mirror of
https://github.com/sourcebot-dev/sourcebot.git
synced 2025-12-12 04:15:30 +00:00
1321 lines
41 KiB
Text
1321 lines
41 KiB
Text
{/* THIS IS A AUTO-GENERATED FILE. DO NOT MODIFY MANUALLY! */}
|
|
```json
|
|
{
|
|
"$schema": "http://json-schema.org/draft-07/schema#",
|
|
"title": "IdentityProviderConfig",
|
|
"definitions": {
|
|
"GitHubIdentityProviderConfig": {
|
|
"type": "object",
|
|
"properties": {
|
|
"provider": {
|
|
"const": "github"
|
|
},
|
|
"purpose": {
|
|
"enum": [
|
|
"sso",
|
|
"integration"
|
|
]
|
|
},
|
|
"clientId": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"clientSecret": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"baseUrl": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"required": {
|
|
"type": "boolean",
|
|
"default": false
|
|
}
|
|
},
|
|
"required": [
|
|
"provider",
|
|
"purpose",
|
|
"clientId",
|
|
"clientSecret"
|
|
]
|
|
},
|
|
"GitLabIdentityProviderConfig": {
|
|
"type": "object",
|
|
"properties": {
|
|
"provider": {
|
|
"const": "gitlab"
|
|
},
|
|
"purpose": {
|
|
"enum": [
|
|
"sso",
|
|
"integration"
|
|
]
|
|
},
|
|
"clientId": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"clientSecret": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"baseUrl": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"required": {
|
|
"type": "boolean",
|
|
"default": false
|
|
}
|
|
},
|
|
"required": [
|
|
"provider",
|
|
"purpose",
|
|
"clientId",
|
|
"clientSecret"
|
|
]
|
|
},
|
|
"GoogleIdentityProviderConfig": {
|
|
"type": "object",
|
|
"properties": {
|
|
"provider": {
|
|
"const": "google"
|
|
},
|
|
"clientId": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"clientSecret": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"required": [
|
|
"provider",
|
|
"clientId",
|
|
"clientSecret"
|
|
]
|
|
},
|
|
"OktaIdentityProviderConfig": {
|
|
"type": "object",
|
|
"properties": {
|
|
"provider": {
|
|
"const": "okta"
|
|
},
|
|
"clientId": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"clientSecret": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"issuer": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"required": [
|
|
"provider",
|
|
"clientId",
|
|
"clientSecret",
|
|
"issuer"
|
|
]
|
|
},
|
|
"KeycloakIdentityProviderConfig": {
|
|
"type": "object",
|
|
"properties": {
|
|
"provider": {
|
|
"const": "keycloak"
|
|
},
|
|
"clientId": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"clientSecret": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"issuer": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"required": [
|
|
"provider",
|
|
"clientId",
|
|
"clientSecret",
|
|
"issuer"
|
|
]
|
|
},
|
|
"MicrosoftEntraIDIdentityProviderConfig": {
|
|
"type": "object",
|
|
"properties": {
|
|
"provider": {
|
|
"const": "microsoft-entra-id"
|
|
},
|
|
"clientId": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"clientSecret": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"issuer": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"required": [
|
|
"provider",
|
|
"clientId",
|
|
"clientSecret",
|
|
"issuer"
|
|
]
|
|
},
|
|
"GCPIAPIdentityProviderConfig": {
|
|
"type": "object",
|
|
"properties": {
|
|
"provider": {
|
|
"const": "gcp-iap"
|
|
},
|
|
"audience": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"required": [
|
|
"provider",
|
|
"audience"
|
|
]
|
|
}
|
|
},
|
|
"oneOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"provider": {
|
|
"const": "github"
|
|
},
|
|
"purpose": {
|
|
"enum": [
|
|
"sso",
|
|
"integration"
|
|
]
|
|
},
|
|
"clientId": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"clientSecret": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"baseUrl": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"required": {
|
|
"type": "boolean",
|
|
"default": false
|
|
}
|
|
},
|
|
"required": [
|
|
"provider",
|
|
"purpose",
|
|
"clientId",
|
|
"clientSecret"
|
|
]
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"provider": {
|
|
"const": "gitlab"
|
|
},
|
|
"purpose": {
|
|
"enum": [
|
|
"sso",
|
|
"integration"
|
|
]
|
|
},
|
|
"clientId": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"clientSecret": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"baseUrl": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"required": {
|
|
"type": "boolean",
|
|
"default": false
|
|
}
|
|
},
|
|
"required": [
|
|
"provider",
|
|
"purpose",
|
|
"clientId",
|
|
"clientSecret"
|
|
]
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"provider": {
|
|
"const": "google"
|
|
},
|
|
"clientId": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"clientSecret": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"required": [
|
|
"provider",
|
|
"clientId",
|
|
"clientSecret"
|
|
]
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"provider": {
|
|
"const": "okta"
|
|
},
|
|
"clientId": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"clientSecret": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"issuer": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"required": [
|
|
"provider",
|
|
"clientId",
|
|
"clientSecret",
|
|
"issuer"
|
|
]
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"provider": {
|
|
"const": "keycloak"
|
|
},
|
|
"clientId": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"clientSecret": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"issuer": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"required": [
|
|
"provider",
|
|
"clientId",
|
|
"clientSecret",
|
|
"issuer"
|
|
]
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"provider": {
|
|
"const": "microsoft-entra-id"
|
|
},
|
|
"clientId": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"clientSecret": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
},
|
|
"issuer": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"required": [
|
|
"provider",
|
|
"clientId",
|
|
"clientSecret",
|
|
"issuer"
|
|
]
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"provider": {
|
|
"const": "gcp-iap"
|
|
},
|
|
"audience": {
|
|
"anyOf": [
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"env": {
|
|
"type": "string",
|
|
"description": "The name of the environment variable that contains the token."
|
|
}
|
|
},
|
|
"required": [
|
|
"env"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
{
|
|
"type": "object",
|
|
"properties": {
|
|
"googleCloudSecret": {
|
|
"type": "string",
|
|
"description": "The resource name of a Google Cloud secret. Must be in the format `projects/<project-id>/secrets/<secret-name>/versions/<version-id>`. See https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets"
|
|
}
|
|
},
|
|
"required": [
|
|
"googleCloudSecret"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"required": [
|
|
"provider",
|
|
"audience"
|
|
]
|
|
}
|
|
]
|
|
}
|
|
```
|