You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# MD001/heading-increment : Heading levels should only increment by one level at a time : https://github.com/DavidAnson/markdownlint/blob/v0.33.0/doc/md001.md
# MD014/commands-show-output : Dollar signs used before commands without showing output : https://github.com/DavidAnson/markdownlint/blob/v0.33.0/doc/md014.md
34
+
MD014: true
35
+
36
+
# MD018/no-missing-space-atx : No space after hash on atx style heading : https://github.com/DavidAnson/markdownlint/blob/v0.33.0/doc/md018.md
37
+
MD018: true
38
+
39
+
# MD019/no-multiple-space-atx : Multiple spaces after hash on atx style heading : https://github.com/DavidAnson/markdownlint/blob/v0.33.0/doc/md019.md
40
+
MD019: true
41
+
42
+
# MD020/no-missing-space-closed-atx : No space inside hashes on closed atx style heading : https://github.com/DavidAnson/markdownlint/blob/v0.33.0/doc/md020.md
# MD022/blanks-around-headings : Headings should be surrounded by blank lines : https://github.com/DavidAnson/markdownlint/blob/v0.33.0/doc/md022.md
49
+
MD022: true
50
+
51
+
# MD023/heading-start-left : Headings must start at the beginning of the line : https://github.com/DavidAnson/markdownlint/blob/v0.33.0/doc/md023.md
52
+
MD023: true
53
+
54
+
# MD024/no-duplicate-heading : Multiple headings with the same content : https://github.com/DavidAnson/markdownlint/blob/v0.33.0/doc/md024.md
55
+
MD024:
56
+
siblings_only: true
57
+
58
+
# MD025/single-title/single-h1 : Multiple top-level headings in the same document : https://github.com/DavidAnson/markdownlint/blob/v0.33.0/doc/md025.md
59
+
MD025: true
60
+
61
+
# MD026/no-trailing-punctuation : Trailing punctuation in heading : https://github.com/DavidAnson/markdownlint/blob/v0.33.0/doc/md026.md
62
+
MD026: true
63
+
64
+
# MD027/no-multiple-space-blockquote : Multiple spaces after blockquote symbol : https://github.com/DavidAnson/markdownlint/blob/v0.33.0/doc/md027.md
65
+
MD027: true
66
+
67
+
# MD028/no-blanks-blockquote : Blank line inside blockquote : https://github.com/DavidAnson/markdownlint/blob/v0.33.0/doc/md028.md
68
+
MD028: true
69
+
70
+
# MD029/ol-prefix : Ordered list item prefix : https://github.com/DavidAnson/markdownlint/blob/v0.33.0/doc/md029.md
71
+
MD029:
72
+
style: "ordered"
73
+
74
+
# MD030/list-marker-space : Spaces after list markers : https://github.com/DavidAnson/markdownlint/blob/v0.33.0/doc/md030.md
75
+
MD030:
76
+
ul_single: 1
77
+
ol_single: 1
78
+
ul_multi: 3
79
+
ol_multi: 2
80
+
81
+
# MD031/blanks-around-fences : Fenced code blocks should be surrounded by blank lines : https://github.com/DavidAnson/markdownlint/blob/v0.33.0/doc/md031.md
82
+
MD031: true
83
+
84
+
# MD032/blanks-around-lists : Lists should be surrounded by blank lines : https://github.com/DavidAnson/markdownlint/blob/v0.33.0/doc/md032.md
85
+
MD032: true
86
+
87
+
# MD034/no-bare-urls : Bare URL used : https://github.com/DavidAnson/markdownlint/blob/v0.33.0/doc/md034.md
# MD047/single-trailing-newline : Files should end with a single newline character : https://github.com/DavidAnson/markdownlint/blob/v0.33.0/doc/md047.md
# MD051/link-fragments : Link fragments should be valid : https://github.com/DavidAnson/markdownlint/blob/v0.33.0/doc/md051.md
131
+
MD051: true
132
+
133
+
# MD053/link-image-reference-definitions : Link and image reference definitions should be needed : https://github.com/DavidAnson/markdownlint/blob/v0.33.0/doc/md053.md
134
+
MD053: true
135
+
136
+
# MD054/link-image-style : Link and image style : https://github.com/DavidAnson/markdownlint/blob/v0.33.0/doc/md054.md
Copy file name to clipboardExpand all lines: docs/blogs.md
-1Lines changed: 0 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -11,5 +11,4 @@
11
11
| 2021-08-23 |[Shepherding your Cloud Native “cattle” with Tornjak](https://medium.com/universal-workload-identity/shepherding-your-cloud-native-cattle-with-tornjak-eb0b9a7c96bc)| Introduction to Tornjak |
12
12
| 2021-08-26 |[Open source workload identity management could help secure hybrid clouds](https://research.ibm.com/blog/tornjak-project-cncf)| IBM donates Tornjak to CNCF |
13
13
14
-
15
14
[Tornjak Channel on Medium](https://medium.com/universal-workload-identity)
Copy file name to clipboardExpand all lines: docs/config-tornjak-server.md
+14-12Lines changed: 14 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,6 +3,7 @@
3
3
This document is a reference for the Tornjak server, and it follows the [SPIRE server config](https://github.com/spiffe/spire/blob/main/doc/spire_server.md). It includes information about plugin types, built-in plugins, the server configuration file, plugin configuration, and command line options for `tornjak-agent` commands.
4
4
5
5
## Contents
6
+
6
7
-[Command line options](#command-line-options)
7
8
-[The Tornjak Config](#the-tornjak-config)
8
9
-[General Tornjak Server Configs](#general-tornjak-server-configs)
@@ -20,20 +21,22 @@ The following flags are available for all tornjak-agent commands:
20
21
|`--tornjak-config`| Config file path for Tornjak agent || true |
21
22
|`--expandEnv`| If flag included, expand environment variables in Tornjak config | false | false |
22
23
23
-
Note these flags are passed in directly through the Tornjak container.
24
+
Note these flags are passed in directly through the Tornjak container.
24
25
25
26
### `tornjak-backend serverinfo`
26
-
Prints the SPIRE config and Tornjak config given.
27
+
28
+
Prints the SPIRE config and Tornjak config given.
27
29
28
30
### `tornjak-backend http`
29
31
30
-
Runs the tornjak server.
32
+
Runs the tornjak server.
31
33
32
34
## The Tornjak Config
33
35
34
-
The Tornjak config that is passed in must follow a specific format. Examples of this format can be found [below](#sample-configuration-files). In general, it is split into the `server` section with [general Tornjak server configs](#general-tornjak-server-configs), and the `plugins` section.
36
+
The Tornjak config that is passed in must follow a specific format. Examples of this format can be found [below](#sample-configuration-files). In general, it is split into the `server` section with [general Tornjak server configs](#general-tornjak-server-configs), and the `plugins` section.
35
37
36
38
## General Tornjak Server Configs
39
+
37
40
The server config will contain information for the two potential connections: HTTP and HTTPS. HTTPS can be configured to follow TLS or mTLS protocol. See below for sample configuration:
38
41
39
42
```hcl
@@ -42,7 +45,7 @@ server {
42
45
spire_socket_path = "unix:///tmp/spire-server/private/api.sock" # socket to communicate with SPIRE server
43
46
44
47
http { # required block
45
-
port = 10000 # if HTTP enabled, opens HTTP listen port at container port 10000
48
+
port = 10000 # if HTTP enabled, opens HTTP listen port at container port 10000
46
49
}
47
50
48
51
https { # optional, recommended block
@@ -55,11 +58,11 @@ server {
55
58
}
56
59
```
57
60
58
-
We have two connection types that are opened by the server simultaneously: HTTP and HTTPS. HTTP is always operational. The optional HTTPS connection is recommended for production use case. When HTTPS is configured, the HTTP connection will redirect to the HTTPS (port and service).
61
+
We have two connection types that are opened by the server simultaneously: HTTP and HTTPS. HTTP is always operational. The optional HTTPS connection is recommended for production use case. When HTTPS is configured, the HTTP connection will redirect to the HTTPS (port and service).
59
62
60
-
Under the HTTPS block, the fields `port`, `cert`, and `key` are required to enable TLS connection. To enable the mutual TLS (mTLS), you must additionally include the `client_ca` field, so the verification can be done bi-directionally.
63
+
Under the HTTPS block, the fields `port`, `cert`, and `key` are required to enable TLS connection. To enable the mutual TLS (mTLS), you must additionally include the `client_ca` field, so the verification can be done bi-directionally.
61
64
62
-
For examples on enabling TLS and mTLS connections, please see [our TLS and mTLS documentation](../sample-keys/README.md).
65
+
For examples on enabling TLS and mTLS connections, please see [our TLS and mTLS documentation](../sample-keys/README.md).
63
66
64
67
## About Tornjak plugins
65
68
@@ -79,7 +82,7 @@ Tornjak supports several different plugin types, each representing a different f
79
82
80
83
| Type | Name | Description |
81
84
| ---- | ---- | ----------- |
82
-
| DataStore |[sql]()| Default SQL storage for Tornjak metadata |
85
+
| DataStore |SQL| Default SQL storage for Tornjak metadata |
83
86
| Authenticator |[keycloak](/docs/plugin_server_authentication_keycloak.md)| Perform OIDC Discovery and extract roles from `realmAccess.roles` field |
84
87
| Authorizer |[RBAC](/docs/plugin_server_authorization_rbac.md)| Check api permission based on user role and defined authorization logic |
85
88
@@ -111,6 +114,5 @@ We have an extended configuration file with comments on each section found [here
0 commit comments