clean ziti; configurable proxy identities

This commit is contained in:
Michael Quigley 2022-08-10 11:56:00 -04:00
parent c63cafbf51
commit 6b47936b29
No known key found for this signature in database
GPG Key ID: 9B60314A9DD20A62
3 changed files with 8 additions and 1 deletions

View File

@ -19,6 +19,7 @@ type EndpointConfig struct {
type ProxyConfig struct { type ProxyConfig struct {
UrlTemplate string UrlTemplate string
Identities []string
} }
func LoadConfig(path string) (*Config, error) { func LoadConfig(path string) (*Config, error) {

View File

@ -160,7 +160,11 @@ func (self *tunnelHandler) createServicePolicyBind(svcName, svcId, envId string,
} }
func (self *tunnelHandler) createServicePolicyDial(svcName, svcId string, edge *rest_management_api_client.ZitiEdgeManagement) error { func (self *tunnelHandler) createServicePolicyDial(svcName, svcId string, edge *rest_management_api_client.ZitiEdgeManagement) error {
identityRoles := []string{"@PyB606.S."} // @proxy var identityRoles []string
for _, proxyIdentity := range self.cfg.Proxy.Identities {
identityRoles = append(identityRoles, "@"+proxyIdentity)
logrus.Infof("added proxy identity role '%v'", proxyIdentity)
}
name := fmt.Sprintf("%v-dial", svcName) name := fmt.Sprintf("%v-dial", svcName)
postureCheckRoles := []string{} postureCheckRoles := []string{}
semantic := rest_model.SemanticAllOf semantic := rest_model.SemanticAllOf

View File

@ -4,6 +4,8 @@ endpoint:
proxy: proxy:
url_template: "http://{svcName}.zrok.quigley.com:10111/" url_template: "http://{svcName}.zrok.quigley.com:10111/"
identities:
- "-zbBF8eVb-"
store: store:
path: zrok.db path: zrok.db