Documentation
¶
Index ¶
- Variables
- func ListBootstrapServerAdmins(state BootstrapCoreState) []string
- func RepairBootstrapCoreDefaultACLs(state BootstrapCoreState, orgFilter, superuserName string) (BootstrapCoreState, AdminRepairResult)
- func RepairCoreObjectDefaultACLs(state CoreObjectState, orgFilter, superuserName string) (CoreObjectState, AdminRepairResult)
- func ValidCookbookRouteVersion(value string) bool
- func ValidSandboxChecksum(value string) bool
- type AdminRepairResult
- type BootstrapCoreOrganizationState
- type BootstrapCoreState
- func AddActorToBootstrapCoreGroup(state BootstrapCoreState, orgName, groupName, actorType, actorName string) (BootstrapCoreState, []string, error)
- func AddUserToBootstrapCoreOrg(state BootstrapCoreState, orgName, username string, admin bool) (BootstrapCoreState, []string, error)
- func CloneBootstrapCoreState(state BootstrapCoreState) BootstrapCoreState
- func GrantBootstrapServerAdmin(state BootstrapCoreState, username string) (BootstrapCoreState, []string, error)
- func RemoveActorFromBootstrapCoreGroup(state BootstrapCoreState, orgName, groupName, actorType, actorName string) (BootstrapCoreState, []string, error)
- func RemoveUserFromBootstrapCoreOrg(state BootstrapCoreState, orgName, username string, force bool) (BootstrapCoreState, []string, error)
- func RevokeBootstrapServerAdmin(state BootstrapCoreState, username string) (BootstrapCoreState, []string, error)
- type BootstrapCoreStore
- type Client
- type Container
- type CookbookArtifact
- type CookbookFile
- type CookbookStore
- type CookbookVersion
- type CookbookVersionRef
- type CoreObjectOrganizationState
- type CoreObjectState
- type CoreObjectStore
- type CreateClientInput
- type CreateCookbookArtifactInput
- type CreateDataBagInput
- type CreateDataBagItemInput
- type CreateEnvironmentInput
- type CreateKeyInput
- type CreateNodeInput
- type CreateOrganizationInput
- type CreatePolicyRevisionInput
- type CreateRoleInput
- type CreateSandboxInput
- type CreateUserInput
- type DataBag
- type DataBagItem
- type DepsolverError
- type Environment
- type FrozenCookbookError
- type Group
- type KeyMaterial
- type KeyRecord
- type MemoryBootstrapCoreStore
- type MemoryCoreObjectStore
- type MissingChecksumError
- type Node
- type Options
- type Organization
- type PolicyAssignmentPlan
- type PolicyGroup
- type PolicyRevision
- type RepairDefaultACLsInput
- type RepairDefaultACLsResult
- type RepairGroupMembershipInput
- type RepairMembershipResult
- type RepairOrgMembershipInput
- type RepairServerAdminMembershipInput
- type Role
- type Sandbox
- type Service
- func (s *Service) AddUserToGroup(orgName, groupName, username string) error
- func (s *Service) CleanupUnreferencedChecksums(candidates []string, cleanup func(string) error) error
- func (s *Service) CookbookUniverse(orgName string) (map[string][]UniverseEntry, bool)
- func (s *Service) CreateClient(orgName string, input CreateClientInput) (Client, *KeyMaterial, error)
- func (s *Service) CreateClientKey(orgName, clientName string, input CreateKeyInput) (*KeyMaterial, error)
- func (s *Service) CreateCookbookArtifact(orgName string, input CreateCookbookArtifactInput) (CookbookArtifact, error)
- func (s *Service) CreateDataBag(orgName string, input CreateDataBagInput) (DataBag, error)
- func (s *Service) CreateDataBagItem(orgName, bagName string, input CreateDataBagItemInput) (DataBagItem, error)
- func (s *Service) CreateEnvironment(orgName string, input CreateEnvironmentInput) (Environment, error)
- func (s *Service) CreateNode(orgName string, input CreateNodeInput) (Node, error)
- func (s *Service) CreateOrganization(input CreateOrganizationInput) (Organization, Client, *KeyMaterial, error)
- func (s *Service) CreatePolicyRevision(orgName, targetName string, input CreatePolicyRevisionInput) (PolicyRevision, error)
- func (s *Service) CreateRole(orgName string, input CreateRoleInput) (Role, error)
- func (s *Service) CreateSandbox(orgName string, input CreateSandboxInput) (Sandbox, error)
- func (s *Service) CreateUser(input CreateUserInput) (User, *KeyMaterial, error)
- func (s *Service) CreateUserKey(name string, input CreateKeyInput) (*KeyMaterial, error)
- func (s *Service) DeleteClient(orgName, clientName string) (Client, error)
- func (s *Service) DeleteClientKey(orgName, clientName, keyName string) error
- func (s *Service) DeleteCookbookArtifact(orgName, name, identifier string) (CookbookArtifact, error)
- func (s *Service) DeleteCookbookArtifactWithReleasedChecksums(orgName, name, identifier string) (CookbookArtifact, []string, error)
- func (s *Service) DeleteCookbookVersion(orgName, name, version string) (CookbookVersion, error)
- func (s *Service) DeleteCookbookVersionWithReleasedChecksums(orgName, name, version string) (CookbookVersion, []string, error)
- func (s *Service) DeleteDataBag(orgName, bagName string) (DataBag, error)
- func (s *Service) DeleteDataBagItem(orgName, bagName, itemID string) (DataBagItem, error)
- func (s *Service) DeleteEnvironment(orgName, name string) (Environment, error)
- func (s *Service) DeleteNode(orgName, nodeName string) (Node, error)
- func (s *Service) DeletePolicy(orgName, policyName string) ([]string, error)
- func (s *Service) DeletePolicyGroup(orgName, groupName string) (PolicyGroup, error)
- func (s *Service) DeletePolicyGroupAssignment(orgName, groupName, policyName string) (PolicyRevision, error)
- func (s *Service) DeletePolicyRevision(orgName, policyName, revisionID string) (PolicyRevision, error)
- func (s *Service) DeleteRole(orgName, roleName string) (Role, error)
- func (s *Service) DeleteSandbox(orgName, sandboxID string) (Sandbox, error)
- func (s *Service) DeleteUserKey(name, keyName string) error
- func (s *Service) GetClient(orgName, clientName string) (Client, bool)
- func (s *Service) GetClientKey(orgName, clientName, keyName string) (KeyRecord, bool, bool, bool)
- func (s *Service) GetContainer(orgName, containerName string) (Container, bool)
- func (s *Service) GetCookbookArtifact(orgName, name, identifier string) (CookbookArtifact, bool, bool)
- func (s *Service) GetCookbookVersion(orgName, name, version string) (CookbookVersion, bool, bool)
- func (s *Service) GetDataBag(orgName, bagName string) (DataBag, bool, bool)
- func (s *Service) GetDataBagItem(orgName, bagName, itemID string) (DataBagItem, bool, bool, bool)
- func (s *Service) GetEnvironment(orgName, name string) (Environment, bool, bool)
- func (s *Service) GetEnvironmentCookbookVersions(orgName, environmentName, cookbookName string, numVersions int, ...) ([]CookbookVersionRef, bool, bool, bool)
- func (s *Service) GetGroup(orgName, groupName string) (Group, bool)
- func (s *Service) GetNode(orgName, nodeName string) (Node, bool, bool)
- func (s *Service) GetOrganization(name string) (Organization, bool)
- func (s *Service) GetPolicy(orgName, policyName string) (map[string]PolicyRevision, bool, bool)
- func (s *Service) GetPolicyGroup(orgName, groupName string) (PolicyGroup, bool, bool)
- func (s *Service) GetPolicyGroupAssignment(orgName, groupName, policyName string) (PolicyRevision, bool, bool, bool)
- func (s *Service) GetPolicyRevision(orgName, policyName, revisionID string) (PolicyRevision, bool, bool, bool)
- func (s *Service) GetRole(orgName, roleName string) (Role, bool, bool)
- func (s *Service) GetSandbox(orgName, sandboxID string) (Sandbox, bool, bool)
- func (s *Service) GetUser(name string) (User, bool)
- func (s *Service) GetUserKey(name, keyName string) (KeyRecord, bool, bool)
- func (s *Service) GroupsFor(_ context.Context, subject authz.Subject) ([]string, error)
- func (s *Service) ListClientKeys(orgName, clientName string) ([]KeyRecord, bool, bool)
- func (s *Service) ListClients(orgName string) (map[string]string, bool)
- func (s *Service) ListContainers(orgName string) (map[string]string, bool)
- func (s *Service) ListCookbookArtifacts(orgName string) (map[string][]CookbookArtifact, bool)
- func (s *Service) ListCookbookArtifactsByName(orgName, name string) ([]CookbookArtifact, bool, bool)
- func (s *Service) ListCookbookVersions(orgName string) (map[string][]CookbookVersionRef, bool)
- func (s *Service) ListCookbookVersionsByName(orgName, name string) ([]CookbookVersionRef, bool, bool)
- func (s *Service) ListDataBagItems(orgName, bagName string) (map[string]string, bool, bool)
- func (s *Service) ListDataBags(orgName string) (map[string]string, bool)
- func (s *Service) ListEnvironmentCookbookVersions(orgName, environmentName string, numVersions int, allVersions bool) (map[string][]CookbookVersionRef, bool, bool)
- func (s *Service) ListEnvironmentNodes(orgName, environmentName string) (map[string]string, bool, bool)
- func (s *Service) ListEnvironments(orgName string) (map[string]string, bool)
- func (s *Service) ListGroups(orgName string) (map[string]string, bool)
- func (s *Service) ListNodes(orgName string) (map[string]string, bool)
- func (s *Service) ListOrganizations() map[string]string
- func (s *Service) ListPolicies(orgName string) (map[string][]string, bool)
- func (s *Service) ListPolicyGroups(orgName string) (map[string]PolicyGroup, bool)
- func (s *Service) ListRoles(orgName string) (map[string]string, bool)
- func (s *Service) ListServerAdmins() []string
- func (s *Service) ListUserKeys(name string) ([]KeyRecord, bool)
- func (s *Service) ListUsers() map[string]string
- func (s *Service) PolicyGroupsForRevision(orgName, policyName, revisionID string) ([]string, bool, bool, bool)
- func (s *Service) PreviewPolicyGroupAssignment(orgName, targetPolicyName string, payload map[string]any) (PolicyAssignmentPlan, error)
- func (s *Service) RehydrateKeyStore() error
- func (s *Service) ReloadPersistedState() error
- func (s *Service) RepairDefaultACLs(input RepairDefaultACLsInput) (RepairDefaultACLsResult, error)
- func (s *Service) RepairGroupMembership(input RepairGroupMembershipInput) (RepairMembershipResult, error)
- func (s *Service) RepairOrgMembership(input RepairOrgMembershipInput) (RepairMembershipResult, error)
- func (s *Service) RepairServerAdminMembership(input RepairServerAdminMembershipInput) (RepairMembershipResult, error)
- func (s *Service) ResolveACL(_ context.Context, resource authz.Resource) (authz.ACL, bool, error)
- func (s *Service) SeedPrincipal(principal authn.Principal)
- func (s *Service) SeedPublicKey(principal authn.Principal, name, publicKeyPEM string) error
- func (s *Service) SolveEnvironmentCookbookVersions(orgName, environmentName string, payload map[string]any) (map[string]CookbookVersion, bool, bool, error)
- func (s *Service) SuperuserName() string
- func (s *Service) UpdateClient(orgName, clientName string, input UpdateClientInput) (Client, *KeyMaterial, error)
- func (s *Service) UpdateClientKey(orgName, clientName, keyName string, input UpdateKeyInput) (UpdateKeyResult, error)
- func (s *Service) UpdateDataBagItem(orgName, bagName, itemID string, input UpdateDataBagItemInput) (DataBagItem, error)
- func (s *Service) UpdateEnvironment(orgName, currentName string, input UpdateEnvironmentInput) (UpdateEnvironmentResult, error)
- func (s *Service) UpdateNode(orgName, nodeName string, input UpdateNodeInput) (Node, error)
- func (s *Service) UpdateRole(orgName, roleName string, input UpdateRoleInput) (Role, error)
- func (s *Service) UpdateUser(input UpdateUserInput) (User, *KeyMaterial, error)
- func (s *Service) UpdateUserKey(name, keyName string, input UpdateKeyInput) (UpdateKeyResult, error)
- func (s *Service) UpsertCookbookVersion(orgName string, input UpsertCookbookVersionInput) (CookbookVersion, bool, error)
- func (s *Service) UpsertCookbookVersionWithReleasedChecksums(orgName string, input UpsertCookbookVersionInput) (CookbookVersion, []string, bool, error)
- func (s *Service) UpsertPolicyGroupAssignment(orgName, groupName, targetPolicyName string, ...) (PolicyRevision, bool, error)
- type UniverseEntry
- type UpdateClientInput
- type UpdateDataBagItemInput
- type UpdateEnvironmentInput
- type UpdateEnvironmentResult
- type UpdateKeyInput
- type UpdateKeyResult
- type UpdateNodeInput
- type UpdatePolicyGroupAssignmentInput
- type UpdateRoleInput
- type UpdateUserInput
- type UpsertCookbookVersionInput
- type User
- type ValidationError
Constants ¶
This section is empty.
Variables ¶
Functions ¶
func ListBootstrapServerAdmins ¶
func ListBootstrapServerAdmins(state BootstrapCoreState) []string
func RepairBootstrapCoreDefaultACLs ¶
func RepairBootstrapCoreDefaultACLs(state BootstrapCoreState, orgFilter, superuserName string) (BootstrapCoreState, AdminRepairResult)
func RepairCoreObjectDefaultACLs ¶
func RepairCoreObjectDefaultACLs(state CoreObjectState, orgFilter, superuserName string) (CoreObjectState, AdminRepairResult)
func ValidSandboxChecksum ¶
Types ¶
type AdminRepairResult ¶
type BootstrapCoreState ¶
type BootstrapCoreState struct {
Users map[string]User
UserACLs map[string]authz.ACL
UserKeys map[string]map[string]KeyRecord
Orgs map[string]BootstrapCoreOrganizationState
}
func AddActorToBootstrapCoreGroup ¶
func AddActorToBootstrapCoreGroup(state BootstrapCoreState, orgName, groupName, actorType, actorName string) (BootstrapCoreState, []string, error)
func AddUserToBootstrapCoreOrg ¶
func AddUserToBootstrapCoreOrg(state BootstrapCoreState, orgName, username string, admin bool) (BootstrapCoreState, []string, error)
func CloneBootstrapCoreState ¶
func CloneBootstrapCoreState(state BootstrapCoreState) BootstrapCoreState
func GrantBootstrapServerAdmin ¶
func GrantBootstrapServerAdmin(state BootstrapCoreState, username string) (BootstrapCoreState, []string, error)
func RemoveActorFromBootstrapCoreGroup ¶
func RemoveActorFromBootstrapCoreGroup(state BootstrapCoreState, orgName, groupName, actorType, actorName string) (BootstrapCoreState, []string, error)
func RemoveUserFromBootstrapCoreOrg ¶
func RemoveUserFromBootstrapCoreOrg(state BootstrapCoreState, orgName, username string, force bool) (BootstrapCoreState, []string, error)
func RevokeBootstrapServerAdmin ¶
func RevokeBootstrapServerAdmin(state BootstrapCoreState, username string) (BootstrapCoreState, []string, error)
type BootstrapCoreStore ¶
type BootstrapCoreStore interface {
LoadBootstrapCore() (BootstrapCoreState, error)
SaveBootstrapCore(BootstrapCoreState) error
}
type CookbookArtifact ¶
type CookbookFile ¶
type CookbookStore ¶
type CookbookStore interface {
HasCookbookVersion(orgName, name, version string) (bool, bool)
ListCookbookArtifacts(orgName string) (map[string][]CookbookArtifact, bool)
ListCookbookArtifactsByName(orgName, name string) ([]CookbookArtifact, bool, bool)
GetCookbookArtifact(orgName, name, identifier string) (CookbookArtifact, bool, bool)
CreateCookbookArtifact(orgName string, artifact CookbookArtifact) (CookbookArtifact, error)
DeleteCookbookArtifactWithReleasedChecksums(orgName, name, identifier string) (CookbookArtifact, []string, error)
ListCookbookVersions(orgName string) (map[string][]CookbookVersionRef, bool)
ListCookbookVersionsByName(orgName, name string) ([]CookbookVersionRef, bool, bool)
ListCookbookVersionModelsByName(orgName, name string) ([]CookbookVersion, bool, bool)
GetCookbookVersion(orgName, name, version string) (CookbookVersion, bool, bool)
UpsertCookbookVersionWithReleasedChecksums(orgName string, version CookbookVersion, force bool) (CookbookVersion, []string, bool, error)
DeleteCookbookVersionWithReleasedChecksums(orgName, name, version string) (CookbookVersion, []string, error)
DeleteCookbookChecksumReferencesFromRemaining(remaining map[string]struct{})
CookbookChecksumReferenced(checksum string) bool
}
type CookbookVersion ¶
type CookbookVersion struct {
Name string `json:"name"`
CookbookName string `json:"cookbook_name"`
Version string `json:"version"`
JSONClass string `json:"json_class"`
ChefType string `json:"chef_type"`
Frozen bool `json:"frozen"`
Metadata map[string]any `json:"metadata"`
AllFiles []CookbookFile `json:"all_files"`
}
type CookbookVersionRef ¶
type CoreObjectOrganizationState ¶
type CoreObjectOrganizationState struct {
DataBags map[string]DataBag
DataBagItems map[string]map[string]DataBagItem
Environments map[string]Environment
Nodes map[string]Node
Roles map[string]Role
Sandboxes map[string]Sandbox
Policies map[string]map[string]PolicyRevision
PolicyGroups map[string]PolicyGroup
ACLs map[string]authz.ACL
}
type CoreObjectState ¶
type CoreObjectState struct {
Orgs map[string]CoreObjectOrganizationState
}
func CloneCoreObjectState ¶
func CloneCoreObjectState(state CoreObjectState) CoreObjectState
type CoreObjectStore ¶
type CoreObjectStore interface {
LoadCoreObjects() (CoreObjectState, error)
SaveCoreObjects(CoreObjectState) error
}
type CreateClientInput ¶
type CreateDataBagInput ¶
type CreateDataBagItemInput ¶
type CreateEnvironmentInput ¶
type CreateKeyInput ¶
type CreateNodeInput ¶
type CreateOrganizationInput ¶
type CreateRoleInput ¶
type CreateSandboxInput ¶
type CreateSandboxInput struct {
Checksums []string
}
type CreateUserInput ¶
type DataBagItem ¶
type DepsolverError ¶
func (*DepsolverError) Error ¶
func (e *DepsolverError) Error() string
type Environment ¶
type Environment struct {
Name string `json:"name"`
Description string `json:"description"`
CookbookVersions map[string]string `json:"cookbook_versions"`
JSONClass string `json:"json_class"`
ChefType string `json:"chef_type"`
DefaultAttributes map[string]any `json:"default_attributes"`
OverrideAttributes map[string]any `json:"override_attributes"`
}
type FrozenCookbookError ¶
func (*FrozenCookbookError) Error ¶
func (e *FrozenCookbookError) Error() string
func (*FrozenCookbookError) Unwrap ¶
func (e *FrozenCookbookError) Unwrap() error
type KeyMaterial ¶
type MemoryBootstrapCoreStore ¶
type MemoryBootstrapCoreStore struct {
// contains filtered or unexported fields
}
func NewMemoryBootstrapCoreStore ¶
func NewMemoryBootstrapCoreStore(initial BootstrapCoreState) *MemoryBootstrapCoreStore
func (*MemoryBootstrapCoreStore) LoadBootstrapCore ¶
func (s *MemoryBootstrapCoreStore) LoadBootstrapCore() (BootstrapCoreState, error)
func (*MemoryBootstrapCoreStore) SaveBootstrapCore ¶
func (s *MemoryBootstrapCoreStore) SaveBootstrapCore(state BootstrapCoreState) error
type MemoryCoreObjectStore ¶
type MemoryCoreObjectStore struct {
// contains filtered or unexported fields
}
func NewMemoryCoreObjectStore ¶
func NewMemoryCoreObjectStore(initial CoreObjectState) *MemoryCoreObjectStore
func (*MemoryCoreObjectStore) LoadCoreObjects ¶
func (s *MemoryCoreObjectStore) LoadCoreObjects() (CoreObjectState, error)
func (*MemoryCoreObjectStore) SaveCoreObjects ¶
func (s *MemoryCoreObjectStore) SaveCoreObjects(state CoreObjectState) error
type MissingChecksumError ¶
type MissingChecksumError struct {
Checksum string
}
func (*MissingChecksumError) Error ¶
func (e *MissingChecksumError) Error() string
type Node ¶
type Node struct {
Name string `json:"name"`
JSONClass string `json:"json_class"`
ChefType string `json:"chef_type"`
ChefEnvironment string `json:"chef_environment"`
Override map[string]any `json:"override"`
Normal map[string]any `json:"normal"`
Default map[string]any `json:"default"`
Automatic map[string]any `json:"automatic"`
RunList []string `json:"run_list"`
PolicyName string `json:"policy_name,omitempty"`
PolicyGroup string `json:"policy_group,omitempty"`
}
type Options ¶
type Options struct {
SuperuserName string
CookbookStoreFactory func(*Service) CookbookStore
BootstrapCoreStoreFactory func(*Service) BootstrapCoreStore
CoreObjectStoreFactory func(*Service) CoreObjectStore
InitialBootstrapCoreState *BootstrapCoreState
InitialCoreObjectState *CoreObjectState
}
type Organization ¶
type PolicyAssignmentPlan ¶
type PolicyAssignmentPlan struct {
Revision PolicyRevision
CreatesPolicy bool
CreatesRevision bool
}
type PolicyGroup ¶
type PolicyRevision ¶
type RepairDefaultACLsInput ¶ added in v0.2.0
RepairDefaultACLsInput scopes a default-ACL repair to one organization when requested. DryRun is used by tests and future previews to reuse the same normalization path without persisting changes.
type RepairDefaultACLsResult ¶ added in v0.2.0
type RepairDefaultACLsResult struct {
Changed bool
BootstrapRepaired []string
CoreObjectRepaired []string
}
RepairDefaultACLsResult reports the two ACL families repaired by the live service seam so operators can distinguish bootstrap ACLs from object ACLs.
type RepairGroupMembershipInput ¶ added in v0.2.0
type RepairGroupMembershipInput struct {
Action string
Organization string
Group string
ActorType string
Actor string
}
RepairGroupMembershipInput describes a group actor-membership repair. Action is intentionally aligned with the admin CLI verbs: add-actor or remove-actor.
type RepairMembershipResult ¶ added in v0.2.0
RepairMembershipResult reports membership changes made through live repair seams. Members contains stable labels for the memberships touched.
type RepairOrgMembershipInput ¶ added in v0.2.0
type RepairOrgMembershipInput struct {
Action string
Organization string
Username string
Admin bool
Force bool
}
RepairOrgMembershipInput describes an org user-membership repair. Action is intentionally aligned with the admin CLI verbs: add-user or remove-user.
type RepairServerAdminMembershipInput ¶ added in v0.2.0
RepairServerAdminMembershipInput describes global server-admin repair. The current compatibility model maps server-admins onto each org's admins group.
type Role ¶
type Role struct {
Name string `json:"name"`
Description string `json:"description"`
JSONClass string `json:"json_class"`
ChefType string `json:"chef_type"`
DefaultAttributes map[string]any `json:"default_attributes"`
OverrideAttributes map[string]any `json:"override_attributes"`
RunList []string `json:"run_list"`
EnvRunLists map[string][]string `json:"env_run_lists"`
}
type Service ¶
type Service struct {
// contains filtered or unexported fields
}
func NewService ¶
func NewService(keyStore *authn.MemoryKeyStore, opts Options) *Service
func (*Service) AddUserToGroup ¶
func (*Service) CleanupUnreferencedChecksums ¶
func (*Service) CookbookUniverse ¶
func (s *Service) CookbookUniverse(orgName string) (map[string][]UniverseEntry, bool)
func (*Service) CreateClient ¶
func (s *Service) CreateClient(orgName string, input CreateClientInput) (Client, *KeyMaterial, error)
func (*Service) CreateClientKey ¶
func (s *Service) CreateClientKey(orgName, clientName string, input CreateKeyInput) (*KeyMaterial, error)
func (*Service) CreateCookbookArtifact ¶
func (s *Service) CreateCookbookArtifact(orgName string, input CreateCookbookArtifactInput) (CookbookArtifact, error)
func (*Service) CreateDataBag ¶
func (s *Service) CreateDataBag(orgName string, input CreateDataBagInput) (DataBag, error)
func (*Service) CreateDataBagItem ¶
func (s *Service) CreateDataBagItem(orgName, bagName string, input CreateDataBagItemInput) (DataBagItem, error)
func (*Service) CreateEnvironment ¶
func (s *Service) CreateEnvironment(orgName string, input CreateEnvironmentInput) (Environment, error)
func (*Service) CreateNode ¶
func (s *Service) CreateNode(orgName string, input CreateNodeInput) (Node, error)
func (*Service) CreateOrganization ¶
func (s *Service) CreateOrganization(input CreateOrganizationInput) (Organization, Client, *KeyMaterial, error)
func (*Service) CreatePolicyRevision ¶
func (s *Service) CreatePolicyRevision(orgName, targetName string, input CreatePolicyRevisionInput) (PolicyRevision, error)
func (*Service) CreateRole ¶
func (s *Service) CreateRole(orgName string, input CreateRoleInput) (Role, error)
func (*Service) CreateSandbox ¶
func (s *Service) CreateSandbox(orgName string, input CreateSandboxInput) (Sandbox, error)
func (*Service) CreateUser ¶
func (s *Service) CreateUser(input CreateUserInput) (User, *KeyMaterial, error)
func (*Service) CreateUserKey ¶
func (s *Service) CreateUserKey(name string, input CreateKeyInput) (*KeyMaterial, error)
func (*Service) DeleteClient ¶
func (*Service) DeleteClientKey ¶
func (*Service) DeleteCookbookArtifact ¶
func (s *Service) DeleteCookbookArtifact(orgName, name, identifier string) (CookbookArtifact, error)
func (*Service) DeleteCookbookArtifactWithReleasedChecksums ¶
func (s *Service) DeleteCookbookArtifactWithReleasedChecksums(orgName, name, identifier string) (CookbookArtifact, []string, error)
func (*Service) DeleteCookbookVersion ¶
func (s *Service) DeleteCookbookVersion(orgName, name, version string) (CookbookVersion, error)
func (*Service) DeleteCookbookVersionWithReleasedChecksums ¶
func (s *Service) DeleteCookbookVersionWithReleasedChecksums(orgName, name, version string) (CookbookVersion, []string, error)
func (*Service) DeleteDataBag ¶
func (*Service) DeleteDataBagItem ¶
func (s *Service) DeleteDataBagItem(orgName, bagName, itemID string) (DataBagItem, error)
func (*Service) DeleteEnvironment ¶
func (s *Service) DeleteEnvironment(orgName, name string) (Environment, error)
func (*Service) DeletePolicy ¶
func (*Service) DeletePolicyGroup ¶
func (s *Service) DeletePolicyGroup(orgName, groupName string) (PolicyGroup, error)
func (*Service) DeletePolicyGroupAssignment ¶
func (s *Service) DeletePolicyGroupAssignment(orgName, groupName, policyName string) (PolicyRevision, error)
func (*Service) DeletePolicyRevision ¶
func (s *Service) DeletePolicyRevision(orgName, policyName, revisionID string) (PolicyRevision, error)
func (*Service) DeleteSandbox ¶
func (*Service) DeleteUserKey ¶
func (*Service) GetClientKey ¶
func (*Service) GetContainer ¶
func (*Service) GetCookbookArtifact ¶
func (s *Service) GetCookbookArtifact(orgName, name, identifier string) (CookbookArtifact, bool, bool)
func (*Service) GetCookbookVersion ¶
func (s *Service) GetCookbookVersion(orgName, name, version string) (CookbookVersion, bool, bool)
func (*Service) GetDataBag ¶
func (*Service) GetDataBagItem ¶
func (*Service) GetEnvironment ¶
func (s *Service) GetEnvironment(orgName, name string) (Environment, bool, bool)
func (*Service) GetEnvironmentCookbookVersions ¶
func (*Service) GetOrganization ¶
func (s *Service) GetOrganization(name string) (Organization, bool)
func (*Service) GetPolicyGroup ¶
func (s *Service) GetPolicyGroup(orgName, groupName string) (PolicyGroup, bool, bool)
func (*Service) GetPolicyGroupAssignment ¶
func (*Service) GetPolicyRevision ¶
func (*Service) GetSandbox ¶
func (*Service) GetUserKey ¶
func (*Service) ListClientKeys ¶
func (*Service) ListClients ¶
func (*Service) ListContainers ¶
func (*Service) ListCookbookArtifacts ¶
func (s *Service) ListCookbookArtifacts(orgName string) (map[string][]CookbookArtifact, bool)
func (*Service) ListCookbookArtifactsByName ¶
func (s *Service) ListCookbookArtifactsByName(orgName, name string) ([]CookbookArtifact, bool, bool)
func (*Service) ListCookbookVersions ¶
func (s *Service) ListCookbookVersions(orgName string) (map[string][]CookbookVersionRef, bool)
func (*Service) ListCookbookVersionsByName ¶
func (s *Service) ListCookbookVersionsByName(orgName, name string) ([]CookbookVersionRef, bool, bool)
func (*Service) ListDataBagItems ¶
func (*Service) ListDataBags ¶
func (*Service) ListEnvironmentCookbookVersions ¶
func (*Service) ListEnvironmentNodes ¶
func (*Service) ListEnvironments ¶
func (*Service) ListOrganizations ¶
func (*Service) ListPolicies ¶
func (*Service) ListPolicyGroups ¶
func (s *Service) ListPolicyGroups(orgName string) (map[string]PolicyGroup, bool)
func (*Service) ListServerAdmins ¶ added in v0.2.0
ListServerAdmins returns the current compatibility server-admin set from live service state. It is read-only and does not require maintenance.
func (*Service) PolicyGroupsForRevision ¶
func (*Service) PreviewPolicyGroupAssignment ¶
func (*Service) RehydrateKeyStore ¶
func (*Service) ReloadPersistedState ¶ added in v0.2.0
ReloadPersistedState refreshes the service's in-memory bootstrap/core object maps from its configured stores and rebuilds the request verifier cache. It is intentionally all-or-nothing so future online repair workflows cannot leave live reads using partially refreshed state.
func (*Service) RepairDefaultACLs ¶ added in v0.2.0
func (s *Service) RepairDefaultACLs(input RepairDefaultACLsInput) (RepairDefaultACLsResult, error)
RepairDefaultACLs repairs missing default ACL documents through the live service state and its configured persistence stores. Online maintenance repair uses this seam instead of writing PostgreSQL directly so process-local authorization caches cannot stay stale after the command reports success.
func (*Service) RepairGroupMembership ¶ added in v0.2.0
func (s *Service) RepairGroupMembership(input RepairGroupMembershipInput) (RepairMembershipResult, error)
RepairGroupMembership updates group actor membership through live service state and the configured bootstrap persistence seam.
func (*Service) RepairOrgMembership ¶ added in v0.2.0
func (s *Service) RepairOrgMembership(input RepairOrgMembershipInput) (RepairMembershipResult, error)
RepairOrgMembership updates org user membership through live service state and the configured bootstrap persistence seam. It rolls live state back if persistence fails so authorization decisions cannot observe a failed repair.
func (*Service) RepairServerAdminMembership ¶ added in v0.2.0
func (s *Service) RepairServerAdminMembership(input RepairServerAdminMembershipInput) (RepairMembershipResult, error)
RepairServerAdminMembership updates the compatibility server-admin set. The implementation intentionally reuses admins-group membership so Chef-facing authorization behavior remains unchanged.
func (*Service) ResolveACL ¶
func (*Service) SeedPrincipal ¶
func (*Service) SeedPublicKey ¶
func (*Service) SolveEnvironmentCookbookVersions ¶
func (*Service) SuperuserName ¶
func (*Service) UpdateClient ¶
func (s *Service) UpdateClient(orgName, clientName string, input UpdateClientInput) (Client, *KeyMaterial, error)
UpdateClient applies mutable client metadata and, when explicitly requested by legacy API v0 routes, replaces the client's default verifier key.
func (*Service) UpdateClientKey ¶
func (s *Service) UpdateClientKey(orgName, clientName, keyName string, input UpdateKeyInput) (UpdateKeyResult, error)
func (*Service) UpdateDataBagItem ¶
func (s *Service) UpdateDataBagItem(orgName, bagName, itemID string, input UpdateDataBagItemInput) (DataBagItem, error)
func (*Service) UpdateEnvironment ¶
func (s *Service) UpdateEnvironment(orgName, currentName string, input UpdateEnvironmentInput) (UpdateEnvironmentResult, error)
func (*Service) UpdateNode ¶
func (s *Service) UpdateNode(orgName, nodeName string, input UpdateNodeInput) (Node, error)
func (*Service) UpdateRole ¶
func (s *Service) UpdateRole(orgName, roleName string, input UpdateRoleInput) (Role, error)
func (*Service) UpdateUser ¶
func (s *Service) UpdateUser(input UpdateUserInput) (User, *KeyMaterial, error)
UpdateUser applies actor metadata changes while keeping default-key mutation explicit for the API-version gate in the HTTP layer.
func (*Service) UpdateUserKey ¶
func (s *Service) UpdateUserKey(name, keyName string, input UpdateKeyInput) (UpdateKeyResult, error)
func (*Service) UpsertCookbookVersion ¶
func (s *Service) UpsertCookbookVersion(orgName string, input UpsertCookbookVersionInput) (CookbookVersion, bool, error)
func (*Service) UpsertCookbookVersionWithReleasedChecksums ¶
func (s *Service) UpsertCookbookVersionWithReleasedChecksums(orgName string, input UpsertCookbookVersionInput) (CookbookVersion, []string, bool, error)
func (*Service) UpsertPolicyGroupAssignment ¶
func (s *Service) UpsertPolicyGroupAssignment(orgName, groupName, targetPolicyName string, input UpdatePolicyGroupAssignmentInput) (PolicyRevision, bool, error)
type UniverseEntry ¶
type UpdateClientInput ¶
type UpdateDataBagItemInput ¶
type UpdateEnvironmentInput ¶
type UpdateEnvironmentResult ¶
type UpdateEnvironmentResult struct {
Environment Environment
Renamed bool
}
type UpdateKeyInput ¶
type UpdateKeyResult ¶
type UpdateKeyResult struct {
KeyMaterial KeyMaterial
Renamed bool
}
type UpdateNodeInput ¶
type UpdateRoleInput ¶
type UpdateUserInput ¶
type ValidationError ¶
type ValidationError struct {
Messages []string
}
func ValidateDepsolverPayload ¶
func ValidateDepsolverPayload(payload map[string]any) *ValidationError
ValidateDepsolverPayload checks the depsolver request body fields that upstream validates during malformed-request handling, before environment lookup or authz.
func (*ValidationError) Error ¶
func (e *ValidationError) Error() string