From 31b630d66ac9ecaac56dbaafabc5765bda7a4041 Mon Sep 17 00:00:00 2001
From: Morten Tokle <mortent@yahooinc.com>
Date: Tue, 15 Nov 2022 16:41:58 -0800
Subject: Add schema for clients

---
 .../src/main/resources/schema/containercluster.rnc        | 15 ++++++++++++++-
 config-model/src/test/schema-test-files/services.xml      | 10 ++++++++++
 2 files changed, 24 insertions(+), 1 deletion(-)

(limited to 'config-model/src')

diff --git a/config-model/src/main/resources/schema/containercluster.rnc b/config-model/src/main/resources/schema/containercluster.rnc
index 1d31435dad1..72691a1129b 100644
--- a/config-model/src/main/resources/schema/containercluster.rnc
+++ b/config-model/src/main/resources/schema/containercluster.rnc
@@ -23,7 +23,8 @@ ContainerServices =
     AccessLog* &
     SecretStore? &
     ZooKeeper? &
-    GenericConfig*
+    GenericConfig* &
+    Clients?
 
 # TODO(ogronnesby): Change this configuration syntax
 ClientAuthorize = element client-authorize { empty }
@@ -127,6 +128,18 @@ Threadpool = element threadpool {
     element queue-size { xsd:nonNegativeInteger }
 }
 
+Clients = element clients {
+    Client*
+}
+
+Client = element client {
+    ComponentId &
+    attribute permissions { string } &
+    element certificate {
+        attribute file { string }
+    }+
+}
+
 # SEARCH:
 
 SearchInContainer = element search {
diff --git a/config-model/src/test/schema-test-files/services.xml b/config-model/src/test/schema-test-files/services.xml
index 543f76ca136..7976b1f5524 100644
--- a/config-model/src/test/schema-test-files/services.xml
+++ b/config-model/src/test/schema-test-files/services.xml
@@ -209,6 +209,16 @@
       </environment-variables>
       <node hostalias="host1" />
     </nodes>
+
+    <clients>
+      <client id="client1" permissions="read,write">
+        <certificate file="security/file.pem" />
+      </client>
+      <client id="client2" permissions="write">
+        <certificate file="security/file1.pem" />
+        <certificate file="security/file2.pem" />
+      </client>
+    </clients>
   </container>
 
   <container id='qrsCluster_2' version='1.0'>
-- 
cgit v1.2.3