Merge pull request #979 from renan-campos/wif

OCM-10387 | Wif API updates to suppport SRE access

CHANGES.md

@@ -2,6 +2,10 @@
 
 This document describes the relevant changes between releases of the API model.
 
+## 0.0.392 Sep 03 2024
+- Defined "support" field in WifConfig structure
+- Added "vm" WIF access method
+
 ## 0.0.391 Aug 28 2024
 - Add `RegistryConfig` attribute to `Cluster` model
 - Add `RegistryAllowlist` resource and endpoints

model/clusters_mgmt/v1/wif_config_type.model

@@ -36,6 +36,8 @@ struct WifGcp {
 	// The list of service accounts and their associated roles that will need to be
 	// configured on the user's GCP project.
 	ServiceAccounts []WifServiceAccount
+	// Defines the access configuration for support.
+	Support WifSupport
 	// The workload identity configuration data that will be used to create the
 	// workload identity pool on the user's account.
 	WorkloadIdentityPool WifPool

model/clusters_mgmt/v1/wif_service_account_type.model

@@ -24,6 +24,7 @@ struct WifServiceAccount {
 
 enum WifAccessMethod {
 	Impersonate
+	Vm
 	Wif
 }
 

model/clusters_mgmt/v1/wif_support_type.model

@@ -0,0 +1,20 @@
+/*
+Copyright (c) 2024 Red Hat, Inc.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+  http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+struct WifSupport {
+	Principal String
+	Roles []WifRole
+}

model/clusters_mgmt/v2alpha1/wif_config_type.model

@@ -32,6 +32,8 @@ struct WifGcp {
 	// The list of service accounts and their associated roles that will need to be
 	// configured on the user's GCP project.
 	ServiceAccounts []WifServiceAccount
+	// Defines the access configuration for support.
+	Support WifSupport
 	// The workload identity configuration data that will be used to create the
 	// workload identity pool on the user's account.
 	WorkloadIdentityPool WifPool

model/clusters_mgmt/v2alpha1/wif_service_account_type.model

@@ -24,6 +24,7 @@ struct WifServiceAccount {
 
 enum WifAccessMethod {
 	Impersonate
+	Vm
 	Wif
 }
 

model/clusters_mgmt/v2alpha1/wif_support_type.model

@@ -0,0 +1,20 @@
+/*
+Copyright (c) 2024 Red Hat, Inc.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+  http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+struct WifSupport {
+	Principal String
+	Roles []WifRole
+}