Documentation
¶
Overview ¶
Package facts defines normalized authentication, user, and host data shared by inventory resolution and policy evaluation, without transport metadata.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Authentication ¶
Authentication contains inventory's verified identity and session bound. It deliberately contains no bearer credentials or provider-specific claims.
func (Authentication) Validate ¶
func (a Authentication) Validate() error
Validate checks the verified identity and its absolute lifetime bound.
type HostResource ¶
type HostResource struct {
Names []string `json:"names"`
Labels map[string]string `json:"labels"`
// Raw JSON preserves the security-significant distinction between omitted,
// null (ungrounded), and [] (grounded with no permitted accounts).
Accounts json.RawMessage `json:"accounts"`
}
func (HostResource) AccountList ¶
func (h HostResource) AccountList() ([]string, error)
func (HostResource) Validate ¶
func (h HostResource) Validate() error
Validate checks host fields whose omission could broaden authorization.
type User ¶
type User struct {
ID string `json:"id"`
UserName string `json:"userName"`
Active *bool `json:"active"`
Groups []string `json:"groups"`
UserType string `json:"userType,omitempty"`
Department string `json:"department,omitempty"`
Organization string `json:"organization,omitempty"`
}
User contains the directory attributes used by policy. External directory protocols are translated into these facts at the inventory boundary.
Click to show internal directories.
Click to hide internal directories.