sdn-sense / siterm

Apache License 2.0
3 stars 5 forks source link

Allow wildcard DN to auth/authz with SiteRM Frontend #490

Closed juztas closed 4 months ago

juztas commented 4 months ago

As number of demployments increase - would be nice to support a wildcard for allowed domains, e.g. /C=US/O=Let's Encrypt/CN=R3/CN=*.nrp-nautilus.io - which will support all *.nrp-nautilus.io

agent1:
  full_dn: "/C=US/O=Let's Encrypt/CN=R3/CN=node-2-6.nrp-nautilus.io"
  permissions: w
agent2:
  full_dn: "/C=US/O=Let's Encrypt/CN=R3/CN=node-2-7.nrp-nautilus.io"
  permissions: w
agent3:
  full_dn: "/C=US/O=Let's Encrypt/CN=R3/CN=node-2-8.nrp-nautilus.io"
  permissions: w
agent4:
  full_dn: "/C=US/O=Let's Encrypt/CN=R3/CN=node-2-9.nrp-nautilus.io"
  permissions: w
agent5:
  full_dn: "/C=US/O=Let's Encrypt/CN=R3/CN=node-2-10.nrp-nautilus.io"
  permissions: w
agent6:
  full_dn: "/C=US/O=Let's Encrypt/CN=R3/CN=node-2-11.nrp-nautilus.io"
  permissions: w
rucio:
juztas commented 4 months ago

https://github.com/sdn-sense/siterm/pull/496