1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
|
// Copyright 2018 Yahoo Holdings. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
package com.yahoo.vespa.athenz.client.zms;
import com.yahoo.vespa.athenz.api.AthenzDomain;
import com.yahoo.vespa.athenz.api.AthenzIdentity;
import com.yahoo.vespa.athenz.api.AthenzResourceName;
import com.yahoo.vespa.athenz.api.AthenzRole;
import com.yahoo.vespa.athenz.api.AthenzUser;
import com.yahoo.vespa.athenz.api.OktaAccessToken;
import com.yahoo.vespa.athenz.api.OktaIdentityToken;
import java.time.Instant;
import java.util.List;
import java.util.Set;
/**
* @author bjorncs
*/
public interface ZmsClient extends AutoCloseable {
void createTenancy(AthenzDomain tenantDomain, AthenzIdentity providerService,
OktaIdentityToken identityToken, OktaAccessToken accessToken);
void deleteTenancy(AthenzDomain tenantDomain, AthenzIdentity providerService,
OktaIdentityToken identityToken, OktaAccessToken accessToken);
void createProviderResourceGroup(AthenzDomain tenantDomain, AthenzIdentity providerService, String resourceGroup,
Set<RoleAction> roleActions, OktaIdentityToken identityToken, OktaAccessToken accessToken);
void deleteProviderResourceGroup(AthenzDomain tenantDomain, AthenzIdentity providerService, String resourceGroup,
OktaIdentityToken identityToken, OktaAccessToken accessToken);
void addRoleMember(AthenzRole role, AthenzIdentity member);
void deleteRoleMember(AthenzRole role, AthenzIdentity member);
boolean getMembership(AthenzRole role, AthenzIdentity identity);
List<AthenzDomain> getDomainList(String prefix);
boolean hasAccess(AthenzResourceName resource, String action, AthenzIdentity identity);
void addPolicyRule(AthenzDomain athenzDomain, String athenzPolicy, String action, AthenzResourceName resourceName, AthenzRole athenzRole);
boolean deletePolicyRule(AthenzDomain athenzDomain, String athenzPolicy, String action, AthenzResourceName resourceName, AthenzRole athenzRole);
List<AthenzUser> listPendingRoleApprovals(AthenzRole athenzRole);
void approvePendingRoleMembership(AthenzRole athenzRole, AthenzUser athenzUser, Instant expiry);
List<AthenzIdentity> listMembers(AthenzRole athenzRole);
void close();
}
|
