Upate terraform schema and docs and crds.

gravitational · Oct 8, 2024 · ac5e044 · ac5e044
1 parent 3499e17
commit ac5e044
Show file tree

Hide file tree

Showing 6 changed files with 63 additions and 0 deletions.
diff --git a/docs/pages/reference/operator-resources/resources.teleport.dev_oidcconnectors.mdx b/docs/pages/reference/operator-resources/resources.teleport.dev_oidcconnectors.mdx
@@ -68,5 +68,6 @@ resource, which you can apply after installing the Teleport Kubernetes operator.
 |client_id|string|ClientID is the OIDC OAuth app client ID.|
 |client_secret|string|ClientSecret is the OIDC OAuth app client secret.|
 |enabled|boolean|Enabled specified whether this OIDC connector supports MFA checks. Defaults to false.|
+|max_age|string|MaxAge is the amount of time in nanoseconds that an IdP session is valid for. Defaults to 0 to always force re-authentication for MFA checks. This should only be set to a non-zero value if the IdP is setup to perform MFA checks on top of active user sessions.|
 |prompt|string|Prompt is an optional OIDC prompt. An empty string omits prompt. If not specified, it defaults to select_account for backwards compatibility.|
 
diff --git a/docs/pages/reference/terraform-provider/data-sources/oidc_connector.mdx b/docs/pages/reference/terraform-provider/data-sources/oidc_connector.mdx
@@ -71,6 +71,7 @@ Optional:
 - `client_id` (String) ClientID is the OIDC OAuth app client ID.
 - `client_secret` (String) ClientSecret is the OIDC OAuth app client secret.
 - `enabled` (Boolean) Enabled specified whether this OIDC connector supports MFA checks. Defaults to false.
+- `max_age` (String) MaxAge is the amount of time in nanoseconds that an IdP session is valid for. Defaults to 0 to always force re-authentication for MFA checks. This should only be set to a non-zero value if the IdP is setup to perform MFA checks on top of active user sessions.
 - `prompt` (String) Prompt is an optional OIDC prompt. An empty string omits prompt. If not specified, it defaults to select_account for backwards compatibility.
 
 

diff --git a/docs/pages/reference/terraform-provider/resources/oidc_connector.mdx b/docs/pages/reference/terraform-provider/resources/oidc_connector.mdx
@@ -100,6 +100,7 @@ Optional:
 - `client_id` (String) ClientID is the OIDC OAuth app client ID.
 - `client_secret` (String) ClientSecret is the OIDC OAuth app client secret.
 - `enabled` (Boolean) Enabled specified whether this OIDC connector supports MFA checks. Defaults to false.
+- `max_age` (String) MaxAge is the amount of time in nanoseconds that an IdP session is valid for. Defaults to 0 to always force re-authentication for MFA checks. This should only be set to a non-zero value if the IdP is setup to perform MFA checks on top of active user sessions.
 - `prompt` (String) Prompt is an optional OIDC prompt. An empty string omits prompt. If not specified, it defaults to select_account for backwards compatibility.
 
 

diff --git a/...cluster/charts/teleport-operator/operator-crds/resources.teleport.dev_oidcconnectors.yaml b/...cluster/charts/teleport-operator/operator-crds/resources.teleport.dev_oidcconnectors.yaml
@@ -138,6 +138,14 @@ spec:
                     description: Enabled specified whether this OIDC connector supports
                       MFA checks. Defaults to false.
                     type: boolean
+                  max_age:
+                    description: MaxAge is the amount of time in nanoseconds that
+                      an IdP session is valid for. Defaults to 0 to always force re-authentication
+                      for MFA checks. This should only be set to a non-zero value
+                      if the IdP is setup to perform MFA checks on top of active user
+                      sessions.
+                    format: duration
+                    type: string
                   prompt:
                     description: Prompt is an optional OIDC prompt. An empty string
                       omits prompt. If not specified, it defaults to select_account

diff --git a/integrations/operator/config/crd/bases/resources.teleport.dev_oidcconnectors.yaml b/integrations/operator/config/crd/bases/resources.teleport.dev_oidcconnectors.yaml
@@ -138,6 +138,14 @@ spec:
                     description: Enabled specified whether this OIDC connector supports
                       MFA checks. Defaults to false.
                     type: boolean
+                  max_age:
+                    description: MaxAge is the amount of time in nanoseconds that
+                      an IdP session is valid for. Defaults to 0 to always force re-authentication
+                      for MFA checks. This should only be set to a non-zero value
+                      if the IdP is setup to perform MFA checks on top of active user
+                      sessions.
+                    format: duration
+                    type: string
                   prompt:
                     description: Prompt is an optional OIDC prompt. An empty string
                       omits prompt. If not specified, it defaults to select_account

diff --git a/integrations/terraform/tfschema/types_terraform.go b/integrations/terraform/tfschema/types_terraform.go