Repository navigation
Expand file tree
/
Copy pathmachine-clients.yaml
More file actions
180 lines (164 loc) · 5.74 KB
/
Copy pathmachine-clients.yaml
File metadata and controls
180 lines (164 loc) · 5.74 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
#
# Client-id best practice (not applied in this local setup) - https://www.oauth.com/oauth2-servers/client-registration/client-id-secret
# Client-id integers for best practice can e.g. be generated using "shuf -zer -n 12 {0..9}"
#
# Clients are provisioned idempotently using the naming convention: id = *sdep*
#
# Test data created by clients with id = "sdep-test" is automatically removed after automated test runs
# Test data created by clients with id != "sdep-test" is preserved and remains unaffected by automated test runs
#
clients:
# 1. Test clients (client id & secret) whose test data is automatically removed after automated test runs
# 1a. Competent authorities (CA)
- id: "sdep-test-ca.01"
secret: "sdep-test-ca.01"
name: "Test CA-01 (client id & secret, ephemeral)"
description: "For test automation (ephemeral data)"
service_account_roles:
- sdep_ca
- sdep_read
- sdep_write
- id: "sdep-test-ca.02"
secret: "sdep-test-ca.02"
name: "Test CA-02 (client id & secret, ephemeral)"
description: "For test automation of cross-CA isolation (ephemeral data)"
service_account_roles:
- sdep_ca
- sdep_read
- sdep_write
# 1b. Short-term rental platforms (STR)
- id: "sdep-test-str.01"
secret: "sdep-test-str.01"
name: "Test STR-01 (client id & secret, ephemeral)"
description: "For test automation (ephemeral data)"
service_account_roles:
- sdep_str
- sdep_read
- sdep_write
# 1c. Statistics authority (STA)
- id: "sdep-test-sta.01"
secret: "sdep-test-sta.01"
name: "Test STA-01 (client id & secret, ephemeral)"
description: "For test automation (ephemeral data)"
service_account_roles:
- sdep_sta
- sdep_read
# 1d. Listing screening authority (LSA)
- id: "sdep-test-lsa.01"
secret: "sdep-test-lsa.01"
name: "Test LSA-01 (client id & secret, ephemeral)"
description: "For test automation (ephemeral data)"
service_account_roles:
- sdep_lsa
- sdep_read
- sdep_write
# 1e. Listing monitoring authority (LMA)
- id: "sdep-test-lma.01"
secret: "sdep-test-lma.01"
name: "Test LMA-01 (client id & secret, ephemeral)"
description: "For test automation (ephemeral data)"
service_account_roles:
- sdep_lma
- sdep_read
# 1f. Activity monitoring authority (AMA)
- id: "sdep-test-ama.01"
secret: "sdep-test-ama.01"
name: "Test AMA-01 (client id & secret, ephemeral)"
description: "For test automation (ephemeral data)"
service_account_roles:
- sdep_ama
- sdep_read
# 2. Test clients (client id & secret) whose test data remains unaffected after automated test runs
# 2a. Competent authorities (CA)
- id: "sdep-ca.01"
secret: "sdep-ca.01"
name: "Test CA-01 (client id & secret, persistent)"
description: "For interactive testing (persistent data)"
service_account_roles:
- sdep_ca
- sdep_read
- sdep_write
- id: "833946726525.sdep.gov.local"
secret: "833946726525"
name: "Test CA-02 (client id & secret, persistent)"
description: "For interactive testing (persistent data)"
service_account_roles:
- sdep_ca
- sdep_read
- sdep_write
# 2b. Short-term rental platforms (STR)
- id: "sdep-str.01"
secret: "sdep-str.01"
name: "Test STR-01 (client id & secret, persistent)"
description: "For interactive testing (persistent data)"
service_account_roles:
- sdep_str
- sdep_read
- sdep_write
- id: "381028359011.sdep.gov.local"
secret: "381028359011"
name: "Test STR-02 (client id & secret, persistent)"
description: "For interactive testing (persistent data)"
service_account_roles:
- sdep_str
- sdep_read
- sdep_write
# 2c. Statistics authority (STA)
- id: "sdep-sta.01"
secret: "sdep-sta.01"
name: "Test STA-01 (client id & secret, persistent)"
description: "For interactive testing (persistent data)"
service_account_roles:
- sdep_sta
- sdep_read
# 2d. Listing screening authority (LSA)
- id: "sdep-lsa.01"
secret: "sdep-lsa.01"
name: "Test LSA-01 (client id & secret, persistent)"
description: "For interactive testing (persistent data)"
service_account_roles:
- sdep_lsa
- sdep_read
- sdep_write
# 2e. Listing monitoring authority (LMA)
- id: "sdep-lma.01"
secret: "sdep-lma.01"
name: "Test LMA-01 (client id & secret, persistent)"
description: "For interactive testing (persistent data)"
service_account_roles:
- sdep_lma
- sdep_read
# 2f. Activity monitoring authority (AMA)
- id: "sdep-ama.01"
secret: "sdep-ama.01"
name: "Test AMA-01 (client id & secret, persistent)"
description: "For interactive testing (persistent data)"
service_account_roles:
- sdep_ama
- sdep_read
# 3. Test clients (client id & secret) whose test data remains unaffected after automated test runs, deployed with predefined test data
# 3a. Competent authorities (CA)
- id: "sdep-ca.0363"
secret: "sdep-ca.0363"
name: "Gemeente Amsterdam (CA, client id & secret)"
description: "For interactive testing (persistent, predefined test data)"
service_account_roles:
- sdep_ca
- sdep_read
- sdep_write
- id: "sdep-ca.0599"
secret: "sdep-ca.0599"
name: "Gemeente Rotterdam (CA, client id & secret)"
description: "For interactive testing (persistent, predefined test data)"
service_account_roles:
- sdep_ca
- sdep_read
- sdep_write
- id: "sdep-ca.0518"
secret: "sdep-ca.0518"
name: "Gemeente Den Haag (CA, client id & secret)"
description: "For interactive testing (persistent, predefined test data)"
service_account_roles:
- sdep_ca
- sdep_read
- sdep_write