quay

type EntityRecord ¶ added in v0.5.5

type EntityRecord struct {
	// LastRefreshTime is used to determine whether this record should be refreshed or not
	LastRefreshTime int64
	// PossessedScopes is the list of scopes possessed by the token on a given entity
	PossessedScopes []Scope
}

EntityRecord stores the scopes possessed by some token for given "entity" (either repository or organization).

type LoginTokenInfo ¶ added in v0.5.5

type LoginTokenInfo struct {
	Username     string
	Repositories map[string]LoginTokenRepositoryInfo
}

LoginTokenInfo is the output of the AnalyzeLoginToken function describing the information extracted from the JWT token obtained after a successful docker login from the DockerLogin function.

func AnalyzeLoginToken(token string) (LoginTokenInfo, error)

type LoginTokenRepositoryInfo ¶ added in v0.5.5

type LoginTokenRepositoryInfo struct {
	Pushable bool
	Pullable bool
}

LoginTokenRepositoryInfo represents the capabilities mentioned in the JWT docker login token for a certain repository.

type Quay ¶

type Quay struct {
	Configuration *opconfig.OperatorConfiguration

	BaseUrl         string
	OAuthCapability serviceprovider.OAuthCapability
	// contains filtered or unexported fields
}

func (q *Quay) CheckRepositoryAccess(ctx context.Context, cl client.Client, accessCheck *api.SPIAccessCheck) (*api.SPIAccessCheckStatus, error)

func (q *Quay) GetBaseUrl() string

func (q *Quay) GetDownloadFileCapability() serviceprovider.DownloadFileCapability

func (q *Quay) GetOAuthCapability() serviceprovider.OAuthCapability

func (q *Quay) GetRefreshTokenCapability() serviceprovider.RefreshTokenCapability

func (q *Quay) GetType() config.ServiceProviderType

func (q *Quay) LookupTokens(ctx context.Context, cl client.Client, binding *api.SPIAccessTokenBinding) ([]api.SPIAccessToken, error)

func (q *Quay) MapToken(ctx context.Context, binding *api.SPIAccessTokenBinding, token *api.SPIAccessToken, tokenData *api.Token) (serviceprovider.AccessTokenMapper, error)

func (q *Quay) PersistMetadata(ctx context.Context, _ client.Client, token *api.SPIAccessToken) error

func (q *Quay) Validate(ctx context.Context, validated serviceprovider.Validated) (serviceprovider.ValidationResult, error)

type RepositoryMetadata ¶ added in v0.5.5

type RepositoryMetadata struct {
	Repository   EntityRecord
	Organization EntityRecord
}

RepositoryMetadata is the return value of the FetchRepo method. It represents the scopes that are granted for some token on a given repository and organization it belongs to.

type Scope ¶ added in v0.4.3

type Scope string

Scope represents a Quay OAuth scope

const (
	OAuthTokenUserName       = "$oauthtoken"
	ScopeRepoRead      Scope = "repo:read"
	ScopeRepoWrite     Scope = "repo:write"
	ScopeRepoAdmin     Scope = "repo:admin"
	ScopeRepoCreate    Scope = "repo:create"
	ScopeUserRead      Scope = "user:read"
	ScopeUserAdmin     Scope = "user:admin"
	ScopeOrgAdmin      Scope = "org:admin"
	// These are not real scopes in Quay, but we represent the permissions of the robot tokens with them
	ScopePush Scope = "push"
	ScopePull Scope = "pull"
)

func (s Scope) Implies(other Scope) bool

func (s Scope) IsIncluded(scopes []Scope) bool

type TokenState ¶ added in v0.4.3

type TokenState struct {
	Repositories  map[string]EntityRecord
	Organizations map[string]EntityRecord
}

TokenState represents the all the known scopes for all repositories for some token. This is persisted in the status of the SPIAccessToken object.