strongdm 1.0.26 → 1.0.30
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.git/FETCH_HEAD +2 -0
- data/.git/HEAD +1 -0
- data/.git/ORIG_HEAD +1 -0
- data/.git/config +14 -0
- data/.git/description +1 -0
- data/.git/hooks/applypatch-msg.sample +15 -0
- data/.git/hooks/commit-msg.sample +24 -0
- data/.git/hooks/fsmonitor-watchman.sample +114 -0
- data/.git/hooks/post-update.sample +8 -0
- data/.git/hooks/pre-applypatch.sample +14 -0
- data/.git/hooks/pre-commit.sample +49 -0
- data/.git/hooks/pre-push.sample +53 -0
- data/.git/hooks/pre-rebase.sample +169 -0
- data/.git/hooks/pre-receive.sample +24 -0
- data/.git/hooks/prepare-commit-msg.sample +42 -0
- data/.git/hooks/update.sample +128 -0
- data/.git/index +0 -0
- data/.git/info/exclude +6 -0
- data/.git/logs/HEAD +4 -0
- data/.git/logs/refs/heads/development +1 -0
- data/.git/logs/refs/heads/master +2 -0
- data/.git/logs/refs/remotes/origin/HEAD +1 -0
- data/.git/objects/pack/pack-2a1c5a06b136f3cf06883c00f082bae3158e9ac6.idx +0 -0
- data/.git/objects/pack/pack-2a1c5a06b136f3cf06883c00f082bae3158e9ac6.pack +0 -0
- data/.git/packed-refs +30 -0
- data/.git/refs/heads/development +1 -0
- data/.git/refs/heads/master +1 -0
- data/.git/refs/remotes/origin/HEAD +1 -0
- data/doc/LICENSE.html +8 -13
- data/doc/Object.html +13 -26
- data/doc/README_md.html +12 -14
- data/doc/SDM/AKS.html +50 -122
- data/doc/SDM/AKSBasicAuth.html +44 -113
- data/doc/SDM/AKSServiceAccount.html +42 -108
- data/doc/SDM/AKSServiceAccountUserImpersonation.html +42 -108
- data/doc/SDM/AKSUserImpersonation.html +50 -122
- data/doc/SDM/AWS.html +45 -114
- data/doc/SDM/AWSStore.html +15 -63
- data/doc/SDM/AccountAttachment.html +21 -66
- data/doc/SDM/AccountAttachmentCreateResponse.html +21 -66
- data/doc/SDM/AccountAttachmentDeleteResponse.html +15 -57
- data/doc/SDM/AccountAttachmentGetResponse.html +21 -66
- data/doc/SDM/AccountAttachments.html +15 -88
- data/doc/SDM/AccountCreateResponse.html +24 -72
- data/doc/SDM/AccountDeleteResponse.html +15 -57
- data/doc/SDM/AccountGetResponse.html +21 -66
- data/doc/SDM/AccountGrant.html +21 -72
- data/doc/SDM/AccountGrantCreateResponse.html +21 -66
- data/doc/SDM/AccountGrantDeleteResponse.html +15 -57
- data/doc/SDM/AccountGrantGetResponse.html +21 -66
- data/doc/SDM/AccountGrants.html +15 -88
- data/doc/SDM/AccountUpdateResponse.html +21 -66
- data/doc/SDM/Accounts.html +18 -104
- data/doc/SDM/AlreadyExistsError.html +12 -33
- data/doc/SDM/AmazonEKS.html +53 -134
- data/doc/SDM/AmazonEKSUserImpersonation.html +53 -134
- data/doc/SDM/AmazonES.html +50 -125
- data/doc/SDM/AmazonMQAMQP091.html +47 -119
- data/doc/SDM/Athena.html +43 -118
- data/doc/SDM/AuroraMysql.html +46 -118
- data/doc/SDM/AuroraPostgres.html +48 -123
- data/doc/SDM/AuthenticationError.html +12 -33
- data/doc/SDM/BadRequestError.html +12 -33
- data/doc/SDM/BigQuery.html +37 -106
- data/doc/SDM/Cassandra.html +45 -117
- data/doc/SDM/Citus.html +48 -123
- data/doc/SDM/Client.html +27 -142
- data/doc/SDM/Clustrix.html +46 -118
- data/doc/SDM/Cockroach.html +48 -123
- data/doc/SDM/ControlPanel.html +14 -61
- data/doc/SDM/ControlPanelGetSSHCAPublicKeyResponse.html +15 -60
- data/doc/SDM/ControlPanelVerifyJWTResponse.html +21 -66
- data/doc/SDM/CreateResponseMetadata.html +15 -49
- data/doc/SDM/DB2LUW.html +46 -118
- data/doc/SDM/DB2i.html +45 -117
- data/doc/SDM/DeadlineExceededError.html +12 -33
- data/doc/SDM/DeleteResponseMetadata.html +15 -49
- data/doc/SDM/{AmazonMQRabbitMQAMQP091.html → DocumentDBHost.html} +56 -131
- data/doc/SDM/DocumentDBReplicaSet.html +367 -0
- data/doc/SDM/Druid.html +44 -113
- data/doc/SDM/DynamoDB.html +51 -126
- data/doc/SDM/Elastic.html +45 -117
- data/doc/SDM/ElasticacheRedis.html +41 -110
- data/doc/SDM/Gateway.html +31 -88
- data/doc/SDM/GetResponseMetadata.html +15 -49
- data/doc/SDM/GoogleGKE.html +43 -109
- data/doc/SDM/GoogleGKEUserImpersonation.html +43 -109
- data/doc/SDM/Greenplum.html +48 -123
- data/doc/SDM/HTTPAuth.html +49 -121
- data/doc/SDM/HTTPBasicAuth.html +51 -126
- data/doc/SDM/HTTPNoAuth.html +47 -116
- data/doc/SDM/InternalError.html +12 -33
- data/doc/SDM/Kubernetes.html +50 -122
- data/doc/SDM/KubernetesBasicAuth.html +44 -113
- data/doc/SDM/KubernetesServiceAccount.html +42 -108
- data/doc/SDM/KubernetesServiceAccountUserImpersonation.html +42 -108
- data/doc/SDM/KubernetesUserImpersonation.html +50 -122
- data/doc/SDM/Maria.html +46 -118
- data/doc/SDM/Memcached.html +39 -102
- data/doc/SDM/Memsql.html +46 -118
- data/doc/SDM/MongoHost.html +47 -122
- data/doc/SDM/MongoLegacyHost.html +48 -126
- data/doc/SDM/MongoLegacyReplicaset.html +51 -132
- data/doc/SDM/MongoReplicaSet.html +51 -132
- data/doc/SDM/Mysql.html +46 -118
- data/doc/SDM/{SecretStore.html → Neptune.html} +88 -84
- data/doc/SDM/NeptuneIAM.html +382 -0
- data/doc/SDM/NodeCreateResponse.html +21 -69
- data/doc/SDM/NodeDeleteResponse.html +15 -57
- data/doc/SDM/NodeGetResponse.html +15 -60
- data/doc/SDM/NodeUpdateResponse.html +15 -60
- data/doc/SDM/Nodes.html +16 -102
- data/doc/SDM/NotFoundError.html +12 -33
- data/doc/SDM/Oracle.html +45 -120
- data/doc/SDM/PermissionError.html +12 -33
- data/doc/SDM/Plumbing.html +2285 -7858
- data/doc/SDM/Postgres.html +48 -123
- data/doc/SDM/Presto.html +45 -120
- data/doc/SDM/RDP.html +45 -114
- data/doc/SDM/RPCError.html +12 -38
- data/doc/SDM/RabbitMQAMQP091.html +47 -119
- data/doc/SDM/RateLimitError.html +12 -38
- data/doc/SDM/RateLimitMetadata.html +21 -69
- data/doc/SDM/RawTCP.html +39 -102
- data/doc/SDM/Redis.html +41 -107
- data/doc/SDM/Redshift.html +48 -123
- data/doc/SDM/Relay.html +21 -72
- data/doc/SDM/ResourceCreateResponse.html +21 -66
- data/doc/SDM/ResourceDeleteResponse.html +15 -57
- data/doc/SDM/ResourceGetResponse.html +21 -66
- data/doc/SDM/ResourceUpdateResponse.html +21 -66
- data/doc/SDM/Resources.html +16 -115
- data/doc/SDM/Role.html +26 -77
- data/doc/SDM/RoleAttachment.html +22 -67
- data/doc/SDM/RoleAttachmentCreateResponse.html +21 -66
- data/doc/SDM/RoleAttachmentDeleteResponse.html +15 -57
- data/doc/SDM/RoleAttachmentGetResponse.html +21 -66
- data/doc/SDM/RoleAttachments.html +15 -88
- data/doc/SDM/RoleCreateResponse.html +21 -66
- data/doc/SDM/RoleDeleteResponse.html +15 -57
- data/doc/SDM/RoleGetResponse.html +21 -66
- data/doc/SDM/RoleGrant.html +15 -60
- data/doc/SDM/RoleGrantCreateResponse.html +21 -66
- data/doc/SDM/RoleGrantDeleteResponse.html +15 -57
- data/doc/SDM/RoleGrantGetResponse.html +21 -66
- data/doc/SDM/RoleGrants.html +15 -88
- data/doc/SDM/RoleUpdateResponse.html +21 -66
- data/doc/SDM/Roles.html +16 -102
- data/doc/SDM/SQLServer.html +48 -126
- data/doc/SDM/SSH.html +46 -118
- data/doc/SDM/SSHCert.html +43 -112
- data/doc/SDM/SSHCustomerKey.html +46 -118
- data/doc/SDM/SecretStoreCreateResponse.html +21 -66
- data/doc/SDM/SecretStoreDeleteResponse.html +15 -57
- data/doc/SDM/SecretStoreGetResponse.html +21 -66
- data/doc/SDM/SecretStoreUpdateResponse.html +21 -66
- data/doc/SDM/SecretStores.html +16 -102
- data/doc/SDM/Service.html +15 -63
- data/doc/SDM/SingleStore.html +46 -118
- data/doc/SDM/Snowflake.html +46 -118
- data/doc/SDM/Sybase.html +44 -113
- data/doc/SDM/SybaseIQ.html +44 -113
- data/doc/SDM/Tag.html +15 -57
- data/doc/SDM/Teradata.html +45 -114
- data/doc/SDM/UpdateResponseMetadata.html +15 -49
- data/doc/SDM/User.html +21 -75
- data/doc/SDM/VaultTLSStore.html +45 -87
- data/doc/SDM/VaultTokenStore.html +30 -63
- data/doc/SDM.html +7 -17
- data/doc/V1/AccountAttachments/Service.html +11 -20
- data/doc/V1/AccountAttachments.html +7 -17
- data/doc/V1/AccountGrants/Service.html +11 -20
- data/doc/V1/AccountGrants.html +7 -17
- data/doc/V1/Accounts/Service.html +12 -21
- data/doc/V1/Accounts.html +7 -17
- data/doc/V1/ControlPanel/Service.html +11 -20
- data/doc/V1/ControlPanel.html +7 -17
- data/doc/V1/Nodes/Service.html +13 -22
- data/doc/V1/Nodes.html +7 -17
- data/doc/V1/Resources/Service.html +11 -20
- data/doc/V1/Resources.html +7 -17
- data/doc/V1/RoleAttachments/Service.html +11 -20
- data/doc/V1/RoleAttachments.html +7 -17
- data/doc/V1/RoleGrants/Service.html +11 -20
- data/doc/V1/RoleGrants.html +7 -17
- data/doc/V1/Roles/Service.html +11 -20
- data/doc/V1/Roles.html +7 -17
- data/doc/V1/SecretStores/Service.html +11 -20
- data/doc/V1/SecretStores.html +7 -17
- data/doc/V1/Tags.html +7 -17
- data/doc/V1.html +19 -800
- data/doc/created.rid +37 -49
- data/doc/css/rdoc.css +55 -6
- data/doc/examples/Gemfile.html +8 -13
- data/doc/index.html +12 -190
- data/doc/js/darkfish.js +22 -99
- data/doc/js/navigation.js +4 -40
- data/doc/js/navigation.js.gz +0 -0
- data/doc/js/search.js +32 -31
- data/doc/js/search_index.js +1 -1
- data/doc/js/search_index.js.gz +0 -0
- data/doc/js/searcher.js +6 -6
- data/doc/js/searcher.js.gz +0 -0
- data/doc/lib/version.html +9 -14
- data/doc/table_of_contents.html +668 -916
- data/lib/grpc/account_attachments_services_pb.rb +4 -4
- data/lib/grpc/account_grants_services_pb.rb +4 -4
- data/lib/grpc/accounts_services_pb.rb +5 -5
- data/lib/grpc/control_panel_services_pb.rb +2 -2
- data/lib/grpc/drivers_pb.rb +453 -389
- data/lib/grpc/nodes_services_pb.rb +5 -5
- data/lib/grpc/options_pb.rb +1 -0
- data/lib/grpc/plumbing.rb +3100 -2848
- data/lib/grpc/resources_services_pb.rb +6 -6
- data/lib/grpc/role_attachments_services_pb.rb +4 -4
- data/lib/grpc/role_grants_services_pb.rb +4 -4
- data/lib/grpc/roles_services_pb.rb +5 -5
- data/lib/grpc/secret_store_types_pb.rb +3 -1
- data/lib/grpc/secret_stores_services_pb.rb +5 -5
- data/lib/models/porcelain.rb +4076 -3759
- data/lib/strongdm.rb +8 -1
- data/lib/svc.rb +23 -23
- data/lib/version +1 -1
- data/lib/version.rb +1 -1
- data/strongdm.gemspec +5 -5
- metadata +281 -292
- data/doc/Google/Protobuf.html +0 -95
- data/doc/Google.html +0 -95
- data/doc/SDM/AccessRuleCreateResponse.html +0 -267
- data/doc/SDM/AccessRuleDeleteResponse.html +0 -249
- data/doc/SDM/AccessRuleUpdateResponse.html +0 -267
- data/doc/SDM/AccountAttachmentCreateOptions.html +0 -231
- data/doc/V1/AccessRules/Service.html +0 -116
- data/doc/V1/AccessRules.html +0 -110
- data/doc/V1/Audits/Service.html +0 -119
- data/doc/V1/Audits.html +0 -113
- data/doc/V1/BuildsPrivate/Service.html +0 -116
- data/doc/V1/BuildsPrivate.html +0 -110
- data/doc/V1/DemoProvisioningRequests/Service.html +0 -116
- data/doc/V1/DemoProvisioningRequests.html +0 -110
- data/doc/V1/Permissions/Service.html +0 -119
- data/doc/V1/SecretStoreHealths/Service.html +0 -116
- data/doc/V1/SecretStoreHealths.html +0 -110
- data/doc/examples/Gemfile_lock.html +0 -122
- data/doc/examples/README_md.html +0 -105
- data/doc/examples/okta-sync/Gemfile.html +0 -105
- data/doc/examples/okta-sync/Gemfile_lock.html +0 -146
- data/doc/js/jquery.js +0 -4
- data/doc/strongdm_gemspec.html +0 -116
data/doc/SDM/Client.html
CHANGED
|
@@ -11,15 +11,16 @@
|
|
|
11
11
|
var index_rel_prefix = "../";
|
|
12
12
|
</script>
|
|
13
13
|
|
|
14
|
-
<script src="../js/
|
|
15
|
-
<script src="../js/
|
|
14
|
+
<script src="../js/navigation.js" defer></script>
|
|
15
|
+
<script src="../js/search.js" defer></script>
|
|
16
|
+
<script src="../js/search_index.js" defer></script>
|
|
17
|
+
<script src="../js/searcher.js" defer></script>
|
|
18
|
+
<script src="../js/darkfish.js" defer></script>
|
|
16
19
|
|
|
17
20
|
<link href="../css/fonts.css" rel="stylesheet">
|
|
18
21
|
<link href="../css/rdoc.css" rel="stylesheet">
|
|
19
22
|
|
|
20
23
|
|
|
21
|
-
|
|
22
|
-
|
|
23
24
|
<body id="top" role="document" class="class">
|
|
24
25
|
<nav role="navigation">
|
|
25
26
|
<div id="project-navigation">
|
|
@@ -56,32 +57,26 @@
|
|
|
56
57
|
|
|
57
58
|
<div id="class-metadata">
|
|
58
59
|
|
|
59
|
-
|
|
60
|
+
|
|
61
|
+
<div id="parent-class-section" class="nav-section">
|
|
60
62
|
<h3>Parent</h3>
|
|
61
63
|
|
|
62
|
-
|
|
63
64
|
<p class="link"><a href="../Object.html">Object</a>
|
|
64
|
-
|
|
65
65
|
</div>
|
|
66
66
|
|
|
67
67
|
|
|
68
68
|
|
|
69
|
-
|
|
69
|
+
|
|
70
|
+
<!-- Method Quickref -->
|
|
70
71
|
<div id="method-list-section" class="nav-section">
|
|
71
72
|
<h3>Methods</h3>
|
|
72
73
|
|
|
73
74
|
<ul class="link-list" role="directory">
|
|
74
|
-
|
|
75
75
|
<li ><a href="#method-c-new">::new</a>
|
|
76
|
-
|
|
77
76
|
<li ><a href="#method-i-get_metadata">#get_metadata</a>
|
|
78
|
-
|
|
79
77
|
<li ><a href="#method-i-jitterSleep">#jitterSleep</a>
|
|
80
|
-
|
|
81
78
|
<li ><a href="#method-i-shouldRetry">#shouldRetry</a>
|
|
82
|
-
|
|
83
79
|
<li ><a href="#method-i-sign">#sign</a>
|
|
84
|
-
|
|
85
80
|
</ul>
|
|
86
81
|
</div>
|
|
87
82
|
|
|
@@ -99,21 +94,15 @@
|
|
|
99
94
|
|
|
100
95
|
</section>
|
|
101
96
|
|
|
102
|
-
|
|
103
97
|
<section id="5Buntitled-5D" class="documentation-section">
|
|
104
|
-
|
|
105
98
|
|
|
106
|
-
|
|
107
99
|
|
|
108
|
-
|
|
109
100
|
|
|
110
|
-
|
|
111
101
|
<section class="attribute-method-details" class="method-section">
|
|
112
102
|
<header>
|
|
113
103
|
<h3>Attributes</h3>
|
|
114
104
|
</header>
|
|
115
105
|
|
|
116
|
-
|
|
117
106
|
<div id="attribute-i-_test_options" class="method-detail">
|
|
118
107
|
<div class="method-heading attribute-method-heading">
|
|
119
108
|
<span class="method-name">_test_options</span><span
|
|
@@ -122,11 +111,8 @@
|
|
|
122
111
|
|
|
123
112
|
<div class="method-description">
|
|
124
113
|
|
|
125
|
-
|
|
126
|
-
|
|
127
114
|
</div>
|
|
128
115
|
</div>
|
|
129
|
-
|
|
130
116
|
<div id="attribute-i-account_attachments" class="method-detail">
|
|
131
117
|
<div class="method-heading attribute-method-heading">
|
|
132
118
|
<span class="method-name">account_attachments</span><span
|
|
@@ -134,12 +120,9 @@
|
|
|
134
120
|
</div>
|
|
135
121
|
|
|
136
122
|
<div class="method-description">
|
|
137
|
-
|
|
138
123
|
<p><a href="AccountAttachments.html"><code>AccountAttachments</code></a> assign an account to a role or composite role.</p>
|
|
139
|
-
|
|
140
124
|
</div>
|
|
141
125
|
</div>
|
|
142
|
-
|
|
143
126
|
<div id="attribute-i-account_grants" class="method-detail">
|
|
144
127
|
<div class="method-heading attribute-method-heading">
|
|
145
128
|
<span class="method-name">account_grants</span><span
|
|
@@ -147,12 +130,9 @@
|
|
|
147
130
|
</div>
|
|
148
131
|
|
|
149
132
|
<div class="method-description">
|
|
150
|
-
|
|
151
133
|
<p><a href="AccountGrants.html"><code>AccountGrants</code></a> assign a resource directly to an account, giving the account the permission to connect to that resource.</p>
|
|
152
|
-
|
|
153
134
|
</div>
|
|
154
135
|
</div>
|
|
155
|
-
|
|
156
136
|
<div id="attribute-i-accounts" class="method-detail">
|
|
157
137
|
<div class="method-heading attribute-method-heading">
|
|
158
138
|
<span class="method-name">accounts</span><span
|
|
@@ -160,17 +140,14 @@
|
|
|
160
140
|
</div>
|
|
161
141
|
|
|
162
142
|
<div class="method-description">
|
|
163
|
-
|
|
164
143
|
<p><a href="Accounts.html"><code>Accounts</code></a> are users that have access to strongDM. There are two types of accounts:</p>
|
|
165
144
|
<ol><li>
|
|
166
|
-
<p
|
|
145
|
+
<p><strong>Users:</strong> humans who are authenticated through username and password or SSO.</p>
|
|
167
146
|
</li><li>
|
|
168
147
|
<p>**Service Accounts:** machines that are authenticated using a service token.</p>
|
|
169
148
|
</li></ol>
|
|
170
|
-
|
|
171
149
|
</div>
|
|
172
150
|
</div>
|
|
173
|
-
|
|
174
151
|
<div id="attribute-i-api_access_key" class="method-detail">
|
|
175
152
|
<div class="method-heading attribute-method-heading">
|
|
176
153
|
<span class="method-name">api_access_key</span><span
|
|
@@ -178,12 +155,9 @@
|
|
|
178
155
|
</div>
|
|
179
156
|
|
|
180
157
|
<div class="method-description">
|
|
181
|
-
|
|
182
158
|
<p>API authentication token (read-only).</p>
|
|
183
|
-
|
|
184
159
|
</div>
|
|
185
160
|
</div>
|
|
186
|
-
|
|
187
161
|
<div id="attribute-i-base_retry_delay" class="method-detail">
|
|
188
162
|
<div class="method-heading attribute-method-heading">
|
|
189
163
|
<span class="method-name">base_retry_delay</span><span
|
|
@@ -192,11 +166,8 @@
|
|
|
192
166
|
|
|
193
167
|
<div class="method-description">
|
|
194
168
|
|
|
195
|
-
|
|
196
|
-
|
|
197
169
|
</div>
|
|
198
170
|
</div>
|
|
199
|
-
|
|
200
171
|
<div id="attribute-i-control_panel" class="method-detail">
|
|
201
172
|
<div class="method-heading attribute-method-heading">
|
|
202
173
|
<span class="method-name">control_panel</span><span
|
|
@@ -204,12 +175,9 @@
|
|
|
204
175
|
</div>
|
|
205
176
|
|
|
206
177
|
<div class="method-description">
|
|
207
|
-
|
|
208
178
|
<p><a href="ControlPanel.html"><code>ControlPanel</code></a> contains all administrative controls.</p>
|
|
209
|
-
|
|
210
179
|
</div>
|
|
211
180
|
</div>
|
|
212
|
-
|
|
213
181
|
<div id="attribute-i-max_retries" class="method-detail">
|
|
214
182
|
<div class="method-heading attribute-method-heading">
|
|
215
183
|
<span class="method-name">max_retries</span><span
|
|
@@ -218,11 +186,8 @@
|
|
|
218
186
|
|
|
219
187
|
<div class="method-description">
|
|
220
188
|
|
|
221
|
-
|
|
222
|
-
|
|
223
189
|
</div>
|
|
224
190
|
</div>
|
|
225
|
-
|
|
226
191
|
<div id="attribute-i-max_retry_delay" class="method-detail">
|
|
227
192
|
<div class="method-heading attribute-method-heading">
|
|
228
193
|
<span class="method-name">max_retry_delay</span><span
|
|
@@ -231,11 +196,8 @@
|
|
|
231
196
|
|
|
232
197
|
<div class="method-description">
|
|
233
198
|
|
|
234
|
-
|
|
235
|
-
|
|
236
199
|
</div>
|
|
237
200
|
</div>
|
|
238
|
-
|
|
239
201
|
<div id="attribute-i-nodes" class="method-detail">
|
|
240
202
|
<div class="method-heading attribute-method-heading">
|
|
241
203
|
<span class="method-name">nodes</span><span
|
|
@@ -243,17 +205,14 @@
|
|
|
243
205
|
</div>
|
|
244
206
|
|
|
245
207
|
<div class="method-description">
|
|
246
|
-
|
|
247
208
|
<p><a href="Nodes.html"><code>Nodes</code></a> make up the strongDM network, and allow your users to connect securely to your resources. There are two types of nodes:</p>
|
|
248
209
|
<ul><li>
|
|
249
|
-
<p
|
|
210
|
+
<p><strong>Gateways</strong> are the entry points into network. They listen for connection from the strongDM client, and provide access to databases and servers.</p>
|
|
250
211
|
</li><li>
|
|
251
|
-
<p
|
|
212
|
+
<p><strong>Relays</strong> are used to extend the strongDM network into segmented subnets. They provide access to databases and servers but do not listen for incoming connections.</p>
|
|
252
213
|
</li></ul>
|
|
253
|
-
|
|
254
214
|
</div>
|
|
255
215
|
</div>
|
|
256
|
-
|
|
257
216
|
<div id="attribute-i-resources" class="method-detail">
|
|
258
217
|
<div class="method-heading attribute-method-heading">
|
|
259
218
|
<span class="method-name">resources</span><span
|
|
@@ -262,11 +221,8 @@
|
|
|
262
221
|
|
|
263
222
|
<div class="method-description">
|
|
264
223
|
|
|
265
|
-
|
|
266
|
-
|
|
267
224
|
</div>
|
|
268
225
|
</div>
|
|
269
|
-
|
|
270
226
|
<div id="attribute-i-role_attachments" class="method-detail">
|
|
271
227
|
<div class="method-heading attribute-method-heading">
|
|
272
228
|
<span class="method-name">role_attachments</span><span
|
|
@@ -274,12 +230,9 @@
|
|
|
274
230
|
</div>
|
|
275
231
|
|
|
276
232
|
<div class="method-description">
|
|
277
|
-
|
|
278
233
|
<p><a href="RoleAttachments.html"><code>RoleAttachments</code></a> represent relationships between composite roles and the roles that make up those composite roles. When a composite role is attached to another role, the permissions granted to members of the composite role are augmented to include the permissions granted to members of the attached role.</p>
|
|
279
|
-
|
|
280
234
|
</div>
|
|
281
235
|
</div>
|
|
282
|
-
|
|
283
236
|
<div id="attribute-i-role_grants" class="method-detail">
|
|
284
237
|
<div class="method-heading attribute-method-heading">
|
|
285
238
|
<span class="method-name">role_grants</span><span
|
|
@@ -287,12 +240,9 @@
|
|
|
287
240
|
</div>
|
|
288
241
|
|
|
289
242
|
<div class="method-description">
|
|
290
|
-
|
|
291
243
|
<p><a href="RoleGrants.html"><code>RoleGrants</code></a> represent relationships between composite roles and the roles that make up those composite roles. When a composite role is attached to another role, the permissions granted to members of the composite role are augmented to include the permissions granted to members of the attached role.</p>
|
|
292
|
-
|
|
293
244
|
</div>
|
|
294
245
|
</div>
|
|
295
|
-
|
|
296
246
|
<div id="attribute-i-roles" class="method-detail">
|
|
297
247
|
<div class="method-heading attribute-method-heading">
|
|
298
248
|
<span class="method-name">roles</span><span
|
|
@@ -300,12 +250,9 @@
|
|
|
300
250
|
</div>
|
|
301
251
|
|
|
302
252
|
<div class="method-description">
|
|
303
|
-
|
|
304
253
|
<p><a href="Roles.html"><code>Roles</code></a> are tools for controlling user access to resources. Each <a href="Role.html"><code>Role</code></a> holds a list of resources which they grant access to. Composite roles are a special type of <a href="Role.html"><code>Role</code></a> which have no resource associations of their own, but instead grant access to the combined resources associated with a set of child roles. Each user can be a member of one <a href="Role.html"><code>Role</code></a> or composite role.</p>
|
|
305
|
-
|
|
306
254
|
</div>
|
|
307
255
|
</div>
|
|
308
|
-
|
|
309
256
|
<div id="attribute-i-secret_stores" class="method-detail">
|
|
310
257
|
<div class="method-heading attribute-method-heading">
|
|
311
258
|
<span class="method-name">secret_stores</span><span
|
|
@@ -313,42 +260,29 @@
|
|
|
313
260
|
</div>
|
|
314
261
|
|
|
315
262
|
<div class="method-description">
|
|
316
|
-
|
|
317
263
|
<p><a href="SecretStores.html"><code>SecretStores</code></a> are servers where resource secrets (passwords, keys) are stored.</p>
|
|
318
|
-
|
|
319
264
|
</div>
|
|
320
265
|
</div>
|
|
321
|
-
|
|
322
266
|
</section>
|
|
323
|
-
|
|
324
267
|
|
|
325
|
-
|
|
268
|
+
|
|
326
269
|
<section id="public-class-5Buntitled-5D-method-details" class="method-section">
|
|
327
270
|
<header>
|
|
328
271
|
<h3>Public Class Methods</h3>
|
|
329
272
|
</header>
|
|
330
273
|
|
|
331
|
-
|
|
332
274
|
<div id="method-c-new" class="method-detail ">
|
|
333
|
-
|
|
334
275
|
<div class="method-heading">
|
|
335
276
|
<span class="method-name">new</span><span
|
|
336
277
|
class="method-args">(api_access_key, api_secret_key, host:"api.strongdm.com:443", insecure:false)</span>
|
|
337
|
-
|
|
338
278
|
<span class="method-click-advice">click to toggle source</span>
|
|
339
|
-
|
|
340
279
|
</div>
|
|
341
|
-
|
|
342
280
|
|
|
343
281
|
<div class="method-description">
|
|
344
|
-
|
|
345
282
|
<p>Creates a new strongDM API client.</p>
|
|
346
|
-
|
|
347
|
-
|
|
348
283
|
|
|
349
|
-
|
|
350
284
|
<div class="method-source-code" id="new-source">
|
|
351
|
-
<pre><span class="ruby-comment"># File lib/strongdm.rb, line
|
|
285
|
+
<pre><span class="ruby-comment"># File lib/strongdm.rb, line 33</span>
|
|
352
286
|
<span class="ruby-keyword">def</span> <span class="ruby-identifier ruby-title">initialize</span>(<span class="ruby-identifier">api_access_key</span>, <span class="ruby-identifier">api_secret_key</span>, <span class="ruby-value">host:</span><span class="ruby-string">"api.strongdm.com:443"</span>, <span class="ruby-value">insecure:</span><span class="ruby-keyword">false</span>)
|
|
353
287
|
<span class="ruby-identifier">raise</span> <span class="ruby-constant">TypeError</span>, <span class="ruby-string">'client access key must be a string'</span> <span class="ruby-keyword">unless</span> <span class="ruby-identifier">api_access_key</span>.<span class="ruby-identifier">kind_of?</span>(<span class="ruby-constant">String</span>)
|
|
354
288
|
<span class="ruby-identifier">raise</span> <span class="ruby-constant">TypeError</span>, <span class="ruby-string">'client secret key must be a string'</span> <span class="ruby-keyword">unless</span> <span class="ruby-identifier">api_secret_key</span>.<span class="ruby-identifier">kind_of?</span>(<span class="ruby-constant">String</span>)
|
|
@@ -371,76 +305,56 @@
|
|
|
371
305
|
<span class="ruby-ivar">@_test_options</span> = <span class="ruby-constant">Hash</span>.<span class="ruby-identifier">new</span>
|
|
372
306
|
<span class="ruby-keyword">end</span></pre>
|
|
373
307
|
</div>
|
|
374
|
-
|
|
375
308
|
</div>
|
|
376
309
|
|
|
377
|
-
|
|
378
310
|
|
|
379
|
-
|
|
380
311
|
</div>
|
|
381
312
|
|
|
382
|
-
|
|
383
313
|
</section>
|
|
384
|
-
|
|
314
|
+
|
|
385
315
|
<section id="public-instance-5Buntitled-5D-method-details" class="method-section">
|
|
386
316
|
<header>
|
|
387
317
|
<h3>Public Instance Methods</h3>
|
|
388
318
|
</header>
|
|
389
319
|
|
|
390
|
-
|
|
391
320
|
<div id="method-i-get_metadata" class="method-detail ">
|
|
392
|
-
|
|
393
321
|
<div class="method-heading">
|
|
394
322
|
<span class="method-name">get_metadata</span><span
|
|
395
323
|
class="method-args">(method_name, req)</span>
|
|
396
|
-
|
|
397
324
|
<span class="method-click-advice">click to toggle source</span>
|
|
398
|
-
|
|
399
325
|
</div>
|
|
400
|
-
|
|
401
326
|
|
|
402
327
|
<div class="method-description">
|
|
403
328
|
|
|
404
|
-
|
|
405
|
-
|
|
406
|
-
|
|
407
329
|
|
|
408
|
-
|
|
409
330
|
<div class="method-source-code" id="get_metadata-source">
|
|
410
|
-
<pre><span class="ruby-comment"># File lib/strongdm.rb, line
|
|
331
|
+
<pre><span class="ruby-comment"># File lib/strongdm.rb, line 55</span>
|
|
411
332
|
<span class="ruby-keyword">def</span> <span class="ruby-identifier ruby-title">get_metadata</span>(<span class="ruby-identifier">method_name</span>, <span class="ruby-identifier">req</span>)
|
|
412
|
-
<span class="ruby-keyword">return</span> {
|
|
333
|
+
<span class="ruby-keyword">return</span> {
|
|
334
|
+
<span class="ruby-value">'x-sdm-authentication':</span> <span class="ruby-ivar">@api_access_key</span>,
|
|
335
|
+
<span class="ruby-value">'x-sdm-signature':</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">sign</span>(<span class="ruby-identifier">method_name</span>, <span class="ruby-identifier">req</span>.<span class="ruby-identifier">to_proto</span>),
|
|
336
|
+
<span class="ruby-value">'x-sdm-api-version':</span> <span class="ruby-constant">API_VERSION</span>,
|
|
337
|
+
<span class="ruby-value">'x-sdm-user-agent':</span> <span class="ruby-constant">USER_AGENT</span>,
|
|
338
|
+
}
|
|
413
339
|
<span class="ruby-keyword">end</span></pre>
|
|
414
340
|
</div>
|
|
415
|
-
|
|
416
341
|
</div>
|
|
417
342
|
|
|
418
|
-
|
|
419
343
|
|
|
420
|
-
|
|
421
344
|
</div>
|
|
422
345
|
|
|
423
|
-
|
|
424
346
|
<div id="method-i-jitterSleep" class="method-detail ">
|
|
425
|
-
|
|
426
347
|
<div class="method-heading">
|
|
427
348
|
<span class="method-name">jitterSleep</span><span
|
|
428
349
|
class="method-args">(iter)</span>
|
|
429
|
-
|
|
430
350
|
<span class="method-click-advice">click to toggle source</span>
|
|
431
|
-
|
|
432
351
|
</div>
|
|
433
|
-
|
|
434
352
|
|
|
435
353
|
<div class="method-description">
|
|
436
354
|
|
|
437
|
-
|
|
438
|
-
|
|
439
|
-
|
|
440
355
|
|
|
441
|
-
|
|
442
356
|
<div class="method-source-code" id="jitterSleep-source">
|
|
443
|
-
<pre><span class="ruby-comment"># File lib/strongdm.rb, line
|
|
357
|
+
<pre><span class="ruby-comment"># File lib/strongdm.rb, line 80</span>
|
|
444
358
|
<span class="ruby-keyword">def</span> <span class="ruby-identifier ruby-title">jitterSleep</span>(<span class="ruby-identifier">iter</span>)
|
|
445
359
|
<span class="ruby-identifier">dur_max</span> = <span class="ruby-ivar">@base_retry_delay</span> <span class="ruby-operator">*</span> <span class="ruby-value">2</span><span class="ruby-operator">**</span><span class="ruby-identifier">iter</span>
|
|
446
360
|
<span class="ruby-keyword">if</span> (<span class="ruby-identifier">dur_max</span> <span class="ruby-operator">></span> <span class="ruby-ivar">@max_retry_delay</span>)
|
|
@@ -450,35 +364,23 @@
|
|
|
450
364
|
<span class="ruby-identifier">sleep</span>(<span class="ruby-identifier">dur</span>)
|
|
451
365
|
<span class="ruby-keyword">end</span></pre>
|
|
452
366
|
</div>
|
|
453
|
-
|
|
454
367
|
</div>
|
|
455
368
|
|
|
456
|
-
|
|
457
369
|
|
|
458
|
-
|
|
459
370
|
</div>
|
|
460
371
|
|
|
461
|
-
|
|
462
372
|
<div id="method-i-shouldRetry" class="method-detail ">
|
|
463
|
-
|
|
464
373
|
<div class="method-heading">
|
|
465
374
|
<span class="method-name">shouldRetry</span><span
|
|
466
375
|
class="method-args">(iter, err)</span>
|
|
467
|
-
|
|
468
376
|
<span class="method-click-advice">click to toggle source</span>
|
|
469
|
-
|
|
470
377
|
</div>
|
|
471
|
-
|
|
472
378
|
|
|
473
379
|
<div class="method-description">
|
|
474
380
|
|
|
475
|
-
|
|
476
|
-
|
|
477
|
-
|
|
478
381
|
|
|
479
|
-
|
|
480
382
|
<div class="method-source-code" id="shouldRetry-source">
|
|
481
|
-
<pre><span class="ruby-comment"># File lib/strongdm.rb, line
|
|
383
|
+
<pre><span class="ruby-comment"># File lib/strongdm.rb, line 89</span>
|
|
482
384
|
<span class="ruby-keyword">def</span> <span class="ruby-identifier ruby-title">shouldRetry</span>(<span class="ruby-identifier">iter</span>, <span class="ruby-identifier">err</span>)
|
|
483
385
|
<span class="ruby-keyword">if</span> (<span class="ruby-identifier">iter</span> <span class="ruby-operator">>=</span> <span class="ruby-ivar">@max_retries</span><span class="ruby-value">-1</span>)
|
|
484
386
|
<span class="ruby-keyword">return</span> <span class="ruby-keyword">false</span>
|
|
@@ -489,35 +391,23 @@
|
|
|
489
391
|
<span class="ruby-keyword">return</span> <span class="ruby-identifier">err</span>.<span class="ruby-identifier">code</span>() <span class="ruby-operator">==</span> <span class="ruby-value">13</span>
|
|
490
392
|
<span class="ruby-keyword">end</span></pre>
|
|
491
393
|
</div>
|
|
492
|
-
|
|
493
394
|
</div>
|
|
494
395
|
|
|
495
|
-
|
|
496
396
|
|
|
497
|
-
|
|
498
397
|
</div>
|
|
499
398
|
|
|
500
|
-
|
|
501
399
|
<div id="method-i-sign" class="method-detail ">
|
|
502
|
-
|
|
503
400
|
<div class="method-heading">
|
|
504
401
|
<span class="method-name">sign</span><span
|
|
505
402
|
class="method-args">(method_name, msg_bytes)</span>
|
|
506
|
-
|
|
507
403
|
<span class="method-click-advice">click to toggle source</span>
|
|
508
|
-
|
|
509
404
|
</div>
|
|
510
|
-
|
|
511
405
|
|
|
512
406
|
<div class="method-description">
|
|
513
407
|
|
|
514
|
-
|
|
515
|
-
|
|
516
|
-
|
|
517
408
|
|
|
518
|
-
|
|
519
409
|
<div class="method-source-code" id="sign-source">
|
|
520
|
-
<pre><span class="ruby-comment"># File lib/strongdm.rb, line
|
|
410
|
+
<pre><span class="ruby-comment"># File lib/strongdm.rb, line 64</span>
|
|
521
411
|
<span class="ruby-keyword">def</span> <span class="ruby-identifier ruby-title">sign</span>(<span class="ruby-identifier">method_name</span>, <span class="ruby-identifier">msg_bytes</span>)
|
|
522
412
|
<span class="ruby-identifier">current_utc_date</span> = <span class="ruby-constant">Time</span>.<span class="ruby-identifier">now</span>.<span class="ruby-identifier">utc</span>
|
|
523
413
|
<span class="ruby-identifier">date</span> = <span class="ruby-identifier">sprintf</span>(<span class="ruby-string">"%04d-%02d-%02d"</span>,<span class="ruby-identifier">current_utc_date</span>.<span class="ruby-identifier">year</span>, <span class="ruby-identifier">current_utc_date</span>.<span class="ruby-identifier">month</span>, <span class="ruby-identifier">current_utc_date</span>.<span class="ruby-identifier">day</span>)
|
|
@@ -534,25 +424,20 @@
|
|
|
534
424
|
<span class="ruby-keyword">return</span> <span class="ruby-constant">Base64</span>.<span class="ruby-identifier">strict_encode64</span>(<span class="ruby-constant">OpenSSL</span><span class="ruby-operator">::</span><span class="ruby-constant">HMAC</span>.<span class="ruby-identifier">digest</span>(<span class="ruby-constant">OpenSSL</span><span class="ruby-operator">::</span><span class="ruby-constant">Digest</span><span class="ruby-operator">::</span><span class="ruby-constant">SHA256</span>.<span class="ruby-identifier">new</span>, <span class="ruby-identifier">signing_key</span>, <span class="ruby-identifier">request_hash</span>))
|
|
535
425
|
<span class="ruby-keyword">end</span></pre>
|
|
536
426
|
</div>
|
|
537
|
-
|
|
538
427
|
</div>
|
|
539
428
|
|
|
540
|
-
|
|
541
429
|
|
|
542
|
-
|
|
543
430
|
</div>
|
|
544
431
|
|
|
545
|
-
|
|
546
432
|
</section>
|
|
547
|
-
|
|
548
|
-
</section>
|
|
549
433
|
|
|
434
|
+
</section>
|
|
550
435
|
</main>
|
|
551
436
|
|
|
552
437
|
|
|
553
438
|
<footer id="validator-badges" role="contentinfo">
|
|
554
439
|
<p><a href="https://validator.w3.org/check/referer">Validate</a>
|
|
555
|
-
<p>Generated by <a href="https://ruby.github.io/rdoc/">RDoc</a> 6.1.
|
|
440
|
+
<p>Generated by <a href="https://ruby.github.io/rdoc/">RDoc</a> 6.3.1.
|
|
556
441
|
<p>Based on <a href="http://deveiate.org/projects/Darkfish-RDoc/">Darkfish</a> by <a href="http://deveiate.org">Michael Granger</a>.
|
|
557
442
|
</footer>
|
|
558
443
|
|