TeleportAccessList
resources.teleport.dev / v1
apiVersion: resources.teleport.dev/v1
kind: TeleportAccessList
metadata:
name: example
apiVersion
string
APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
kind
string
Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
metadata
object
spec object
AccessList resource definition v1 from Teleport
audit object
audit describes the frequency that this Access List must be audited.
next_audit_date
string
next_audit_date is when the next audit date should be done by.
format:
date-timenotifications object
notifications is the configuration for notifying users.
start
string
start specifies when to start notifying users that the next audit date is coming up.
format:
durationrecurrence object
recurrence is the recurrence definition
day_of_month
string | integer
day_of_month is the day of month that reviews will be scheduled on. Supported values are 0, 1, 15, and 31.
frequency
string | integer
frequency is the frequency of reviews. This represents the period in months between two reviews. Supported values are 0, 1, 3, 6, and 12.
description
string
description is an optional plaintext description of the Access List.
grants object
grants describes the access granted by membership to this Access List.
roles
[]string
roles are the names of roles to be granted to users.
scoped_roles []object
scoped_roles are scoped roles to be granted to users.
role
string
role is the name of the scoped role to be granted.
scope
string
scope is the scope the role will be assigned at. It must be an assignable scope of the role.
traits
object
traits are the traits to be granted to users.
membership_requires object
membership_requires describes the requirements for a user to be a member of the Access List. For a membership to an Access List to be effective, the user must meet the requirements of Membership_requires and must be in the members list.
roles
[]string
roles are the user roles that must be present for the user to obtain access.
traits
object
traits are the traits that must be present for the user to obtain access.
owner_grants object
owner_grants describes the access granted by owners to this Access List.
roles
[]string
roles are the names of roles to be granted to users.
scoped_roles []object
scoped_roles are scoped roles to be granted to users.
role
string
role is the name of the scoped role to be granted.
scope
string
scope is the scope the role will be assigned at. It must be an assignable scope of the role.
traits
object
traits are the traits to be granted to users.
owners []object
owners is a list of owners of the Access List.
description
string
description is the plaintext description of the owner and why they are an owner.
ineligible_status
string | integer
ineligible_status describes if this owner is eligible or not and if not, describes how they're lacking eligibility.
membership_kind
string | integer
membership_kind describes the type of membership, either `MEMBERSHIP_KIND_USER` or `MEMBERSHIP_KIND_LIST`.
name
string
name is the username of the owner.
ownership_requires object
ownership_requires describes the requirements for a user to be an owner of the Access List. For ownership of an Access List to be effective, the user must meet the requirements of ownership_requires and must be in the owners list.
roles
[]string
roles are the user roles that must be present for the user to obtain access.
traits
object
traits are the traits that must be present for the user to obtain access.
title
string
title is a plaintext short description of the Access List.
type
string
type can be an empty string which denotes a regular Access List, "scim" which represents an Access List created from SCIM group or "static" for Access Lists managed by IaC tools.
status object
Status defines the observed state of the Teleport resource
conditions []object
Conditions represent the latest available observations of an object's state
lastTransitionTime
string required
lastTransitionTime is the last time the condition transitioned from one status to another.
This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
format:
date-time
message
string required
message is a human readable message indicating details about the transition.
This may be an empty string.
maxLength:
32768
observedGeneration
integer
observedGeneration represents the .metadata.generation that the condition was set based upon.
For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
with respect to the current state of the instance.
format:
int64minimum:
0
reason
string required
reason contains a programmatic identifier indicating the reason for the condition's last transition.
Producers of specific condition types may define expected values and meanings for this field,
and whether the values are considered a guaranteed API.
The value should be a CamelCase string.
This field may not be empty.
pattern:
^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$minLength:
1maxLength:
1024
status
string required
status of the condition, one of True, False, Unknown.
enum:
True, False, Unknown
type
string required
type of condition in CamelCase or in foo.example.com/CamelCase.
pattern:
^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$maxLength:
316
teleportResourceID
integer
format:
int64No matches. Try .spec.audit for an exact path