Просмотр исходного кода

GITBOOK-45: Update RBAC subjects list

Roman Zabaluev 2 лет назад
Родитель
Сommit
d76ca5d3fe

+ 3 - 2
SUMMARY.md

@@ -43,10 +43,11 @@
   * [Basic Authentication](configuration/authentication/basic-authentication.md)
   * [OAuth2](configuration/authentication/oauth2.md)
   * [AWS IAM](configuration/authentication/aws-iam.md)
+  * [LDAP / Active Directory](configuration/authentication/ldap-active-directory.md)
   * [SSO Guide](configuration/authentication/sso-guide.md)
   * [SASL\_SCRAM](configuration/authentication/sasl\_scram.md)
-  * [LDAP / Active Directory](configuration/authentication/ldap-active-directory.md)
-* [RBAC (Role based access control)](configuration/rbac-role-based-access-control.md)
+* [RBAC (Role based access control)](configuration/rbac-role-based-access-control/README.md)
+  * [Supported Identity Providers](configuration/rbac-role-based-access-control/supported-identity-providers.md)
 * [Data masking](configuration/data-masking.md)
 * [Serialization / SerDe](configuration/serialization-serde.md)
 * [OpenDataDiscovery Integration](configuration/opendatadiscovery-integration.md)

+ 0 - 0
configuration/rbac-role-based-access-control.md → configuration/rbac-role-based-access-control/README.md


+ 77 - 0
configuration/rbac-role-based-access-control/supported-identity-providers.md

@@ -0,0 +1,77 @@
+---
+description: The list of supported auth mechanisms for RBAC
+---
+
+# Supported Identity Providers
+
+### Generic OAuth
+
+Any OAuth provider which is not of the list: Google, GitHub, Cognito.
+
+Set up the auth itself first, docs [here](../authentication/oauth2.md) and [here](../authentication/sso-guide.md)
+
+```yaml
+      subjects:
+        - provider: oauth
+          type: role
+          value: "role-name"
+```
+
+### Google
+
+Set up google auth [first](../authentication/oauth2.md#google)
+
+```yaml
+        - provider: oauth_google
+          type: domain
+          value: "memelord.lol"
+        - provider: oauth_google
+          type: user
+          value: "kek@memelord.lol"
+```
+
+### Github
+
+Set up github auth [first](../authentication/oauth2.md#github)
+
+```yaml
+        - provider: oauth_github
+          type: organization
+          value: "provectus"
+        - provider: oauth_github
+          type: user
+          value: "memelord"
+```
+
+### Cognito
+
+Set up cognito auth [first](../authentication/oauth2.md#cognito)
+
+```yaml
+        - provider: oauth_cognito
+          type: user
+          value: "zoidberg"
+        - provider: oauth_cognito
+          type: group
+          value: "memelords"
+```
+
+### LDAP
+
+Set up LDAP auth [first](../authentication/ldap-active-directory.md)
+
+```yaml
+        - provider: ldap
+          type: group
+          value: "admin_staff"
+```
+
+### Active Directory
+
+Not yet supported, see [Issue 3741](https://github.com/provectus/kafka-ui/issues/3741)
+
+```yaml
+       - provider: ldap_ad # NOT YET SUPPORTED, SEE ISSUE 3741
+          type: group
+          value: "admin_staff"
+```

+ 1 - 1
faq/faq.md

@@ -6,7 +6,7 @@
 
 ### Role-based access control
 
-[rbac-role-based-access-control.md](../configuration/rbac-role-based-access-control.md "mention")
+[rbac-role-based-access-control](../configuration/rbac-role-based-access-control/ "mention")
 
 ### OAuth 2