@microsoft/dev-tunnels-contracts 1.0.8 → 1.0.7302
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -2
- package/clusterDetails.d.ts +19 -19
- package/clusterDetails.js +6 -6
- package/index.d.ts +17 -17
- package/index.js +21 -21
- package/localNetworkTunnelEndpoint.d.ts +20 -20
- package/localNetworkTunnelEndpoint.js +6 -6
- package/package.json +1 -1
- package/problemDetails.d.ts +24 -24
- package/problemDetails.js +6 -6
- package/rateStatus.d.ts +19 -20
- package/rateStatus.d.ts.map +1 -1
- package/rateStatus.js +6 -6
- package/resourceStatus.d.ts +17 -17
- package/resourceStatus.js +6 -6
- package/serviceVersionDetails.d.ts +26 -26
- package/serviceVersionDetails.js +6 -6
- package/tsbuildinfo.json +1 -1
- package/tunnel.d.ts +78 -78
- package/tunnel.js +6 -6
- package/tunnelAccessControl.d.ts +27 -27
- package/tunnelAccessControl.js +13 -13
- package/tunnelAccessControlEntry.d.ts +79 -79
- package/tunnelAccessControlEntry.js +39 -39
- package/tunnelAccessControlEntryType.d.ts +45 -45
- package/tunnelAccessControlEntryType.js +53 -53
- package/tunnelAccessControlStatics.d.ts +10 -10
- package/tunnelAccessControlStatics.js +46 -46
- package/tunnelAccessScopes.d.ts +38 -38
- package/tunnelAccessScopes.js +46 -46
- package/tunnelAccessSubject.d.ts +39 -39
- package/tunnelAccessSubject.js +6 -6
- package/tunnelAuthenticationSchemes.d.ts +17 -17
- package/tunnelAuthenticationSchemes.js +25 -25
- package/tunnelConnectionMode.d.ts +19 -19
- package/tunnelConnectionMode.js +27 -27
- package/tunnelConstraints.d.ts +53 -53
- package/tunnelConstraints.js +61 -61
- package/tunnelEndpoint.d.ts +72 -72
- package/tunnelEndpoint.js +20 -20
- package/tunnelEndpointStatics.d.ts +19 -19
- package/tunnelEndpointStatics.js +48 -48
- package/tunnelHeaderNames.d.ts +27 -27
- package/tunnelHeaderNames.js +35 -35
- package/tunnelOptions.d.ts +11 -11
- package/tunnelOptions.js +6 -6
- package/tunnelPort.d.ts +70 -70
- package/tunnelPort.js +6 -6
- package/tunnelPortStatus.d.ts +39 -39
- package/tunnelPortStatus.js +6 -6
- package/tunnelProtocol.d.ts +33 -33
- package/tunnelProtocol.js +41 -41
- package/tunnelRelayTunnelEndpoint.d.ts +14 -14
- package/tunnelRelayTunnelEndpoint.js +6 -6
- package/tunnelServiceProperties.d.ts +99 -99
- package/tunnelServiceProperties.js +77 -77
- package/tunnelServicePropertiesStatics.d.ts +17 -17
- package/tunnelServicePropertiesStatics.js +55 -55
- package/tunnelStatus.d.ts +66 -66
- package/tunnelStatus.js +6 -6
package/tunnel.d.ts
CHANGED
|
@@ -1,79 +1,79 @@
|
|
|
1
|
-
import { TunnelAccessControl } from './tunnelAccessControl';
|
|
2
|
-
import { TunnelEndpoint } from './tunnelEndpoint';
|
|
3
|
-
import { TunnelOptions } from './tunnelOptions';
|
|
4
|
-
import { TunnelPort } from './tunnelPort';
|
|
5
|
-
import { TunnelStatus } from './tunnelStatus';
|
|
6
|
-
/**
|
|
7
|
-
* Data contract for tunnel objects managed through the tunnel service REST API.
|
|
8
|
-
*/
|
|
9
|
-
export interface Tunnel {
|
|
10
|
-
/**
|
|
11
|
-
* Gets or sets the ID of the cluster the tunnel was created in.
|
|
12
|
-
*/
|
|
13
|
-
clusterId?: string;
|
|
14
|
-
/**
|
|
15
|
-
* Gets or sets the generated ID of the tunnel, unique within the cluster.
|
|
16
|
-
*/
|
|
17
|
-
tunnelId?: string;
|
|
18
|
-
/**
|
|
19
|
-
* Gets or sets the optional short name (alias) of the tunnel.
|
|
20
|
-
*
|
|
21
|
-
* The name must be globally unique within the parent domain, and must be a valid
|
|
22
|
-
* subdomain.
|
|
23
|
-
*/
|
|
24
|
-
name?: string;
|
|
25
|
-
/**
|
|
26
|
-
* Gets or sets the description of the tunnel.
|
|
27
|
-
*/
|
|
28
|
-
description?: string;
|
|
29
|
-
/**
|
|
30
|
-
* Gets or sets the tags of the tunnel.
|
|
31
|
-
*/
|
|
32
|
-
tags?: string[];
|
|
33
|
-
/**
|
|
34
|
-
* Gets or sets the optional parent domain of the tunnel, if it is not using the
|
|
35
|
-
* default parent domain.
|
|
36
|
-
*/
|
|
37
|
-
domain?: string;
|
|
38
|
-
/**
|
|
39
|
-
* Gets or sets a dictionary mapping from scopes to tunnel access tokens.
|
|
40
|
-
*/
|
|
41
|
-
accessTokens?: {
|
|
42
|
-
[scope: string]: string;
|
|
43
|
-
};
|
|
44
|
-
/**
|
|
45
|
-
* Gets or sets access control settings for the tunnel.
|
|
46
|
-
*
|
|
47
|
-
* See {@link TunnelAccessControl} documentation for details about the access control
|
|
48
|
-
* model.
|
|
49
|
-
*/
|
|
50
|
-
accessControl?: TunnelAccessControl;
|
|
51
|
-
/**
|
|
52
|
-
* Gets or sets default options for the tunnel.
|
|
53
|
-
*/
|
|
54
|
-
options?: TunnelOptions;
|
|
55
|
-
/**
|
|
56
|
-
* Gets or sets current connection status of the tunnel.
|
|
57
|
-
*/
|
|
58
|
-
status?: TunnelStatus;
|
|
59
|
-
/**
|
|
60
|
-
* Gets or sets an array of endpoints where hosts are currently accepting client
|
|
61
|
-
* connections to the tunnel.
|
|
62
|
-
*/
|
|
63
|
-
endpoints?: TunnelEndpoint[];
|
|
64
|
-
/**
|
|
65
|
-
* Gets or sets a list of ports in the tunnel.
|
|
66
|
-
*
|
|
67
|
-
* This optional property enables getting info about all ports in a tunnel at the same
|
|
68
|
-
* time as getting tunnel info, or creating one or more ports at the same time as
|
|
69
|
-
* creating a tunnel. It is omitted when listing (multiple) tunnels, or when updating
|
|
70
|
-
* tunnel properties. (For the latter, use APIs to create/update/delete individual
|
|
71
|
-
* ports instead.)
|
|
72
|
-
*/
|
|
73
|
-
ports?: TunnelPort[];
|
|
74
|
-
/**
|
|
75
|
-
* Gets or sets the time in UTC of tunnel creation.
|
|
76
|
-
*/
|
|
77
|
-
created?: Date;
|
|
78
|
-
}
|
|
1
|
+
import { TunnelAccessControl } from './tunnelAccessControl';
|
|
2
|
+
import { TunnelEndpoint } from './tunnelEndpoint';
|
|
3
|
+
import { TunnelOptions } from './tunnelOptions';
|
|
4
|
+
import { TunnelPort } from './tunnelPort';
|
|
5
|
+
import { TunnelStatus } from './tunnelStatus';
|
|
6
|
+
/**
|
|
7
|
+
* Data contract for tunnel objects managed through the tunnel service REST API.
|
|
8
|
+
*/
|
|
9
|
+
export interface Tunnel {
|
|
10
|
+
/**
|
|
11
|
+
* Gets or sets the ID of the cluster the tunnel was created in.
|
|
12
|
+
*/
|
|
13
|
+
clusterId?: string;
|
|
14
|
+
/**
|
|
15
|
+
* Gets or sets the generated ID of the tunnel, unique within the cluster.
|
|
16
|
+
*/
|
|
17
|
+
tunnelId?: string;
|
|
18
|
+
/**
|
|
19
|
+
* Gets or sets the optional short name (alias) of the tunnel.
|
|
20
|
+
*
|
|
21
|
+
* The name must be globally unique within the parent domain, and must be a valid
|
|
22
|
+
* subdomain.
|
|
23
|
+
*/
|
|
24
|
+
name?: string;
|
|
25
|
+
/**
|
|
26
|
+
* Gets or sets the description of the tunnel.
|
|
27
|
+
*/
|
|
28
|
+
description?: string;
|
|
29
|
+
/**
|
|
30
|
+
* Gets or sets the tags of the tunnel.
|
|
31
|
+
*/
|
|
32
|
+
tags?: string[];
|
|
33
|
+
/**
|
|
34
|
+
* Gets or sets the optional parent domain of the tunnel, if it is not using the
|
|
35
|
+
* default parent domain.
|
|
36
|
+
*/
|
|
37
|
+
domain?: string;
|
|
38
|
+
/**
|
|
39
|
+
* Gets or sets a dictionary mapping from scopes to tunnel access tokens.
|
|
40
|
+
*/
|
|
41
|
+
accessTokens?: {
|
|
42
|
+
[scope: string]: string;
|
|
43
|
+
};
|
|
44
|
+
/**
|
|
45
|
+
* Gets or sets access control settings for the tunnel.
|
|
46
|
+
*
|
|
47
|
+
* See {@link TunnelAccessControl} documentation for details about the access control
|
|
48
|
+
* model.
|
|
49
|
+
*/
|
|
50
|
+
accessControl?: TunnelAccessControl;
|
|
51
|
+
/**
|
|
52
|
+
* Gets or sets default options for the tunnel.
|
|
53
|
+
*/
|
|
54
|
+
options?: TunnelOptions;
|
|
55
|
+
/**
|
|
56
|
+
* Gets or sets current connection status of the tunnel.
|
|
57
|
+
*/
|
|
58
|
+
status?: TunnelStatus;
|
|
59
|
+
/**
|
|
60
|
+
* Gets or sets an array of endpoints where hosts are currently accepting client
|
|
61
|
+
* connections to the tunnel.
|
|
62
|
+
*/
|
|
63
|
+
endpoints?: TunnelEndpoint[];
|
|
64
|
+
/**
|
|
65
|
+
* Gets or sets a list of ports in the tunnel.
|
|
66
|
+
*
|
|
67
|
+
* This optional property enables getting info about all ports in a tunnel at the same
|
|
68
|
+
* time as getting tunnel info, or creating one or more ports at the same time as
|
|
69
|
+
* creating a tunnel. It is omitted when listing (multiple) tunnels, or when updating
|
|
70
|
+
* tunnel properties. (For the latter, use APIs to create/update/delete individual
|
|
71
|
+
* ports instead.)
|
|
72
|
+
*/
|
|
73
|
+
ports?: TunnelPort[];
|
|
74
|
+
/**
|
|
75
|
+
* Gets or sets the time in UTC of tunnel creation.
|
|
76
|
+
*/
|
|
77
|
+
created?: Date;
|
|
78
|
+
}
|
|
79
79
|
//# sourceMappingURL=tunnel.d.ts.map
|
package/tunnel.js
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
// Copyright (c) Microsoft Corporation.
|
|
3
|
-
// Licensed under the MIT license.
|
|
4
|
-
// Generated from ../../../cs/src/Contracts/Tunnel.cs
|
|
5
|
-
/* eslint-disable */
|
|
6
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
1
|
+
"use strict";
|
|
2
|
+
// Copyright (c) Microsoft Corporation.
|
|
3
|
+
// Licensed under the MIT license.
|
|
4
|
+
// Generated from ../../../cs/src/Contracts/Tunnel.cs
|
|
5
|
+
/* eslint-disable */
|
|
6
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
7
7
|
//# sourceMappingURL=tunnel.js.map
|
package/tunnelAccessControl.d.ts
CHANGED
|
@@ -1,28 +1,28 @@
|
|
|
1
|
-
import { TunnelAccessControlEntry } from './tunnelAccessControlEntry';
|
|
2
|
-
/**
|
|
3
|
-
* Data contract for access control on a {@link Tunnel} or {@link TunnelPort}.
|
|
4
|
-
*
|
|
5
|
-
* Tunnels and tunnel ports can each optionally have an access-control property set on
|
|
6
|
-
* them. An access-control object contains a list (ACL) of entries (ACEs) that specify the
|
|
7
|
-
* access scopes granted or denied to some subjects. Tunnel ports inherit the ACL from the
|
|
8
|
-
* tunnel, though ports may include ACEs that augment or override the inherited rules.
|
|
9
|
-
* Currently there is no capability to define "roles" for tunnel access (where a role
|
|
10
|
-
* specifies a set of related access scopes), and assign roles to users. That feature may
|
|
11
|
-
* be added in the future. (It should be represented as a separate `RoleAssignments`
|
|
12
|
-
* property on this class.)
|
|
13
|
-
*/
|
|
14
|
-
export interface TunnelAccessControl {
|
|
15
|
-
/**
|
|
16
|
-
* Gets or sets the list of access control entries.
|
|
17
|
-
*
|
|
18
|
-
* The order of entries is significant: later entries override earlier entries that
|
|
19
|
-
* apply to the same subject. However, deny rules are always processed after allow
|
|
20
|
-
* rules, therefore an allow rule cannot override a deny rule for the same subject.
|
|
21
|
-
*/
|
|
22
|
-
entries: TunnelAccessControlEntry[];
|
|
23
|
-
}
|
|
24
|
-
import { validateScopes } from './tunnelAccessControlStatics';
|
|
25
|
-
export declare const TunnelAccessControl: {
|
|
26
|
-
validateScopes: typeof validateScopes;
|
|
27
|
-
};
|
|
1
|
+
import { TunnelAccessControlEntry } from './tunnelAccessControlEntry';
|
|
2
|
+
/**
|
|
3
|
+
* Data contract for access control on a {@link Tunnel} or {@link TunnelPort}.
|
|
4
|
+
*
|
|
5
|
+
* Tunnels and tunnel ports can each optionally have an access-control property set on
|
|
6
|
+
* them. An access-control object contains a list (ACL) of entries (ACEs) that specify the
|
|
7
|
+
* access scopes granted or denied to some subjects. Tunnel ports inherit the ACL from the
|
|
8
|
+
* tunnel, though ports may include ACEs that augment or override the inherited rules.
|
|
9
|
+
* Currently there is no capability to define "roles" for tunnel access (where a role
|
|
10
|
+
* specifies a set of related access scopes), and assign roles to users. That feature may
|
|
11
|
+
* be added in the future. (It should be represented as a separate `RoleAssignments`
|
|
12
|
+
* property on this class.)
|
|
13
|
+
*/
|
|
14
|
+
export interface TunnelAccessControl {
|
|
15
|
+
/**
|
|
16
|
+
* Gets or sets the list of access control entries.
|
|
17
|
+
*
|
|
18
|
+
* The order of entries is significant: later entries override earlier entries that
|
|
19
|
+
* apply to the same subject. However, deny rules are always processed after allow
|
|
20
|
+
* rules, therefore an allow rule cannot override a deny rule for the same subject.
|
|
21
|
+
*/
|
|
22
|
+
entries: TunnelAccessControlEntry[];
|
|
23
|
+
}
|
|
24
|
+
import { validateScopes } from './tunnelAccessControlStatics';
|
|
25
|
+
export declare const TunnelAccessControl: {
|
|
26
|
+
validateScopes: typeof validateScopes;
|
|
27
|
+
};
|
|
28
28
|
//# sourceMappingURL=tunnelAccessControl.d.ts.map
|
package/tunnelAccessControl.js
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
// Copyright (c) Microsoft Corporation.
|
|
3
|
-
// Licensed under the MIT license.
|
|
4
|
-
// Generated from ../../../cs/src/Contracts/TunnelAccessControl.cs
|
|
5
|
-
/* eslint-disable */
|
|
6
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
7
|
-
exports.TunnelAccessControl = void 0;
|
|
8
|
-
// Import static members from a non-generated file,
|
|
9
|
-
// and re-export them as an object with the same name as the interface.
|
|
10
|
-
const tunnelAccessControlStatics_1 = require("./tunnelAccessControlStatics");
|
|
11
|
-
exports.TunnelAccessControl = {
|
|
12
|
-
validateScopes: tunnelAccessControlStatics_1.validateScopes,
|
|
13
|
-
};
|
|
1
|
+
"use strict";
|
|
2
|
+
// Copyright (c) Microsoft Corporation.
|
|
3
|
+
// Licensed under the MIT license.
|
|
4
|
+
// Generated from ../../../cs/src/Contracts/TunnelAccessControl.cs
|
|
5
|
+
/* eslint-disable */
|
|
6
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
7
|
+
exports.TunnelAccessControl = void 0;
|
|
8
|
+
// Import static members from a non-generated file,
|
|
9
|
+
// and re-export them as an object with the same name as the interface.
|
|
10
|
+
const tunnelAccessControlStatics_1 = require("./tunnelAccessControlStatics");
|
|
11
|
+
exports.TunnelAccessControl = {
|
|
12
|
+
validateScopes: tunnelAccessControlStatics_1.validateScopes,
|
|
13
|
+
};
|
|
14
14
|
//# sourceMappingURL=tunnelAccessControl.js.map
|
|
@@ -1,80 +1,80 @@
|
|
|
1
|
-
import { TunnelAccessControlEntryType } from './tunnelAccessControlEntryType';
|
|
2
|
-
/**
|
|
3
|
-
* Data contract for an access control entry on a {@link Tunnel} or {@link TunnelPort}.
|
|
4
|
-
*
|
|
5
|
-
* An access control entry (ACE) grants or denies one or more access scopes to one or more
|
|
6
|
-
* subjects. Tunnel ports inherit access control entries from their tunnel, and they may
|
|
7
|
-
* have additional port-specific entries that augment or override those access rules.
|
|
8
|
-
*/
|
|
9
|
-
export interface TunnelAccessControlEntry {
|
|
10
|
-
/**
|
|
11
|
-
* Gets or sets the access control entry type.
|
|
12
|
-
*/
|
|
13
|
-
type: TunnelAccessControlEntryType;
|
|
14
|
-
/**
|
|
15
|
-
* Gets or sets the provider of the subjects in this access control entry. The
|
|
16
|
-
* provider impacts how the subject identifiers are resolved and displayed. The
|
|
17
|
-
* provider may be an identity provider such as AAD, or a system or standard such as
|
|
18
|
-
* "ssh" or "ipv4".
|
|
19
|
-
*
|
|
20
|
-
* For user, group, or org ACEs, this value is the name of the identity provider of
|
|
21
|
-
* the user/group/org IDs. It may be one of the well-known provider names in {@link
|
|
22
|
-
* TunnelAccessControlEntry.providers}, or (in the future) a custom identity provider.
|
|
23
|
-
* For public key ACEs, this value is the type of public key, e.g. "ssh". For IP
|
|
24
|
-
* address range ACEs, this value is the IP address version, "ipv4" or "ipv6", or
|
|
25
|
-
* "service-tag" if the range is defined by an Azure service tag. For anonymous ACEs,
|
|
26
|
-
* this value is null.
|
|
27
|
-
*/
|
|
28
|
-
provider?: string;
|
|
29
|
-
/**
|
|
30
|
-
* Gets or sets a value indicating whether this is an access control entry on a tunnel
|
|
31
|
-
* port that is inherited from the tunnel's access control list.
|
|
32
|
-
*/
|
|
33
|
-
isInherited?: boolean;
|
|
34
|
-
/**
|
|
35
|
-
* Gets or sets a value indicating whether this entry is a deny rule that blocks
|
|
36
|
-
* access to the specified users. Otherwise it is an allow rule.
|
|
37
|
-
*
|
|
38
|
-
* All deny rules (including inherited rules) are processed after all allow rules.
|
|
39
|
-
* Therefore a deny ACE cannot be overridden by an allow ACE that is later in the list
|
|
40
|
-
* or on a more-specific resource. In other words, inherited deny ACEs cannot be
|
|
41
|
-
* overridden.
|
|
42
|
-
*/
|
|
43
|
-
isDeny?: boolean;
|
|
44
|
-
/**
|
|
45
|
-
* Gets or sets a value indicating whether this entry applies to all subjects that are
|
|
46
|
-
* NOT in the {@link TunnelAccessControlEntry.subjects} list.
|
|
47
|
-
*
|
|
48
|
-
* Examples: an inverse organizations ACE applies to all users who are not members of
|
|
49
|
-
* the listed organization(s); an inverse anonymous ACE applies to all authenticated
|
|
50
|
-
* users; an inverse IP address ranges ACE applies to all clients that are not within
|
|
51
|
-
* any of the listed IP address ranges. The inverse option is often useful in policies
|
|
52
|
-
* in combination with {@link TunnelAccessControlEntry.isDeny}, for example a policy
|
|
53
|
-
* could deny access to users who are not members of an organization or are outside of
|
|
54
|
-
* an IP address range, effectively blocking any tunnels from allowing outside access
|
|
55
|
-
* (because inherited deny ACEs cannot be overridden).
|
|
56
|
-
*/
|
|
57
|
-
isInverse?: boolean;
|
|
58
|
-
/**
|
|
59
|
-
* Gets or sets an optional organization context for all subjects of this entry. The
|
|
60
|
-
* use and meaning of this value depends on the {@link TunnelAccessControlEntry.type}
|
|
61
|
-
* and {@link TunnelAccessControlEntry.provider} of this entry.
|
|
62
|
-
*
|
|
63
|
-
* For AAD users and group ACEs, this value is the AAD tenant ID. It is not currently
|
|
64
|
-
* used with any other types of ACEs.
|
|
65
|
-
*/
|
|
66
|
-
organization?: string;
|
|
67
|
-
/**
|
|
68
|
-
* Gets or sets the subjects for the entry, such as user or group IDs. The format of
|
|
69
|
-
* the values depends on the {@link TunnelAccessControlEntry.type} and {@link
|
|
70
|
-
* TunnelAccessControlEntry.provider} of this entry.
|
|
71
|
-
*/
|
|
72
|
-
subjects: string[];
|
|
73
|
-
/**
|
|
74
|
-
* Gets or sets the access scopes that this entry grants or denies to the subjects.
|
|
75
|
-
*
|
|
76
|
-
* These must be one or more values from {@link TunnelAccessScopes}.
|
|
77
|
-
*/
|
|
78
|
-
scopes: string[];
|
|
79
|
-
}
|
|
1
|
+
import { TunnelAccessControlEntryType } from './tunnelAccessControlEntryType';
|
|
2
|
+
/**
|
|
3
|
+
* Data contract for an access control entry on a {@link Tunnel} or {@link TunnelPort}.
|
|
4
|
+
*
|
|
5
|
+
* An access control entry (ACE) grants or denies one or more access scopes to one or more
|
|
6
|
+
* subjects. Tunnel ports inherit access control entries from their tunnel, and they may
|
|
7
|
+
* have additional port-specific entries that augment or override those access rules.
|
|
8
|
+
*/
|
|
9
|
+
export interface TunnelAccessControlEntry {
|
|
10
|
+
/**
|
|
11
|
+
* Gets or sets the access control entry type.
|
|
12
|
+
*/
|
|
13
|
+
type: TunnelAccessControlEntryType;
|
|
14
|
+
/**
|
|
15
|
+
* Gets or sets the provider of the subjects in this access control entry. The
|
|
16
|
+
* provider impacts how the subject identifiers are resolved and displayed. The
|
|
17
|
+
* provider may be an identity provider such as AAD, or a system or standard such as
|
|
18
|
+
* "ssh" or "ipv4".
|
|
19
|
+
*
|
|
20
|
+
* For user, group, or org ACEs, this value is the name of the identity provider of
|
|
21
|
+
* the user/group/org IDs. It may be one of the well-known provider names in {@link
|
|
22
|
+
* TunnelAccessControlEntry.providers}, or (in the future) a custom identity provider.
|
|
23
|
+
* For public key ACEs, this value is the type of public key, e.g. "ssh". For IP
|
|
24
|
+
* address range ACEs, this value is the IP address version, "ipv4" or "ipv6", or
|
|
25
|
+
* "service-tag" if the range is defined by an Azure service tag. For anonymous ACEs,
|
|
26
|
+
* this value is null.
|
|
27
|
+
*/
|
|
28
|
+
provider?: string;
|
|
29
|
+
/**
|
|
30
|
+
* Gets or sets a value indicating whether this is an access control entry on a tunnel
|
|
31
|
+
* port that is inherited from the tunnel's access control list.
|
|
32
|
+
*/
|
|
33
|
+
isInherited?: boolean;
|
|
34
|
+
/**
|
|
35
|
+
* Gets or sets a value indicating whether this entry is a deny rule that blocks
|
|
36
|
+
* access to the specified users. Otherwise it is an allow rule.
|
|
37
|
+
*
|
|
38
|
+
* All deny rules (including inherited rules) are processed after all allow rules.
|
|
39
|
+
* Therefore a deny ACE cannot be overridden by an allow ACE that is later in the list
|
|
40
|
+
* or on a more-specific resource. In other words, inherited deny ACEs cannot be
|
|
41
|
+
* overridden.
|
|
42
|
+
*/
|
|
43
|
+
isDeny?: boolean;
|
|
44
|
+
/**
|
|
45
|
+
* Gets or sets a value indicating whether this entry applies to all subjects that are
|
|
46
|
+
* NOT in the {@link TunnelAccessControlEntry.subjects} list.
|
|
47
|
+
*
|
|
48
|
+
* Examples: an inverse organizations ACE applies to all users who are not members of
|
|
49
|
+
* the listed organization(s); an inverse anonymous ACE applies to all authenticated
|
|
50
|
+
* users; an inverse IP address ranges ACE applies to all clients that are not within
|
|
51
|
+
* any of the listed IP address ranges. The inverse option is often useful in policies
|
|
52
|
+
* in combination with {@link TunnelAccessControlEntry.isDeny}, for example a policy
|
|
53
|
+
* could deny access to users who are not members of an organization or are outside of
|
|
54
|
+
* an IP address range, effectively blocking any tunnels from allowing outside access
|
|
55
|
+
* (because inherited deny ACEs cannot be overridden).
|
|
56
|
+
*/
|
|
57
|
+
isInverse?: boolean;
|
|
58
|
+
/**
|
|
59
|
+
* Gets or sets an optional organization context for all subjects of this entry. The
|
|
60
|
+
* use and meaning of this value depends on the {@link TunnelAccessControlEntry.type}
|
|
61
|
+
* and {@link TunnelAccessControlEntry.provider} of this entry.
|
|
62
|
+
*
|
|
63
|
+
* For AAD users and group ACEs, this value is the AAD tenant ID. It is not currently
|
|
64
|
+
* used with any other types of ACEs.
|
|
65
|
+
*/
|
|
66
|
+
organization?: string;
|
|
67
|
+
/**
|
|
68
|
+
* Gets or sets the subjects for the entry, such as user or group IDs. The format of
|
|
69
|
+
* the values depends on the {@link TunnelAccessControlEntry.type} and {@link
|
|
70
|
+
* TunnelAccessControlEntry.provider} of this entry.
|
|
71
|
+
*/
|
|
72
|
+
subjects: string[];
|
|
73
|
+
/**
|
|
74
|
+
* Gets or sets the access scopes that this entry grants or denies to the subjects.
|
|
75
|
+
*
|
|
76
|
+
* These must be one or more values from {@link TunnelAccessScopes}.
|
|
77
|
+
*/
|
|
78
|
+
scopes: string[];
|
|
79
|
+
}
|
|
80
80
|
//# sourceMappingURL=tunnelAccessControlEntry.d.ts.map
|
|
@@ -1,40 +1,40 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
// Copyright (c) Microsoft Corporation.
|
|
3
|
-
// Licensed under the MIT license.
|
|
4
|
-
// Generated from ../../../cs/src/Contracts/TunnelAccessControlEntry.cs
|
|
5
|
-
/* eslint-disable */
|
|
6
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
7
|
-
var TunnelAccessControlEntry;
|
|
8
|
-
(function (TunnelAccessControlEntry) {
|
|
9
|
-
/**
|
|
10
|
-
* Constants for well-known identity providers.
|
|
11
|
-
*/
|
|
12
|
-
let Providers;
|
|
13
|
-
(function (Providers) {
|
|
14
|
-
/**
|
|
15
|
-
* Microsoft (AAD) identity provider.
|
|
16
|
-
*/
|
|
17
|
-
Providers["Microsoft"] = "microsoft";
|
|
18
|
-
/**
|
|
19
|
-
* GitHub identity provider.
|
|
20
|
-
*/
|
|
21
|
-
Providers["GitHub"] = "github";
|
|
22
|
-
/**
|
|
23
|
-
* SSH public keys.
|
|
24
|
-
*/
|
|
25
|
-
Providers["Ssh"] = "ssh";
|
|
26
|
-
/**
|
|
27
|
-
* IPv4 addresses.
|
|
28
|
-
*/
|
|
29
|
-
Providers["IPv4"] = "ipv4";
|
|
30
|
-
/**
|
|
31
|
-
* IPv6 addresses.
|
|
32
|
-
*/
|
|
33
|
-
Providers["IPv6"] = "ipv6";
|
|
34
|
-
/**
|
|
35
|
-
* Service tags.
|
|
36
|
-
*/
|
|
37
|
-
Providers["ServiceTag"] = "service-tag";
|
|
38
|
-
})(Providers = TunnelAccessControlEntry.Providers || (TunnelAccessControlEntry.Providers = {}));
|
|
39
|
-
})(TunnelAccessControlEntry || (TunnelAccessControlEntry = {}));
|
|
1
|
+
"use strict";
|
|
2
|
+
// Copyright (c) Microsoft Corporation.
|
|
3
|
+
// Licensed under the MIT license.
|
|
4
|
+
// Generated from ../../../cs/src/Contracts/TunnelAccessControlEntry.cs
|
|
5
|
+
/* eslint-disable */
|
|
6
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
7
|
+
var TunnelAccessControlEntry;
|
|
8
|
+
(function (TunnelAccessControlEntry) {
|
|
9
|
+
/**
|
|
10
|
+
* Constants for well-known identity providers.
|
|
11
|
+
*/
|
|
12
|
+
let Providers;
|
|
13
|
+
(function (Providers) {
|
|
14
|
+
/**
|
|
15
|
+
* Microsoft (AAD) identity provider.
|
|
16
|
+
*/
|
|
17
|
+
Providers["Microsoft"] = "microsoft";
|
|
18
|
+
/**
|
|
19
|
+
* GitHub identity provider.
|
|
20
|
+
*/
|
|
21
|
+
Providers["GitHub"] = "github";
|
|
22
|
+
/**
|
|
23
|
+
* SSH public keys.
|
|
24
|
+
*/
|
|
25
|
+
Providers["Ssh"] = "ssh";
|
|
26
|
+
/**
|
|
27
|
+
* IPv4 addresses.
|
|
28
|
+
*/
|
|
29
|
+
Providers["IPv4"] = "ipv4";
|
|
30
|
+
/**
|
|
31
|
+
* IPv6 addresses.
|
|
32
|
+
*/
|
|
33
|
+
Providers["IPv6"] = "ipv6";
|
|
34
|
+
/**
|
|
35
|
+
* Service tags.
|
|
36
|
+
*/
|
|
37
|
+
Providers["ServiceTag"] = "service-tag";
|
|
38
|
+
})(Providers = TunnelAccessControlEntry.Providers || (TunnelAccessControlEntry.Providers = {}));
|
|
39
|
+
})(TunnelAccessControlEntry || (TunnelAccessControlEntry = {}));
|
|
40
40
|
//# sourceMappingURL=tunnelAccessControlEntry.js.map
|
|
@@ -1,46 +1,46 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Specifies the type of {@link TunnelAccessControlEntry}.
|
|
3
|
-
*/
|
|
4
|
-
export declare enum TunnelAccessControlEntryType {
|
|
5
|
-
/**
|
|
6
|
-
* Uninitialized access control entry type.
|
|
7
|
-
*/
|
|
8
|
-
None = "None",
|
|
9
|
-
/**
|
|
10
|
-
* The access control entry refers to all anonymous users.
|
|
11
|
-
*/
|
|
12
|
-
Anonymous = "Anonymous",
|
|
13
|
-
/**
|
|
14
|
-
* The access control entry is a list of user IDs that are allowed (or denied) access.
|
|
15
|
-
*/
|
|
16
|
-
Users = "Users",
|
|
17
|
-
/**
|
|
18
|
-
* The access control entry is a list of groups IDs that are allowed (or denied)
|
|
19
|
-
* access.
|
|
20
|
-
*/
|
|
21
|
-
Groups = "Groups",
|
|
22
|
-
/**
|
|
23
|
-
* The access control entry is a list of organization IDs that are allowed (or denied)
|
|
24
|
-
* access.
|
|
25
|
-
*
|
|
26
|
-
* All users in the organizations are allowed (or denied) access, unless overridden by
|
|
27
|
-
* following group or user rules.
|
|
28
|
-
*/
|
|
29
|
-
Organizations = "Organizations",
|
|
30
|
-
/**
|
|
31
|
-
* The access control entry is a list of repositories. Users are allowed access to the
|
|
32
|
-
* tunnel if they have access to the repo.
|
|
33
|
-
*/
|
|
34
|
-
Repositories = "Repositories",
|
|
35
|
-
/**
|
|
36
|
-
* The access control entry is a list of public keys. Users are allowed access if they
|
|
37
|
-
* can authenticate using a private key corresponding to one of the public keys.
|
|
38
|
-
*/
|
|
39
|
-
PublicKeys = "PublicKeys",
|
|
40
|
-
/**
|
|
41
|
-
* The access control entry is a list of IP address ranges that are allowed (or
|
|
42
|
-
* denied) access to the tunnel. Ranges can be IPv4, IPv6, or Azure service tags.
|
|
43
|
-
*/
|
|
44
|
-
IPAddressRanges = "IPAddressRanges"
|
|
45
|
-
}
|
|
1
|
+
/**
|
|
2
|
+
* Specifies the type of {@link TunnelAccessControlEntry}.
|
|
3
|
+
*/
|
|
4
|
+
export declare enum TunnelAccessControlEntryType {
|
|
5
|
+
/**
|
|
6
|
+
* Uninitialized access control entry type.
|
|
7
|
+
*/
|
|
8
|
+
None = "None",
|
|
9
|
+
/**
|
|
10
|
+
* The access control entry refers to all anonymous users.
|
|
11
|
+
*/
|
|
12
|
+
Anonymous = "Anonymous",
|
|
13
|
+
/**
|
|
14
|
+
* The access control entry is a list of user IDs that are allowed (or denied) access.
|
|
15
|
+
*/
|
|
16
|
+
Users = "Users",
|
|
17
|
+
/**
|
|
18
|
+
* The access control entry is a list of groups IDs that are allowed (or denied)
|
|
19
|
+
* access.
|
|
20
|
+
*/
|
|
21
|
+
Groups = "Groups",
|
|
22
|
+
/**
|
|
23
|
+
* The access control entry is a list of organization IDs that are allowed (or denied)
|
|
24
|
+
* access.
|
|
25
|
+
*
|
|
26
|
+
* All users in the organizations are allowed (or denied) access, unless overridden by
|
|
27
|
+
* following group or user rules.
|
|
28
|
+
*/
|
|
29
|
+
Organizations = "Organizations",
|
|
30
|
+
/**
|
|
31
|
+
* The access control entry is a list of repositories. Users are allowed access to the
|
|
32
|
+
* tunnel if they have access to the repo.
|
|
33
|
+
*/
|
|
34
|
+
Repositories = "Repositories",
|
|
35
|
+
/**
|
|
36
|
+
* The access control entry is a list of public keys. Users are allowed access if they
|
|
37
|
+
* can authenticate using a private key corresponding to one of the public keys.
|
|
38
|
+
*/
|
|
39
|
+
PublicKeys = "PublicKeys",
|
|
40
|
+
/**
|
|
41
|
+
* The access control entry is a list of IP address ranges that are allowed (or
|
|
42
|
+
* denied) access to the tunnel. Ranges can be IPv4, IPv6, or Azure service tags.
|
|
43
|
+
*/
|
|
44
|
+
IPAddressRanges = "IPAddressRanges"
|
|
45
|
+
}
|
|
46
46
|
//# sourceMappingURL=tunnelAccessControlEntryType.d.ts.map
|