dwelch0 / go-qontract-reconcile

Go implementation of qontract-reconcile CLI

user-validator

User-validator can be used to validate user data stored inside app-interface.

usage

user-validator validate --config config.yaml

You can either specify a configuration via --config or set configuration via Environment variables.

Logging

You can change the log level by adding -l to the command. Like:

user-validator validate -l debug --config config.yaml

Yaml configuration

timeout: Timeout in seconds for the run, defines maximum runtime. (default: 0)
usefeaturetoggle: Weither to check for feature toggles

qontract: 
  serverurl: URL to the GraphQL API REQUIRED
  token: Value of Authorization header
  timeout: Timeout for qontract requests (default: 60s) 
  retries: Number of times to retry requests (default: 5)

vault:
  addr: Address to access Vault REQUIRED
  authtype: Authentication type either token or approle REQUIRED
  token: Token to access Vault, requires setting authtype to token
  roleid: Role ID to use for authentication, requires setting authtype to approle 
  secretid: Secret ID to use for authentication, requires setting authtype to approle
  timeout: Timeout for vault requests. (default: 60s) 

user_validator:
  concurrency: Number of coroutines to use to query Github (default: 10)
  invalidusers: Comma seperated list of keys know to be invalid and skipd for pgp key validation

github:
  timeout: Timeout in seconds for Github request (default: 60s)

unleash:
  timeout: Timeout in seconds for Github request (default: 60s)
  apiurl: Address to access Unleash REQUIRED
  clientaccesstoken: Bearer token to use for authentication

Environment variables

Instead of using a yaml file, all parameters can be set via environment variables:

• RUNNER_TIMEOUT
• RUNNER_USE_FEATURE_TOGGLE
• QONTRACT_SERVER_URL
• QONTRACT_TIMEOUT
• QONTRACT_TOKEN
• QONTRACT_RETRIES
• VAULT_ADDR
• VAULT_AUTHTYPE
• VAULT_TOKEN
• VAULT_ROLE_ID
• VAULT_SECRET_ID
• VAULT_TIMEOUT
• USER_VALIDATOR_CONCURRENCY
• USER_VALIDATOR_INVALID_USERS
• UNLEASH_TIMEOUT
• UNLEASH_API_URL
• UNLEASH_CLIENT_ACCESS_TOKEN
• GITHUB_API_TIMEOUT

Licence

Apache License Version 2.0.

Authors

These tools have been written by the Red Hat App-SRE Team.