mirror of
https://github.com/rancher/types.git
synced 2025-09-01 05:09:10 +00:00
dc55e60da1
In the absence of service account creds, non-admin users from google's hosted domain cannot lookup groups, even their own groups (Restriction from google api). So even during login we can't find out what groups the user belongs to. Admins of hosted google domain do not have the same restriction. So they can still search for and add groups that non-admin google users belong to. This will cause lot of inconsistencies, since admins can add a user's groups, but user still won't have access to rancher. So making service account credentials a required field will avoid all this, and searching users/groups will work equally for all google users. Hostname should not be updatable once auth is setup, since the principalIds assigned to users after they log into rancher contain their google addresses which have the hostname.
Rancher API Types
API Types for Rancher 2.0
Building
make
Running the code generator
Run go generate in the root of the project
License
Copyright (c) 2014-2017 Rancher Labs, Inc.
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.