policy

type BreakGlassCondition struct {
	Scope      ScopeType `json:"scope,omitempty"`
	Namespaces []string  `json:"namespaces,omitempty"`
}

type IntegrityVerifierMode string

type ScopeType string

type SignPolicy struct {
	Policies    []SignPolicyCondition `json:"policies,omitempty"`
	Signers     []SignerCondition     `json:"signers,omitempty"`
	BreakGlass  []BreakGlassCondition `json:"breakGlass,omitempty"`
	Description string                `json:"description,omitempty"`
}

type SignPolicyCondition struct {
	Scope             ScopeType `json:"scope,omitempty"`
	Namespaces        []string  `json:"namespaces,omitempty"`
	ExcludeNamespaces []string  `json:"excludeNamespaces,omitempty"`
	Signers           []string  `json:"signers,omitempty"`
}

type SignerCondition struct {
	Name     string                `json:"name,omitempty"`
	Secret   string                `json:"secret,omitempty"`
	Subjects []SubjectMatchPattern `json:"subjects,omitempty"`
}

type SubjectCondition struct {
	Name    string              `json:"name"`
	Subject SubjectMatchPattern `json:"subject"`
}

type SubjectMatchPattern struct {
	Email              string `json:"email,omitempty"`
	Uid                string `json:"uid,omitempty"`
	Country            string `json:"country,omitempty"`
	Organization       string `json:"organization,omitempty"`
	OrganizationalUnit string `json:"organizationalUnit,omitempty"`
	Locality           string `json:"locality,omitempty"`
	Province           string `json:"province,omitempty"`
	StreetAddress      string `json:"streetAddress,omitempty"`
	PostalCode         string `json:"postalCode,omitempty"`
	CommonName         string `json:"commonName,omitempty"`
	SerialNumber       string `json:"serialNumber,omitempty"`
}