File: tunnel_access_scopes.go

package info (click to toggle)
golang-github-microsoft-dev-tunnels 0.0.25-2
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid, trixie
  • size: 2,988 kB
  • sloc: cs: 9,969; java: 2,767; javascript: 328; xml: 186; makefile: 5
file content (38 lines) | stat: -rw-r--r-- 1,617 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
// Copyright (c) Microsoft Corporation.
// Licensed under the MIT license.
// Generated from ../../../cs/src/Contracts/TunnelAccessScopes.cs

package tunnels

// Defines scopes for tunnel access tokens.
//
// A tunnel access token with one or more of these scopes typically also has cluster ID
// and tunnel ID claims that limit the access scope to a specific tunnel, and may also
// have one or more port claims that further limit the access to particular ports of the
// tunnel.
type TunnelAccessScopes []TunnelAccessScope
type TunnelAccessScope string

const (
	// Allows creating tunnels. This scope is valid only in policies at the global, domain,
	// or organization level; it is not relevant to an already-created tunnel or tunnel port.
	// (Creation of ports requires "manage" or "host" access to the tunnel.)
	TunnelAccessScopeCreate      TunnelAccessScope = "create"

	// Allows management operations on tunnels and tunnel ports.
	TunnelAccessScopeManage      TunnelAccessScope = "manage"

	// Allows management operations on all ports of a tunnel, but does not allow updating any
	// other tunnel properties or deleting the tunnel.
	TunnelAccessScopeManagePorts TunnelAccessScope = "manage:ports"

	// Allows accepting connections on tunnels as a host. Includes access to update tunnel
	// endpoints and ports.
	TunnelAccessScopeHost        TunnelAccessScope = "host"

	// Allows inspecting tunnel connection activity and data.
	TunnelAccessScopeInspect     TunnelAccessScope = "inspect"

	// Allows connecting to tunnels or ports as a client.
	TunnelAccessScopeConnect     TunnelAccessScope = "connect"
)