Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -36,6 +36,7 @@ resource, which you can apply after installing the Teleport Kubernetes operator.
|display|string|Display controls how this connector is displayed.|
|entity_descriptor|string|EntityDescriptor is XML with descriptor. It can be used to supply configuration parameters in one XML file rather than supplying them in the individual elements.|
|entity_descriptor_url|string|EntityDescriptorURL is a URL that supplies a configuration XML.|
|force_authn|string or integer|ForceAuthn specified whether re-authentication should be forced on login. UNSPECIFIED is treated as NO. Can be either the string or the integer representation of each option.|
|issuer|string|Issuer is the identity provider issuer.|
|mfa|[object](#specmfa)|MFASettings contains settings to enable SSO MFA checks through this auth connector.|
|provider|string|Provider is the external identity provider.|
Expand Down Expand Up @@ -73,6 +74,7 @@ resource, which you can apply after installing the Teleport Kubernetes operator.
|enabled|boolean|Enabled specified whether this SAML connector supports MFA checks. Defaults to false.|
|entity_descriptor|string|EntityDescriptor is XML with descriptor. It can be used to supply configuration parameters in one XML file rather than supplying them in the individual elements.|
|entity_descriptor_url|string|EntityDescriptorUrl is a URL that supplies a configuration XML.|
|force_authn|string or integer|ForceAuthn specified whether re-authentication should be forced for MFA checks. UNSPECIFIED is treated as YES to always re-authentication for MFA checks. This should only be set to NO if the IdP is setup to perform MFA checks on top of active user sessions. Can be either the string or the integer representation of each option.|

### spec.signing_key_pair

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -40,6 +40,7 @@ Optional:
- `display` (String) Display controls how this connector is displayed.
- `entity_descriptor` (String, Sensitive) EntityDescriptor is XML with descriptor. It can be used to supply configuration parameters in one XML file rather than supplying them in the individual elements.
- `entity_descriptor_url` (String) EntityDescriptorURL is a URL that supplies a configuration XML.
- `force_authn` (Number) ForceAuthn specified whether re-authentication should be forced on login. UNSPECIFIED is treated as NO.
- `issuer` (String) Issuer is the identity provider issuer.
- `mfa` (Attributes) MFASettings contains settings to enable SSO MFA checks through this auth connector. (see [below for nested schema](#nested-schema-for-specmfa))
- `provider` (String) Provider is the external identity provider.
Expand Down Expand Up @@ -80,6 +81,7 @@ Optional:
- `enabled` (Boolean) Enabled specified whether this SAML connector supports MFA checks. Defaults to false.
- `entity_descriptor` (String) EntityDescriptor is XML with descriptor. It can be used to supply configuration parameters in one XML file rather than supplying them in the individual elements.
- `entity_descriptor_url` (String) EntityDescriptorUrl is a URL that supplies a configuration XML.
- `force_authn` (Number) ForceAuthn specified whether re-authentication should be forced for MFA checks. UNSPECIFIED is treated as YES to always re-authentication for MFA checks. This should only be set to NO if the IdP is setup to perform MFA checks on top of active user sessions.


### Nested Schema for `spec.signing_key_pair`
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -85,6 +85,7 @@ Optional:
- `display` (String) Display controls how this connector is displayed.
- `entity_descriptor` (String, Sensitive) EntityDescriptor is XML with descriptor. It can be used to supply configuration parameters in one XML file rather than supplying them in the individual elements.
- `entity_descriptor_url` (String) EntityDescriptorURL is a URL that supplies a configuration XML.
- `force_authn` (Number) ForceAuthn specified whether re-authentication should be forced on login. UNSPECIFIED is treated as NO.
- `issuer` (String) Issuer is the identity provider issuer.
- `mfa` (Attributes) MFASettings contains settings to enable SSO MFA checks through this auth connector. (see [below for nested schema](#nested-schema-for-specmfa))
- `provider` (String) Provider is the external identity provider.
Expand Down Expand Up @@ -125,6 +126,7 @@ Optional:
- `enabled` (Boolean) Enabled specified whether this SAML connector supports MFA checks. Defaults to false.
- `entity_descriptor` (String) EntityDescriptor is XML with descriptor. It can be used to supply configuration parameters in one XML file rather than supplying them in the individual elements.
- `entity_descriptor_url` (String) EntityDescriptorUrl is a URL that supplies a configuration XML.
- `force_authn` (Number) ForceAuthn specified whether re-authentication should be forced for MFA checks. UNSPECIFIED is treated as YES to always re-authentication for MFA checks. This should only be set to NO if the IdP is setup to perform MFA checks on top of active user sessions.


### Nested Schema for `spec.signing_key_pair`
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -115,6 +115,10 @@ spec:
description: EntityDescriptorURL is a URL that supplies a configuration
XML.
type: string
force_authn:
description: ForceAuthn specified whether re-authentication should
be forced on login. UNSPECIFIED is treated as NO.
x-kubernetes-int-or-string: true
issuer:
description: Issuer is the identity provider issuer.
type: string
Expand All @@ -136,6 +140,13 @@ spec:
description: EntityDescriptorUrl is a URL that supplies a configuration
XML.
type: string
force_authn:
description: ForceAuthn specified whether re-authentication should
be forced for MFA checks. UNSPECIFIED is treated as YES to always
re-authentication for MFA checks. This should only be set to
NO if the IdP is setup to perform MFA checks on top of active
user sessions.
x-kubernetes-int-or-string: true
type: object
provider:
description: Provider is the external identity provider.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -115,6 +115,10 @@ spec:
description: EntityDescriptorURL is a URL that supplies a configuration
XML.
type: string
force_authn:
description: ForceAuthn specified whether re-authentication should
be forced on login. UNSPECIFIED is treated as NO.
x-kubernetes-int-or-string: true
issuer:
description: Issuer is the identity provider issuer.
type: string
Expand All @@ -136,6 +140,13 @@ spec:
description: EntityDescriptorUrl is a URL that supplies a configuration
XML.
type: string
force_authn:
description: ForceAuthn specified whether re-authentication should
be forced for MFA checks. UNSPECIFIED is treated as YES to always
re-authentication for MFA checks. This should only be set to
NO if the IdP is setup to perform MFA checks on top of active
user sessions.
x-kubernetes-int-or-string: true
type: object
provider:
description: Provider is the external identity provider.
Expand Down
88 changes: 88 additions & 0 deletions integrations/terraform/tfschema/types_terraform.go

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.