e01770c056
authelia.agentClientSuffix is removed (tombstoned) and the responder takes no --agent-client-suffix: hive-<name>-agent is parsed as hive <name>-agent like any other id. The reserved word agent still keeps a hive from being named *-agent.
19 lines
937 B
Nix
19 lines
937 B
Nix
# Words no HIVE name may CONTAIN. The substring half of `./reserved-names.nix`.
|
|
#
|
|
# Separate because the two differ in every dimension: subject (hive names only
|
|
# vs hive AND agent), matcher (substring vs equality), and admission rule (a
|
|
# fixed segment of a COMPOSED identifier vs a value some component emits).
|
|
# Folding them would widen the other one — containment over `forge` refuses
|
|
# `forgeworks`, which names no failure.
|
|
[
|
|
# `hive-<name>` — every hive's OIDC client id, and the string the queue's
|
|
# auth-callout responder strips to decide which hive a connection is.
|
|
"hive"
|
|
# Keeps a hive's identifiers clear of the agent-scoped families, e.g. a hive
|
|
# named `agent-<agent>` colliding with `hive-<hive>` object names.
|
|
"agent"
|
|
# Also an exact-match entry next door, for the collector's `<kind>/<owner>`
|
|
# components. Here because it is the word this swarm composes identifiers
|
|
# from everywhere.
|
|
"swarm"
|
|
]
|