add support for tagged identities

This commit adds support for tagged identities. An identity can have zero, one or multiple tags (key-value metadata labels). Tags are useful to associate additional metadata with an identity. For example, which service is using this identity. A tag key is an arbitrary string (at most 64 characters long) and can contain the following characters: [a-z], [A-Z], [0-9] or '.', '_', '-', '/'. A tag value is an arbitrary string from the same character set but it can be long 256 characters long. An identity can hold up to 32 tags. Signed-off-by: Andreas Auernhammer <[email protected]>
minio · Oct 10, 2024 · 16e8557 · 16e8557
1 parent e82414e
commit 16e8557
Show file tree

Hide file tree

Showing 8 changed files with 122 additions and 67 deletions.
diff --git a/kms/protobuf/log.pb.go b/kms/protobuf/log.pb.go
diff --git a/kms/protobuf/request.pb.go b/kms/protobuf/request.pb.go
diff --git a/kms/protobuf/request.proto b/kms/protobuf/request.proto
@@ -233,6 +233,9 @@ message CreateIdentityRequest {
 
   // IsServiceAccount indicates whether the identity is a service account.
   bool IsServiceAccount = 3 [ json_name = "service_account" ];
+
+  // Tags are optional metadata labels attached to the identity as key-value pairs.
+  map<string,string> Tags = 4 [ json_name="tags" ];
 }
 
 message IdentityRequest {

diff --git a/kms/protobuf/response.pb.go b/kms/protobuf/response.pb.go
diff --git a/kms/protobuf/response.proto b/kms/protobuf/response.proto
@@ -284,6 +284,9 @@ message IdentityResponse {
   bool IsServiceAccount = 6 [ json_name = "is_service_account" ];
 
   repeated string ServiceAccounts = 7 [ json_name = "service_accounts" ];
+
+  // Tags are optional metadata labels attached to the key as key-value pairs.
+  map<string,string> Tags = 8 [ json_name="tags" ];
 }
 
 message ListIdentitiesResponse {

diff --git a/kms/protobuf/rule.pb.go b/kms/protobuf/rule.pb.go