39 lines
1.3 KiB
TypeScript
39 lines
1.3 KiB
TypeScript
|
/**
|
||
|
|
* Defines scopes for tunnel access tokens.
|
||
|
|
*
|
||
|
|
* A tunnel access token with one or more of these scopes typically also has cluster ID
|
||
|
|
* and tunnel ID claims that limit the access scope to a specific tunnel, and may also
|
||
|
|
* have one or more port claims that further limit the access to particular ports of the
|
||
|
|
* tunnel.
|
||
|
|
*/
|
||
|
|
export declare enum TunnelAccessScopes {
|
||
|
|
/**
|
||
|
|
* Allows creating tunnels. This scope is valid only in policies at the global,
|
||
|
|
* domain, or organization level; it is not relevant to an already-created tunnel or
|
||
|
|
* tunnel port. (Creation of ports requires "manage" or "host" access to the tunnel.)
|
||
|
|
*/
|
||
|
|
Create = "create",
|
||
|
|
/**
|
||
|
|
* Allows management operations on tunnels and tunnel ports.
|
||
|
|
*/
|
||
|
|
Manage = "manage",
|
||
|
|
/**
|
||
|
|
* Allows management operations on all ports of a tunnel, but does not allow updating
|
||
|
|
* any other tunnel properties or deleting the tunnel.
|
||
|
|
*/
|
||
|
|
ManagePorts = "manage:ports",
|
||
|
|
/**
|
||
|
|
* Allows accepting connections on tunnels as a host. Includes access to update tunnel
|
||
|
|
* endpoints and ports.
|
||
|
|
*/
|
||
|
|
Host = "host",
|
||
|
|
/**
|
||
|
|
* Allows inspecting tunnel connection activity and data.
|
||
|
|
*/
|
||
|
|
Inspect = "inspect",
|
||
|
|
/**
|
||
|
|
* Allows connecting to tunnels or ports as a client.
|
||
|
|
*/
|
||
|
|
Connect = "connect"
|
||
|
|
}
|
||
|
|
//# sourceMappingURL=tunnelAccessScopes.d.ts.map
|