Package com.yahoo.vespa.hosted.controller.api.integration.athenz

Interface AccessControlService

All Known Implementing Classes:

AthenzAccessControlService, MockAccessControlService

public interface AccessControlService

Manage operator data plane access control

Author:

mortent

Method Summary

Modifier and Type	Method	Description
boolean	approveDataPlaneAccess(com.yahoo.vespa.athenz.api.AthenzUser user, Instant expiry)
boolean	decideSshAccess(com.yahoo.config.provision.TenantName tenantName, Instant expiry, com.yahoo.vespa.athenz.api.OAuthCredentials oAuthCredentials, boolean approve)
com.yahoo.vespa.athenz.api.AthenzRoleInformation	getAccessRoleInformation(com.yahoo.config.provision.TenantName tenantName)
boolean	getManagedAccess(com.yahoo.config.provision.TenantName tenantName)
Collection<com.yahoo.vespa.athenz.api.AthenzUser>	listMembers()
boolean	requestSshAccess(com.yahoo.config.provision.TenantName tenantName)
void	setManagedAccess(com.yahoo.config.provision.TenantName tenantName, boolean managedAccess)

Method Detail

approveDataPlaneAccess

boolean approveDataPlaneAccess(com.yahoo.vespa.athenz.api.AthenzUser user,
                               Instant expiry)

decideSshAccess

boolean decideSshAccess(com.yahoo.config.provision.TenantName tenantName,
                        Instant expiry,
                        com.yahoo.vespa.athenz.api.OAuthCredentials oAuthCredentials,
                        boolean approve)

requestSshAccess

boolean requestSshAccess(com.yahoo.config.provision.TenantName tenantName)

getAccessRoleInformation

com.yahoo.vespa.athenz.api.AthenzRoleInformation getAccessRoleInformation(com.yahoo.config.provision.TenantName tenantName)

setManagedAccess

void setManagedAccess(com.yahoo.config.provision.TenantName tenantName,
                      boolean managedAccess)

getManagedAccess

boolean getManagedAccess(com.yahoo.config.provision.TenantName tenantName)

listMembers

Collection<com.yahoo.vespa.athenz.api.AthenzUser> listMembers()