gian/incus-mirror
1
0
Fork 0
mirror of https://github.com/lxc/incus synced 2026-08-02 05:26:46 +00:00
Code Issues Actions 4 Packages Projects Releases Wiki Activity

doc/authorization: Update for authorization config namespace

Browse Source 
Signed-off-by: Piotr Resztak <piotr.resztak@futurfusion.io>
This commit is contained in:
Piotr Resztak 2026-07-09 13:35:22 +02:00
parent f09e118eb4
commit 239a00608e
2 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
doc/authorization.md
View File

@ -33,7 +33,7 @@ For example, it can be used to restrict user access to a single instance.
To use OpenFGA for authorization, you must configure and run an OpenFGA server yourself.
Incus will connect to the OpenFGA server, write the {ref}`openfga-model`, and query this server for authorization for all subsequent requests.
To enable this authorization method in Incus, set the [`openfga.*`](server-options-openfga) server configuration options.
To enable this authorization method in Incus, set the [`authorization.openfga.*`](server-options-authorization) server configuration options.
All options must be set in order to enable OpenFGA. Though, you do not have to create the authorization-model yourself, Incus will generate it including the initial tuple to allow only authenticated users: `server:incus#authenticated@user:*`.
(openfga-model)=

12
doc/server_config.md
View File

@ -13,7 +13,7 @@ The following options are available:
- {ref}`server-options-logging`
- {ref}`server-options-misc`
- {ref}`server-options-oidc`
- {ref}`server-options-openfga`
- {ref}`server-options-authorization`
See {ref}`server-configure` for instructions on how to set the configuration options.
@ -55,15 +55,15 @@ The following server options configure external user authentication through {ref
:end-before: <!-- config group server-oidc end -->
```
(server-options-openfga)=
## OpenFGA configuration
(server-options-authorization)=
## Authorization configuration
The following server options configure external user authorization through {ref}`authorization-openfga`:
The following server options configure user {ref}`authorization`, either through {ref}`authorization-openfga` or a {ref}`authorization-scriptlet`:
% Include content from [config_options.txt](config_options.txt)
```{include} config_options.txt
:start-after: <!-- config group server-openfga start -->
:end-before: <!-- config group server-openfga end -->
:start-after: <!-- config group server-authorization start -->
:end-before: <!-- config group server-authorization end -->
```
(server-options-cluster)=