io.fabric8.elasticsearch.plugin.auth

Class OpenShiftTokenAuthentication

java.lang.Object

io.fabric8.elasticsearch.plugin.auth.OpenShiftTokenAuthentication

All Implemented Interfaces:

com.floragunn.searchguard.auth.AuthenticationBackend, com.floragunn.searchguard.auth.HTTPAuthenticator

public class OpenShiftTokenAuthentication
extends Object
implements com.floragunn.searchguard.auth.AuthenticationBackend, com.floragunn.searchguard.auth.HTTPAuthenticator

OpenShiftTokenAuthentication is an AuthenticationBackend that will utilize an authorization bearer token to create AuthCredentials and establish a User with roles for: kibana, generated Openshift logging role name. It optionally will populate backendroles based on satisfying a SubjectAccessReview for static role definitions The backend is configured as follows in the sg_config.yml: searchguard: authc: my_domain: enabled: true order: 1 http_authenticator: challange: false type: io.fabric8.elasticsearch.plugin.auth.OpenShiftTokenAuthentication authentication_backend: type: io.fabric8.elasticsearch.plugin.auth.OpenShiftTokenAuthentication config: subjectAccessReviews: prometheus: namespace: openshift-logging verb: view resource: prometheus resourceAPIGroup: metrics.openshift.io

Constructor Summary

Constructors

Constructor and Description
OpenShiftTokenAuthentication(org.elasticsearch.common.settings.Settings settings)

Method Summary

Modifier and Type	Method and Description
com.floragunn.searchguard.user.User	authenticate(com.floragunn.searchguard.user.AuthCredentials credentials)
boolean	exists(com.floragunn.searchguard.user.User user)
com.floragunn.searchguard.user.AuthCredentials	extractCredentials(org.elasticsearch.rest.RestRequest request, org.elasticsearch.common.util.concurrent.ThreadContext context)
String	getType()
boolean	reRequestAuthentication(org.elasticsearch.rest.RestChannel channel, com.floragunn.searchguard.user.AuthCredentials credentials) ReRequest authentication is Unsupported

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

OpenShiftTokenAuthentication

public OpenShiftTokenAuthentication(org.elasticsearch.common.settings.Settings settings)

Method Detail

extractCredentials

public com.floragunn.searchguard.user.AuthCredentials extractCredentials(org.elasticsearch.rest.RestRequest request,
                                                                         org.elasticsearch.common.util.concurrent.ThreadContext context)
                                                                  throws org.elasticsearch.ElasticsearchSecurityException

Specified by:

extractCredentials in interface com.floragunn.searchguard.auth.HTTPAuthenticator

Throws:

org.elasticsearch.ElasticsearchSecurityException

authenticate

public com.floragunn.searchguard.user.User authenticate(com.floragunn.searchguard.user.AuthCredentials credentials)
                                                 throws org.elasticsearch.ElasticsearchSecurityException

Specified by:

authenticate in interface com.floragunn.searchguard.auth.AuthenticationBackend

Throws:

org.elasticsearch.ElasticsearchSecurityException

exists

public boolean exists(com.floragunn.searchguard.user.User user)

Specified by:

exists in interface com.floragunn.searchguard.auth.AuthenticationBackend

reRequestAuthentication

public boolean reRequestAuthentication(org.elasticsearch.rest.RestChannel channel,
                                       com.floragunn.searchguard.user.AuthCredentials credentials)

ReRequest authentication is Unsupported

Specified by:

reRequestAuthentication in interface com.floragunn.searchguard.auth.HTTPAuthenticator

getType

public String getType()

Specified by:

getType in interface com.floragunn.searchguard.auth.AuthenticationBackend

Specified by:

getType in interface com.floragunn.searchguard.auth.HTTPAuthenticator