helm-charts/charts/jit-k8s-agent/values.schema.json at 43e6e4e3883102e437c561d3e3efbace65793764 · jitsecurity/helm-charts · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "cluster": {
      "type": "object",
      "properties": {
        "name": {
          "type": "string",
          "minLength": 1,
          "description": "The name of the cluster. This field is required."
        }
      },
      "required": ["name"]
    },
    "jit": {
      "type": "object",
      "properties": {
        "clientId": {
          "type": "string",
          "description": "The client ID for Jit. This field is required when not using an existing secret."
        },
        "clientSecret": {
          "type": "string",
          "description": "The client secret for Jit. This field is required when not using an existing secret."
        },
        "existingSecret": {
          "type": "string",
          "description": "The name of an existing secret to use for Jit credentials. If provided, clientId and clientSecret will be ignored."
        },
        "apiUrl": {
          "type": "string",
          "description": "The Jit API URL"
        }
      },
      "description": "Jit authentication requires either: 1) Both 'clientId' and 'clientSecret' for direct authentication, or 2) 'existingSecret' to reference an existing Kubernetes secret containing the credentials."
    }
  }
}