summaryrefslogtreecommitdiffstats
path: root/security-utils
diff options
context:
space:
mode:
authorBjørn Christian Seime <bjorncs@yahooinc.com>2023-02-09 11:33:48 +0100
committerBjørn Christian Seime <bjorncs@yahooinc.com>2023-02-09 15:18:43 +0100
commit6ef87df07fa0c0ffdd595e39647e8253cb558d92 (patch)
tree286cd6f444703a9468c68828937d36e8c5cafcc2 /security-utils
parentf0f9cee55960f20c0daef33991d01e77abbc8f1c (diff)
Introduce capbilities for unclassified APIs
Require 'vespa.rpc.unclassified' by default for all JRT APIs
Diffstat (limited to 'security-utils')
-rw-r--r--security-utils/src/main/java/com/yahoo/security/tls/Capability.java3
1 files changed, 3 insertions, 0 deletions
diff --git a/security-utils/src/main/java/com/yahoo/security/tls/Capability.java b/security-utils/src/main/java/com/yahoo/security/tls/Capability.java
index 17f5d3d1421..502c0511b93 100644
--- a/security-utils/src/main/java/com/yahoo/security/tls/Capability.java
+++ b/security-utils/src/main/java/com/yahoo/security/tls/Capability.java
@@ -8,6 +8,9 @@ import java.util.Arrays;
*/
public enum Capability implements ToCapabilitySet {
NONE("vespa.none"), // placeholder for no capabilities
+ HTTP_UNCLASSIFIED("vespa.http.unclassified"),
+ RESTAPI_UNCLASSIFIED("vespa.restapi.unclassified"),
+ RPC_UNCLASSIFIED("vespa.rpc.unclassified"),
CONTENT__CLUSTER_CONTROLLER__INTERNAL_STATE_API("vespa.content.cluster_controller.internal_state_api"),
CONTENT__DOCUMENT_API("vespa.content.document_api"),
CONTENT__METRICS_API("vespa.content.metrics_api"),