|
|
@@ -519,7 +519,8 @@ export const IDENTITY_ADDITIONAL_PRIVILEGE = {
|
|
|
|
projectSlug: "The slug of the project of the identity in.",
|
|
|
|
projectSlug: "The slug of the project of the identity in.",
|
|
|
|
identityId: "The ID of the identity to create.",
|
|
|
|
identityId: "The ID of the identity to create.",
|
|
|
|
slug: "The slug of the privilege to create.",
|
|
|
|
slug: "The slug of the privilege to create.",
|
|
|
|
permissions: `The permission object for the privilege.
|
|
|
|
permissions: `@deprecated - use privilegePermission
|
|
|
|
|
|
|
|
The permission object for the privilege.
|
|
|
|
- Read secrets
|
|
|
|
- Read secrets
|
|
|
|
\`\`\`
|
|
|
|
\`\`\`
|
|
|
|
{ "permissions": [{"action": "read", "subject": "secrets"]}
|
|
|
|
{ "permissions": [{"action": "read", "subject": "secrets"]}
|
|
|
@@ -533,6 +534,7 @@ export const IDENTITY_ADDITIONAL_PRIVILEGE = {
|
|
|
|
- { "permissions": [{"action": "read", "subject": "secrets", "conditions": { "environment": "dev", "secretPath": { "$glob": "/" } }}] }
|
|
|
|
- { "permissions": [{"action": "read", "subject": "secrets", "conditions": { "environment": "dev", "secretPath": { "$glob": "/" } }}] }
|
|
|
|
\`\`\`
|
|
|
|
\`\`\`
|
|
|
|
`,
|
|
|
|
`,
|
|
|
|
|
|
|
|
privilegePermission: "The permission object for the privilege.",
|
|
|
|
isPackPermission: "Whether the server should pack(compact) the permission object.",
|
|
|
|
isPackPermission: "Whether the server should pack(compact) the permission object.",
|
|
|
|
isTemporary: "Whether the privilege is temporary.",
|
|
|
|
isTemporary: "Whether the privilege is temporary.",
|
|
|
|
temporaryMode: "Type of temporary access given. Types: relative",
|
|
|
|
temporaryMode: "Type of temporary access given. Types: relative",
|
|
|
@@ -544,7 +546,8 @@ export const IDENTITY_ADDITIONAL_PRIVILEGE = {
|
|
|
|
identityId: "The ID of the identity to update.",
|
|
|
|
identityId: "The ID of the identity to update.",
|
|
|
|
slug: "The slug of the privilege to update.",
|
|
|
|
slug: "The slug of the privilege to update.",
|
|
|
|
newSlug: "The new slug of the privilege to update.",
|
|
|
|
newSlug: "The new slug of the privilege to update.",
|
|
|
|
permissions: `The permission object for the privilege.
|
|
|
|
permissions: `@deprecated - use privilegePermission
|
|
|
|
|
|
|
|
The permission object for the privilege.
|
|
|
|
- Read secrets
|
|
|
|
- Read secrets
|
|
|
|
\`\`\`
|
|
|
|
\`\`\`
|
|
|
|
{ "permissions": [{"action": "read", "subject": "secrets"]}
|
|
|
|
{ "permissions": [{"action": "read", "subject": "secrets"]}
|
|
|
@@ -558,6 +561,7 @@ export const IDENTITY_ADDITIONAL_PRIVILEGE = {
|
|
|
|
- { "permissions": [{"action": "read", "subject": "secrets", "conditions": { "environment": "dev", "secretPath": { "$glob": "/" } }}] }
|
|
|
|
- { "permissions": [{"action": "read", "subject": "secrets", "conditions": { "environment": "dev", "secretPath": { "$glob": "/" } }}] }
|
|
|
|
\`\`\`
|
|
|
|
\`\`\`
|
|
|
|
`,
|
|
|
|
`,
|
|
|
|
|
|
|
|
privilegePermission: "The permission object for the privilege.",
|
|
|
|
isTemporary: "Whether the privilege is temporary.",
|
|
|
|
isTemporary: "Whether the privilege is temporary.",
|
|
|
|
temporaryMode: "Type of temporary access given. Types: relative",
|
|
|
|
temporaryMode: "Type of temporary access given. Types: relative",
|
|
|
|
temporaryRange: "TTL for the temporay time. Eg: 1m, 1h, 1d",
|
|
|
|
temporaryRange: "TTL for the temporay time. Eg: 1m, 1h, 1d",
|
|
|
@@ -715,3 +719,32 @@ export const AUDIT_LOG_STREAMS = {
|
|
|
|
id: "The ID of the audit log stream to get details."
|
|
|
|
id: "The ID of the audit log stream to get details."
|
|
|
|
}
|
|
|
|
}
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
export const PROJECT_ROLE = {
|
|
|
|
|
|
|
|
CREATE: {
|
|
|
|
|
|
|
|
projectSlug: "The slug of the project to create role.",
|
|
|
|
|
|
|
|
slug: "The slug of the role.",
|
|
|
|
|
|
|
|
name: "The name of the role.",
|
|
|
|
|
|
|
|
description: "The description for the role.",
|
|
|
|
|
|
|
|
permissions: "The permissions assigned to the role."
|
|
|
|
|
|
|
|
},
|
|
|
|
|
|
|
|
UPDATE: {
|
|
|
|
|
|
|
|
projectSlug: "The slug of the project to update role.",
|
|
|
|
|
|
|
|
roleId: "The ID of the role to update",
|
|
|
|
|
|
|
|
slug: "The slug of the role.",
|
|
|
|
|
|
|
|
name: "The name of the role.",
|
|
|
|
|
|
|
|
description: "The description for the role.",
|
|
|
|
|
|
|
|
permissions: "The permissions assigned to the role."
|
|
|
|
|
|
|
|
},
|
|
|
|
|
|
|
|
DELETE: {
|
|
|
|
|
|
|
|
projectSlug: "The slug of the project to delete role.",
|
|
|
|
|
|
|
|
roleId: "The ID of the role to update"
|
|
|
|
|
|
|
|
},
|
|
|
|
|
|
|
|
GET_ROLE_BY_SLUG: {
|
|
|
|
|
|
|
|
projectSlug: "The slug of the project.",
|
|
|
|
|
|
|
|
roleSlug: "The slug of the role to get details"
|
|
|
|
|
|
|
|
},
|
|
|
|
|
|
|
|
LIST: {
|
|
|
|
|
|
|
|
projectSlug: "The slug of the project to list roles."
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
};
|
|
|
|