69 lines
2.4 KiB
YAML
69 lines
2.4 KiB
YAML
$schema: "http://json-schema.org/draft-06/schema#"
|
|
|
|
title: compute alpha AuthenticationPolicy export schema
|
|
description: A gcloud export/import command YAML validation schema.
|
|
type: object
|
|
additionalProperties: false
|
|
properties:
|
|
COMMENT:
|
|
type: object
|
|
description: User specified info ignored by gcloud import.
|
|
additionalProperties: false
|
|
properties:
|
|
template-id:
|
|
type: string
|
|
region:
|
|
type: string
|
|
description:
|
|
type: string
|
|
date:
|
|
type: string
|
|
version:
|
|
type: string
|
|
UNKNOWN:
|
|
type: array
|
|
description: Unknown API fields that cannot be imported.
|
|
items:
|
|
type: string
|
|
origins:
|
|
description: |-
|
|
List of authentication methods that can be used for origin authentication.
|
|
Similar to peers, these will be evaluated in order the first valid one
|
|
will be used to set origin identity. If none of these methods pass, the
|
|
request will be rejected with authentication failed error (401). Leave the
|
|
list empty if origin authentication is not required.
|
|
type: array
|
|
items:
|
|
$ref: OriginAuthenticationMethod.yaml
|
|
peers:
|
|
description: |-
|
|
List of authentication methods that can be used for peer
|
|
authentication. They will be evaluated in order the first valid one
|
|
will be used to set peer identity. If none of these methods pass, the
|
|
request will be rejected with authentication failed error (401). Leave
|
|
the list empty if peer authentication is not required.
|
|
type: array
|
|
items:
|
|
$ref: PeerAuthenticationMethod.yaml
|
|
principalBinding:
|
|
description: |-
|
|
Define whether peer or origin identity should be used for
|
|
principal. Default value is USE_PEER. If peer (or origin) identity
|
|
is not available, either because peer/origin authentication is not
|
|
defined, or failed, principal will be left unset. In other words,
|
|
binding rule does not affect the decision to accept or reject
|
|
request. This field can be set to one of the following: USE_PEER:
|
|
Principal will be set to the identity from peer authentication.
|
|
USE_ORIGIN: Principal will be set to the identity from origin
|
|
authentication.
|
|
type: string
|
|
enum:
|
|
- INVALID
|
|
- USE_ORIGIN
|
|
- USE_PEER
|
|
serverTlsContext:
|
|
description: |-
|
|
Configures the mechanism to obtain server-side security
|
|
certificates and identity information.
|
|
$ref: TlsContext.yaml
|