github/paralus
1
0
Fork 0
mirror of https://github.com/paralus/paralus.git synced 2026-08-24 15:47:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

added ability to conifigure SA account lifetime with validation

Browse Source 
Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>
This commit is contained in:
mabhi
2023-02-07 08:32:01 +05:30
parent f9a0792362
commit 42bf234fc1
12 changed files with 392 additions and 299 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/kubeconfig.go
+4 -1
View File
@@ -106,13 +106,15 @@ func (s *kubeConfigServer) GetOrganizationSetting(ctx context.Context, req *sent
}
ks, err := s.kss.Get(ctx, opts.Organization, "", false)
if err == constants.ErrNotFound {
return &sentryrpc.GetKubeconfigSettingResponse{ValiditySeconds: 31536000}, nil
// default values for ValiditySeconds and SaValiditySeconds: 8 hours
return &sentryrpc.GetKubeconfigSettingResponse{ValiditySeconds: 28800, SaValiditySeconds: 28800}, nil
} else if err != nil {
return nil, err
}
resp := &sentryrpc.GetKubeconfigSettingResponse{
ValiditySeconds: ks.ValiditySeconds,
SaValiditySeconds: ks.SaValiditySeconds,
EnableSessionCheck: ks.EnableSessionCheck,
EnablePrivateRelay: ks.EnablePrivateRelay,
EnforceOrgAdminSecretAccess: ks.EnforceOrgAdminSecretAccess,
@@ -162,6 +164,7 @@ func (s *kubeConfigServer) UpdateOrganizationSetting(ctx context.Context, req *s
PartnerID: opts.Partner,
AccountID: "",
ValiditySeconds: req.ValiditySeconds,
SaValiditySeconds: req.SaValiditySeconds,
EnableSessionCheck: req.EnableSessionCheck,
EnablePrivateRelay: req.EnablePrivateRelay,
EnforceOrgAdminSecretAccess: req.EnforceOrgAdminSecretAccess,