Package com.yahoo.vespa.hosted.controller.api.integration.athenz

Class AthenzAccessControlService

java.lang.Object

com.yahoo.vespa.hosted.controller.api.integration.athenz.AthenzAccessControlService

All Implemented Interfaces:

AccessControlService

public class AthenzAccessControlService
extends Object
implements AccessControlService

Constructor Summary

Constructors

Constructor	Description
AthenzAccessControlService(com.yahoo.vespa.athenz.client.zms.ZmsClient zmsClient, com.yahoo.vespa.athenz.api.AthenzDomain domain, com.yahoo.vespa.athenz.client.zms.ZmsClient vespaZmsClient)

Method Summary

Modifier and Type	Method	Description
boolean	approveDataPlaneAccess(com.yahoo.vespa.athenz.api.AthenzUser user, Instant expiry)
boolean	approveSshAccess(com.yahoo.config.provision.TenantName tenantName, Instant expiry, com.yahoo.vespa.athenz.api.OAuthCredentials oAuthCredentials)
boolean	hasPendingAccessRequests(com.yahoo.config.provision.TenantName tenantName)
boolean	isVespaTeamMember(com.yahoo.vespa.athenz.api.AthenzUser user)
Collection<com.yahoo.vespa.athenz.api.AthenzUser>	listMembers()
boolean	requestSshAccess(com.yahoo.config.provision.TenantName tenantName)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AthenzAccessControlService

public AthenzAccessControlService(com.yahoo.vespa.athenz.client.zms.ZmsClient zmsClient,
                                  com.yahoo.vespa.athenz.api.AthenzDomain domain,
                                  com.yahoo.vespa.athenz.client.zms.ZmsClient vespaZmsClient)

Method Detail

approveDataPlaneAccess

public boolean approveDataPlaneAccess(com.yahoo.vespa.athenz.api.AthenzUser user,
                                      Instant expiry)

Specified by:

approveDataPlaneAccess in interface AccessControlService

listMembers

public Collection<com.yahoo.vespa.athenz.api.AthenzUser> listMembers()

Specified by:

listMembers in interface AccessControlService

hasPendingAccessRequests

public boolean hasPendingAccessRequests(com.yahoo.config.provision.TenantName tenantName)

Specified by:

hasPendingAccessRequests in interface AccessControlService

Returns:

Whether the ssh access role has any pending role membership requests

approveSshAccess

public boolean approveSshAccess(com.yahoo.config.provision.TenantName tenantName,
                                Instant expiry,
                                com.yahoo.vespa.athenz.api.OAuthCredentials oAuthCredentials)

Specified by:

approveSshAccess in interface AccessControlService

Returns:

true if access has been granted - false if already member

requestSshAccess

public boolean requestSshAccess(com.yahoo.config.provision.TenantName tenantName)

Specified by:

requestSshAccess in interface AccessControlService

Returns:

true if access has been requested - false if already member

isVespaTeamMember

public boolean isVespaTeamMember(com.yahoo.vespa.athenz.api.AthenzUser user)