awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-08 14:28:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

Feat(agent): Multiple auth methods

Browse Source
This commit is contained in:
Daniel Hougaard
2024-06-14 23:09:31 +02:00
parent 9b2a2eda0c
commit 0b54099789
2 changed files with 45 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
cli/packages/util/auth.go
+16 -4
View File
@@ -3,16 +3,28 @@ package util
type AuthStrategyType string type AuthStrategyType string
var AuthStrategy = struct { var AuthStrategy = struct {
UNIVERSAL_AUTH AuthStrategyType UNIVERSAL_AUTH AuthStrategyType
KUBERNETES_AUTH AuthStrategyType KUBERNETES_AUTH AuthStrategyType
AZURE_AUTH AuthStrategyType
GCP_ID_TOKEN_AUTH AuthStrategyType
GCP_IAM_AUTH AuthStrategyType
AWS_IAM_AUTH AuthStrategyType
}{ }{
UNIVERSAL_AUTH: "universal-auth", UNIVERSAL_AUTH: "universal-auth",
KUBERNETES_AUTH: "kubernetes", KUBERNETES_AUTH: "kubernetes",
AZURE_AUTH: "azure",
GCP_ID_TOKEN_AUTH: "gcp-id-token",
GCP_IAM_AUTH: "gcp-iam",
AWS_IAM_AUTH: "aws-iam",
} }
var AVAILABLE_AUTH_STRATEGIES = []AuthStrategyType{ var AVAILABLE_AUTH_STRATEGIES = []AuthStrategyType{
AuthStrategy.UNIVERSAL_AUTH, AuthStrategy.UNIVERSAL_AUTH,
AuthStrategy.KUBERNETES_AUTH, AuthStrategy.KUBERNETES_AUTH,
AuthStrategy.AZURE_AUTH,
AuthStrategy.GCP_ID_TOKEN_AUTH,
AuthStrategy.GCP_IAM_AUTH,
AuthStrategy.AWS_IAM_AUTH,
} }
func IsAuthMethodValid(authMethod string) (isValid bool, strategy AuthStrategyType) { func IsAuthMethodValid(authMethod string) (isValid bool, strategy AuthStrategyType) {
cli/packages/util/constants.go
+29 -12
View File
@@ -1,20 +1,37 @@
package util package util
const ( const (
CONFIG_FILE_NAME = "infisical-config.json" CONFIG_FILE_NAME = "infisical-config.json"
CONFIG_FOLDER_NAME = ".infisical" CONFIG_FOLDER_NAME = ".infisical"
INFISICAL_DEFAULT_API_URL = "https://app.infisical.com/api" INFISICAL_DEFAULT_API_URL = "https://app.infisical.com/api"
INFISICAL_DEFAULT_URL = "https://app.infisical.com" INFISICAL_DEFAULT_URL = "https://app.infisical.com"
INFISICAL_WORKSPACE_CONFIG_FILE_NAME = ".infisical.json" INFISICAL_WORKSPACE_CONFIG_FILE_NAME = ".infisical.json"
INFISICAL_TOKEN_NAME = "INFISICAL_TOKEN" INFISICAL_TOKEN_NAME = "INFISICAL_TOKEN"
INFISICAL_UNIVERSAL_AUTH_ACCESS_TOKEN_NAME = "INFISICAL_UNIVERSAL_AUTH_ACCESS_TOKEN"
// Universal Auth
INFISICAL_UNIVERSAL_AUTH_CLIENT_ID_NAME = "INFISICAL_UNIVERSAL_AUTH_CLIENT_ID" INFISICAL_UNIVERSAL_AUTH_CLIENT_ID_NAME = "INFISICAL_UNIVERSAL_AUTH_CLIENT_ID"
INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET_NAME = "INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET" INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET_NAME = "INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET"
INFISICAL_UNIVERSAL_AUTH_ACCESS_TOKEN_NAME = "INFISICAL_UNIVERSAL_AUTH_ACCESS_TOKEN"
SECRET_TYPE_PERSONAL = "personal" // Kubernetes auth
SECRET_TYPE_SHARED = "shared" INFISICAL_KUBERNETES_IDENTITY_ID_NAME = "INFISICAL_KUBERNETES_IDENTITY_ID"
KEYRING_SERVICE_NAME = "infisical" INFISICAL_KUBERNETES_SERVICE_ACCOUNT_TOKEN_NAME = "INFISICAL_KUBERNETES_SERVICE_ACCOUNT_TOKEN_PATH"
PERSONAL_SECRET_TYPE_NAME = "personal"
SHARED_SECRET_TYPE_NAME = "shared" // Azure Auth
INFISICAL_AZURE_AUTH_IDENTITY_ID_NAME = "INFISICAL_AZURE_AUTH_IDENTITY_ID"
// GCP Auth
INFISICAL_GCP_AUTH_IDENTITY_ID_NAME = "INFISICAL_GCP_AUTH_IDENTITY_ID"
INFISICAL_GCP_IAM_SERVICE_ACCOUNT_KEY_FILE_PATH_NAME = "INFISICAL_GCP_IAM_SERVICE_ACCOUNT_KEY_FILE_PATH"
// AWS Auth
INFISICAL_AWS_IAM_AUTH_IDENTITY_ID_NAME = "INFISICAL_AWS_IAM_AUTH_IDENTITY_ID"
SECRET_TYPE_PERSONAL = "personal"
SECRET_TYPE_SHARED = "shared"
KEYRING_SERVICE_NAME = "infisical"
PERSONAL_SECRET_TYPE_NAME = "personal"
SHARED_SECRET_TYPE_NAME = "shared"
SERVICE_TOKEN_IDENTIFIER = "service-token" SERVICE_TOKEN_IDENTIFIER = "service-token"
UNIVERSAL_AUTH_TOKEN_IDENTIFIER = "universal-auth-token" UNIVERSAL_AUTH_TOKEN_IDENTIFIER = "universal-auth-token"