-1-18-apis-concierge-config-v1alpha1-credentialissuer"]
==== CredentialIssuer ==== CredentialIssuer
Describes the configuration status of a Pinniped credential issuer. CredentialIssuer describes the configuration and status of the Pinniped Concierge credential issuer.
.Appears In: .Appears In:
**** ****
@ -278,7 +278,7 @@ Describes the configuration status of a Pinniped credential issuer.
[id="{anchor_prefix}-go-pinniped-dev-generated-1-18-apis-concierge-config-v1alpha1-credentialissuerstatus"] [id="{anchor_prefix}-go-pinniped-dev-generated-1-18-apis-concierge-config-v1alpha1-credentialissuerstatus"]
==== CredentialIssuerStatus ==== CredentialIssuerStatus
Status of a credential issuer. CredentialIssuerStatus describes the status of the Concierge.
.Appears In: .Appears In:
**** ****

View File

@ -5,15 +5,19 @@ package v1alpha1
import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
// StrategyType enumerates a type of "strategy" used to implement credential access on a cluster.
// +kubebuilder:validation:Enum=KubeClusterSigningCertificate;ImpersonationProxy // +kubebuilder:validation:Enum=KubeClusterSigningCertificate;ImpersonationProxy
type StrategyType string type StrategyType string
// FrontendType enumerates a type of "frontend" used to provide access to users of a cluster.
// +kubebuilder:validation:Enum=TokenCredentialRequestAPI;ImpersonationProxy // +kubebuilder:validation:Enum=TokenCredentialRequestAPI;ImpersonationProxy
type FrontendType string type FrontendType string
// StrategyStatus enumerates whether a strategy is working on a cluster.
// +kubebuilder:validation:Enum=Success;Error // +kubebuilder:validation:Enum=Success;Error
type StrategyStatus string type StrategyStatus string
// StrategyReason enumerates the detailed reason why a strategy is in a particular status.
// +kubebuilder:validation:Enum=Listening;Pending;Disabled;ErrorDuringSetup;CouldNotFetchKey;CouldNotGetClusterInfo;FetchedKey // +kubebuilder:validation:Enum=Listening;Pending;Disabled;ErrorDuringSetup;CouldNotFetchKey;CouldNotGetClusterInfo;FetchedKey
type StrategyReason string type StrategyReason string
@ -36,7 +40,7 @@ const (
FetchedKeyStrategyReason = StrategyReason("FetchedKey") FetchedKeyStrategyReason = StrategyReason("FetchedKey")
) )
// Status of a credential issuer. // CredentialIssuerStatus describes the status of the Concierge.
type CredentialIssuerStatus struct { type CredentialIssuerStatus struct {
// List of integration strategies that were attempted by Pinniped. // List of integration strategies that were attempted by Pinniped.
Strategies []CredentialIssuerStrategy `json:"strategies"` Strategies []CredentialIssuerStrategy `json:"strategies"`
@ -47,7 +51,8 @@ type CredentialIssuerStatus struct {
KubeConfigInfo *CredentialIssuerKubeConfigInfo `json:"kubeConfigInfo,omitempty"` KubeConfigInfo *CredentialIssuerKubeConfigInfo `json:"kubeConfigInfo,omitempty"`
} }
// Information needed to form a valid Pinniped-based kubeconfig using this credential issuer. // CredentialIssuerKubeConfigInfo provides the information needed to form a valid Pinniped-based kubeconfig using this credential issuer.
// This type is deprecated and will be removed in a future version.
type CredentialIssuerKubeConfigInfo struct { type CredentialIssuerKubeConfigInfo struct {
// The K8s API server URL. // The K8s API server URL.
// +kubebuilder:validation:MinLength=1 // +kubebuilder:validation:MinLength=1
@ -59,7 +64,7 @@ type CredentialIssuerKubeConfigInfo struct {
CertificateAuthorityData string `json:"certificateAuthorityData"` CertificateAuthorityData string `json:"certificateAuthorityData"`
} }
// Status of an integration strategy that was attempted by Pinniped. // CredentialIssuerStrategy describes the status of an integration strategy that was attempted by Pinniped.
type CredentialIssuerStrategy struct { type CredentialIssuerStrategy struct {
// Type of integration attempted. // Type of integration attempted.
Type StrategyType `json:"type"` Type StrategyType `json:"type"`
@ -81,6 +86,7 @@ type CredentialIssuerStrategy struct {
Frontend *CredentialIssuerFrontend `json:"frontend,omitempty"` Frontend *CredentialIssuerFrontend `json:"frontend,omitempty"`
} }
// CredentialIssuerFrontend describes how to connect using a particular integration strategy.
type CredentialIssuerFrontend struct { type CredentialIssuerFrontend struct {
// Type describes which frontend mechanism clients can use with a strategy. // Type describes which frontend mechanism clients can use with a strategy.
Type FrontendType `json:"type"` Type FrontendType `json:"type"`
@ -118,7 +124,7 @@ type ImpersonationProxyInfo struct {
CertificateAuthorityData string `json:"certificateAuthorityData"` CertificateAuthorityData string `json:"certificateAuthorityData"`
} }
// Describes the configuration status of a Pinniped credential issuer. // CredentialIssuer describes the configuration and status of the Pinniped Concierge credential issuer.
// +genclient // +genclient
// +genclient:nonNamespaced // +genclient:nonNamespaced
// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
@ -133,7 +139,7 @@ type CredentialIssuer struct {
Status CredentialIssuerStatus `json:"status"` Status CredentialIssuerStatus `json:"status"`
} }
// List of CredentialIssuer objects. // CredentialIssuerList is a list of CredentialIssuer objects.
// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
type CredentialIssuerList struct { type CredentialIssuerList struct {
metav1.TypeMeta `json:",inline"` metav1.TypeMeta `json:",inline"`

View File

@ -21,7 +21,8 @@ spec:
- name: v1alpha1 - name: v1alpha1
schema: schema:
openAPIV3Schema: openAPIV3Schema:
description: Describes the configuration status of a Pinniped credential issuer. description: CredentialIssuer describes the configuration and status of the
Pinniped Concierge credential issuer.
properties: properties:
apiVersion: apiVersion:
description: 'APIVersion defines the versioned schema of this representation description: 'APIVersion defines the versioned schema of this representation
@ -60,8 +61,8 @@ spec:
description: List of integration strategies that were attempted by description: List of integration strategies that were attempted by
Pinniped. Pinniped.
items: items:
description: Status of an integration strategy that was attempted description: CredentialIssuerStrategy describes the status of an
by Pinniped. integration strategy that was attempted by Pinniped.
properties: properties:
frontend: frontend:
description: Frontend describes how clients can connect using description: Frontend describes how clients can connect using

View File

@ -220,7 +220,7 @@ Package v1alpha1 is the v1alpha1 version of the Pinniped concierge configuration
[id="{anchor_prefix}-go-pinniped-dev-generated-1-19-apis-concierge-config-v1alpha1-credentialissuer"] [id="{anchor_prefix}-go-pinniped-dev-generated-1-19-apis-concierge-config-v1alpha1-credentialissuer"]
==== CredentialIssuer ==== CredentialIssuer
Describes the configuration status of a Pinniped credential issuer. CredentialIssuer describes the configuration and status of the Pinniped Concierge credential issuer.
.Appears In: .Appears In:
**** ****
@ -278,7 +278,7 @@ Describes the configuration status of a Pinniped credential issuer.
[id="{anchor_prefix}-go-pinniped-dev-generated-1-19-apis-concierge-config-v1alpha1-credentialissuerstatus"] [id="{anchor_prefix}-go-pinniped-dev-generated-1-19-apis-concierge-config-v1alpha1-credentialissuerstatus"]
==== CredentialIssuerStatus ==== CredentialIssuerStatus
Status of a credential issuer. CredentialIssuerStatus describes the status of the Concierge.
.Appears In: .Appears In:
**** ****

View File

@ -5,15 +5,19 @@ package v1alpha1
import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
// StrategyType enumerates a type of "strategy" used to implement credential access on a cluster.
// +kubebuilder:validation:Enum=KubeClusterSigningCertificate;ImpersonationProxy // +kubebuilder:validation:Enum=KubeClusterSigningCertificate;ImpersonationProxy
type StrategyType string type StrategyType string
// FrontendType enumerates a type of "frontend" used to provide access to users of a cluster.
// +kubebuilder:validation:Enum=TokenCredentialRequestAPI;ImpersonationProxy // +kubebuilder:validation:Enum=TokenCredentialRequestAPI;ImpersonationProxy
type FrontendType string type FrontendType string
// StrategyStatus enumerates whether a strategy is working on a cluster.
// +kubebuilder:validation:Enum=Success;Error // +kubebuilder:validation:Enum=Success;Error
type StrategyStatus string type StrategyStatus string
// StrategyReason enumerates the detailed reason why a strategy is in a particular status.
// +kubebuilder:validation:Enum=Listening;Pending;Disabled;ErrorDuringSetup;CouldNotFetchKey;CouldNotGetClusterInfo;FetchedKey // +kubebuilder:validation:Enum=Listening;Pending;Disabled;ErrorDuringSetup;CouldNotFetchKey;CouldNotGetClusterInfo;FetchedKey
type StrategyReason string type StrategyReason string
@ -36,7 +40,7 @@ const (
FetchedKeyStrategyReason = StrategyReason("FetchedKey") FetchedKeyStrategyReason = StrategyReason("FetchedKey")
) )
// Status of a credential issuer. // CredentialIssuerStatus describes the status of the Concierge.
type CredentialIssuerStatus struct { type CredentialIssuerStatus struct {
// List of integration strategies that were attempted by Pinniped. // List of integration strategies that were attempted by Pinniped.
Strategies []CredentialIssuerStrategy `json:"strategies"` Strategies []CredentialIssuerStrategy `json:"strategies"`
@ -47,7 +51,8 @@ type CredentialIssuerStatus struct {
KubeConfigInfo *CredentialIssuerKubeConfigInfo `json:"kubeConfigInfo,omitempty"` KubeConfigInfo *CredentialIssuerKubeConfigInfo `json:"kubeConfigInfo,omitempty"`
} }
// Information needed to form a valid Pinniped-based kubeconfig using this credential issuer. // CredentialIssuerKubeConfigInfo provides the information needed to form a valid Pinniped-based kubeconfig using this credential issuer.
// This type is deprecated and will be removed in a future version.
type CredentialIssuerKubeConfigInfo struct { type CredentialIssuerKubeConfigInfo struct {
// The K8s API server URL. // The K8s API server URL.
// +kubebuilder:validation:MinLength=1 // +kubebuilder:validation:MinLength=1
@ -59,7 +64,7 @@ type CredentialIssuerKubeConfigInfo struct {
CertificateAuthorityData string `json:"certificateAuthorityData"` CertificateAuthorityData string `json:"certificateAuthorityData"`
} }
// Status of an integration strategy that was attempted by Pinniped. // CredentialIssuerStrategy describes the status of an integration strategy that was attempted by Pinniped.
type CredentialIssuerStrategy struct { type CredentialIssuerStrategy struct {
// Type of integration attempted. // Type of integration attempted.
Type StrategyType `json:"type"` Type StrategyType `json:"type"`
@ -81,6 +86,7 @@ type CredentialIssuerStrategy struct {
Frontend *CredentialIssuerFrontend `json:"frontend,omitempty"` Frontend *CredentialIssuerFrontend `json:"frontend,omitempty"`
} }
// CredentialIssuerFrontend describes how to connect using a particular integration strategy.
type CredentialIssuerFrontend struct { type CredentialIssuerFrontend struct {
// Type describes which frontend mechanism clients can use with a strategy. // Type describes which frontend mechanism clients can use with a strategy.
Type FrontendType `json:"type"` Type FrontendType `json:"type"`
@ -118,7 +124,7 @@ type ImpersonationProxyInfo struct {
CertificateAuthorityData string `json:"certificateAuthorityData"` CertificateAuthorityData string `json:"certificateAuthorityData"`
} }
// Describes the configuration status of a Pinniped credential issuer. // CredentialIssuer describes the configuration and status of the Pinniped Concierge credential issuer.
// +genclient // +genclient
// +genclient:nonNamespaced // +genclient:nonNamespaced
// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
@ -133,7 +139,7 @@ type CredentialIssuer struct {
Status CredentialIssuerStatus `json:"status"` Status CredentialIssuerStatus `json:"status"`
} }
// List of CredentialIssuer objects. // CredentialIssuerList is a list of CredentialIssuer objects.
// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
type CredentialIssuerList struct { type CredentialIssuerList struct {
metav1.TypeMeta `json:",inline"` metav1.TypeMeta `json:",inline"`

View File

@ -21,7 +21,8 @@ spec:
- name: v1alpha1 - name: v1alpha1
schema: schema:
openAPIV3Schema: openAPIV3Schema:
description: Describes the configuration status of a Pinniped credential issuer. description: CredentialIssuer describes the configuration and status of the
Pinniped Concierge credential issuer.
properties: properties:
apiVersion: apiVersion:
description: 'APIVersion defines the versioned schema of this representation description: 'APIVersion defines the versioned schema of this representation
@ -60,8 +61,8 @@ spec:
description: List of integration strategies that were attempted by description: List of integration strategies that were attempted by
Pinniped. Pinniped.
items: items:
description: Status of an integration strategy that was attempted description: CredentialIssuerStrategy describes the status of an
by Pinniped. integration strategy that was attempted by Pinniped.
properties: properties:
frontend: frontend:
description: Frontend describes how clients can connect using description: Frontend describes how clients can connect using

View File

@ -220,7 +220,7 @@ Package v1alpha1 is the v1alpha1 version of the Pinniped concierge configuration
[id="{anchor_prefix}-go-pinniped-dev-generated-1-20-apis-concierge-config-v1alpha1-credentialissuer"] [id="{anchor_prefix}-go-pinniped-dev-generated-1-20-apis-concierge-config-v1alpha1-credentialissuer"]
==== CredentialIssuer ==== CredentialIssuer
Describes the configuration status of a Pinniped credential issuer. CredentialIssuer describes the configuration and status of the Pinniped Concierge credential issuer.
.Appears In: .Appears In:
**** ****
@ -278,7 +278,7 @@ Describes the configuration status of a Pinniped credential issuer.
[id="{anchor_prefix}-go-pinniped-dev-generated-1-20-apis-concierge-config-v1alpha1-credentialissuerstatus"] [id="{anchor_prefix}-go-pinniped-dev-generated-1-20-apis-concierge-config-v1alpha1-credentialissuerstatus"]
==== CredentialIssuerStatus ==== CredentialIssuerStatus
Status of a credential issuer. CredentialIssuerStatus describes the status of the Concierge.
.Appears In: .Appears In:
**** ****

View File

@ -5,15 +5,19 @@ package v1alpha1
import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
// StrategyType enumerates a type of "strategy" used to implement credential access on a cluster.
// +kubebuilder:validation:Enum=KubeClusterSigningCertificate;ImpersonationProxy // +kubebuilder:validation:Enum=KubeClusterSigningCertificate;ImpersonationProxy
type StrategyType string type StrategyType string
// FrontendType enumerates a type of "frontend" used to provide access to users of a cluster.
// +kubebuilder:validation:Enum=TokenCredentialRequestAPI;ImpersonationProxy // +kubebuilder:validation:Enum=TokenCredentialRequestAPI;ImpersonationProxy
type FrontendType string type FrontendType string
// StrategyStatus enumerates whether a strategy is working on a cluster.
// +kubebuilder:validation:Enum=Success;Error // +kubebuilder:validation:Enum=Success;Error
type StrategyStatus string type StrategyStatus string
// StrategyReason enumerates the detailed reason why a strategy is in a particular status.
// +kubebuilder:validation:Enum=Listening;Pending;Disabled;ErrorDuringSetup;CouldNotFetchKey;CouldNotGetClusterInfo;FetchedKey // +kubebuilder:validation:Enum=Listening;Pending;Disabled;ErrorDuringSetup;CouldNotFetchKey;CouldNotGetClusterInfo;FetchedKey
type StrategyReason string type StrategyReason string
@ -36,7 +40,7 @@ const (
FetchedKeyStrategyReason = StrategyReason("FetchedKey") FetchedKeyStrategyReason = StrategyReason("FetchedKey")
) )
// Status of a credential issuer. // CredentialIssuerStatus describes the status of the Concierge.
type CredentialIssuerStatus struct { type CredentialIssuerStatus struct {
// List of integration strategies that were attempted by Pinniped. // List of integration strategies that were attempted by Pinniped.
Strategies []CredentialIssuerStrategy `json:"strategies"` Strategies []CredentialIssuerStrategy `json:"strategies"`
@ -47,7 +51,8 @@ type CredentialIssuerStatus struct {
KubeConfigInfo *CredentialIssuerKubeConfigInfo `json:"kubeConfigInfo,omitempty"` KubeConfigInfo *CredentialIssuerKubeConfigInfo `json:"kubeConfigInfo,omitempty"`
} }
// Information needed to form a valid Pinniped-based kubeconfig using this credential issuer. // CredentialIssuerKubeConfigInfo provides the information needed to form a valid Pinniped-based kubeconfig using this credential issuer.
// This type is deprecated and will be removed in a future version.
type CredentialIssuerKubeConfigInfo struct { type CredentialIssuerKubeConfigInfo struct {
// The K8s API server URL. // The K8s API server URL.
// +kubebuilder:validation:MinLength=1 // +kubebuilder:validation:MinLength=1
@ -59,7 +64,7 @@ type CredentialIssuerKubeConfigInfo struct {
CertificateAuthorityData string `json:"certificateAuthorityData"` CertificateAuthorityData string `json:"certificateAuthorityData"`
} }
// Status of an integration strategy that was attempted by Pinniped. // CredentialIssuerStrategy describes the status of an integration strategy that was attempted by Pinniped.
type CredentialIssuerStrategy struct { type CredentialIssuerStrategy struct {
// Type of integration attempted. // Type of integration attempted.
Type StrategyType `json:"type"` Type StrategyType `json:"type"`
@ -81,6 +86,7 @@ type CredentialIssuerStrategy struct {
Frontend *CredentialIssuerFrontend `json:"frontend,omitempty"` Frontend *CredentialIssuerFrontend `json:"frontend,omitempty"`
} }
// CredentialIssuerFrontend describes how to connect using a particular integration strategy.
type CredentialIssuerFrontend struct { type CredentialIssuerFrontend struct {
// Type describes which frontend mechanism clients can use with a strategy. // Type describes which frontend mechanism clients can use with a strategy.
Type FrontendType `json:"type"` Type FrontendType `json:"type"`
@ -118,7 +124,7 @@ type ImpersonationProxyInfo struct {
CertificateAuthorityData string `json:"certificateAuthorityData"` CertificateAuthorityData string `json:"certificateAuthorityData"`
} }
// Describes the configuration status of a Pinniped credential issuer. // CredentialIssuer describes the configuration and status of the Pinniped Concierge credential issuer.
// +genclient // +genclient
// +genclient:nonNamespaced // +genclient:nonNamespaced
// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
@ -133,7 +139,7 @@ type CredentialIssuer struct {
Status CredentialIssuerStatus `json:"status"` Status CredentialIssuerStatus `json:"status"`
} }
// List of CredentialIssuer objects. // CredentialIssuerList is a list of CredentialIssuer objects.
// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
type CredentialIssuerList struct { type CredentialIssuerList struct {
metav1.TypeMeta `json:",inline"` metav1.TypeMeta `json:",inline"`

View File

@ -21,7 +21,8 @@ spec:
- name: v1alpha1 - name: v1alpha1
schema: schema:
openAPIV3Schema: openAPIV3Schema:
description: Describes the configuration status of a Pinniped credential issuer. description: CredentialIssuer describes the configuration and status of the
Pinniped Concierge credential issuer.
properties: properties:
apiVersion: apiVersion:
description: 'APIVersion defines the versioned schema of this representation description: 'APIVersion defines the versioned schema of this representation
@ -60,8 +61,8 @@ spec:
description: List of integration strategies that were attempted by description: List of integration strategies that were attempted by
Pinniped. Pinniped.
items: items:
description: Status of an integration strategy that was attempted description: CredentialIssuerStrategy describes the status of an
by Pinniped. integration strategy that was attempted by Pinniped.
properties: properties:
frontend: frontend:
description: Frontend describes how clients can connect using description: Frontend describes how clients can connect using

View File

@ -5,15 +5,19 @@ package v1alpha1
import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
// StrategyType enumerates a type of "strategy" used to implement credential access on a cluster.
// +kubebuilder:validation:Enum=KubeClusterSigningCertificate;ImpersonationProxy // +kubebuilder:validation:Enum=KubeClusterSigningCertificate;ImpersonationProxy
type StrategyType string type StrategyType string
// FrontendType enumerates a type of "frontend" used to provide access to users of a cluster.
// +kubebuilder:validation:Enum=TokenCredentialRequestAPI;ImpersonationProxy // +kubebuilder:validation:Enum=TokenCredentialRequestAPI;ImpersonationProxy
type FrontendType string type FrontendType string
// StrategyStatus enumerates whether a strategy is working on a cluster.
// +kubebuilder:validation:Enum=Success;Error // +kubebuilder:validation:Enum=Success;Error
type StrategyStatus string type StrategyStatus string
// StrategyReason enumerates the detailed reason why a strategy is in a particular status.
// +kubebuilder:validation:Enum=Listening;Pending;Disabled;ErrorDuringSetup;CouldNotFetchKey;CouldNotGetClusterInfo;FetchedKey // +kubebuilder:validation:Enum=Listening;Pending;Disabled;ErrorDuringSetup;CouldNotFetchKey;CouldNotGetClusterInfo;FetchedKey
type StrategyReason string type StrategyReason string
@ -36,7 +40,7 @@ const (
FetchedKeyStrategyReason = StrategyReason("FetchedKey") FetchedKeyStrategyReason = StrategyReason("FetchedKey")
) )
// Status of a credential issuer. // CredentialIssuerStatus describes the status of the Concierge.
type CredentialIssuerStatus struct { type CredentialIssuerStatus struct {
// List of integration strategies that were attempted by Pinniped. // List of integration strategies that were attempted by Pinniped.
Strategies []CredentialIssuerStrategy `json:"strategies"` Strategies []CredentialIssuerStrategy `json:"strategies"`
@ -47,7 +51,8 @@ type CredentialIssuerStatus struct {
KubeConfigInfo *CredentialIssuerKubeConfigInfo `json:"kubeConfigInfo,omitempty"` KubeConfigInfo *CredentialIssuerKubeConfigInfo `json:"kubeConfigInfo,omitempty"`
} }
// Information needed to form a valid Pinniped-based kubeconfig using this credential issuer. // CredentialIssuerKubeConfigInfo provides the information needed to form a valid Pinniped-based kubeconfig using this credential issuer.
// This type is deprecated and will be removed in a future version.
type CredentialIssuerKubeConfigInfo struct { type CredentialIssuerKubeConfigInfo struct {
// The K8s API server URL. // The K8s API server URL.
// +kubebuilder:validation:MinLength=1 // +kubebuilder:validation:MinLength=1
@ -59,7 +64,7 @@ type CredentialIssuerKubeConfigInfo struct {
CertificateAuthorityData string `json:"certificateAuthorityData"` CertificateAuthorityData string `json:"certificateAuthorityData"`
} }
// Status of an integration strategy that was attempted by Pinniped. // CredentialIssuerStrategy describes the status of an integration strategy that was attempted by Pinniped.
type CredentialIssuerStrategy struct { type CredentialIssuerStrategy struct {
// Type of integration attempted. // Type of integration attempted.
Type StrategyType `json:"type"` Type StrategyType `json:"type"`
@ -81,6 +86,7 @@ type CredentialIssuerStrategy struct {
Frontend *CredentialIssuerFrontend `json:"frontend,omitempty"` Frontend *CredentialIssuerFrontend `json:"frontend,omitempty"`
} }
// CredentialIssuerFrontend describes how to connect using a particular integration strategy.
type CredentialIssuerFrontend struct { type CredentialIssuerFrontend struct {
// Type describes which frontend mechanism clients can use with a strategy. // Type describes which frontend mechanism clients can use with a strategy.
Type FrontendType `json:"type"` Type FrontendType `json:"type"`
@ -118,7 +124,7 @@ type ImpersonationProxyInfo struct {
CertificateAuthorityData string `json:"certificateAuthorityData"` CertificateAuthorityData string `json:"certificateAuthorityData"`
} }
// Describes the configuration status of a Pinniped credential issuer. // CredentialIssuer describes the configuration and status of the Pinniped Concierge credential issuer.
// +genclient // +genclient
// +genclient:nonNamespaced // +genclient:nonNamespaced
// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
@ -133,7 +139,7 @@ type CredentialIssuer struct {
Status CredentialIssuerStatus `json:"status"` Status CredentialIssuerStatus `json:"status"`
} }
// List of CredentialIssuer objects. // CredentialIssuerList is a list of CredentialIssuer objects.
// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
type CredentialIssuerList struct { type CredentialIssuerList struct {
metav1.TypeMeta `json:",inline"` metav1.TypeMeta `json:",inline"`