@@ -2690,18 +2690,18 @@ func (p *Provider) EnsureAAA(ctx context.Context, req *provider.EnsureAAARequest
26902690
26912691 // Configure TACACS+ server hosts
26922692 for _ , server := range req .AAA .Spec .TACACSServers {
2693- provider := & TacacsPlusProvider {
2693+ srv := & TacacsPlusProvider {
26942694 Name : server .Address ,
26952695 Port : server .Port ,
26962696 KeyEnc : MapKeyEncryption (server .KeyEncryption ),
26972697 }
26982698 if key , ok := req .TACACSServerKeys [server .Address ]; ok {
2699- provider .Key = key
2699+ srv .Key = key
27002700 }
27012701 if server .Timeout != nil {
2702- provider .Timeout = * server .Timeout
2702+ srv .Timeout = * server .Timeout
27032703 }
2704- conf = append (conf , provider )
2704+ conf = append (conf , srv )
27052705 }
27062706
27072707 // Configure TACACS+ server group
@@ -2728,7 +2728,7 @@ func (p *Provider) EnsureAAA(ctx context.Context, req *provider.EnsureAAARequest
27282728 }
27292729 // Set realm and provider group based on first method
27302730 if methods [0 ].Type == v1alpha1 .AAAMethodTypeGroup {
2731- authen .Realm = "tacacs"
2731+ authen .Realm = AAARealmTacacs
27322732 authen .ProviderGroup = methods [0 ].GroupName
27332733 } else {
27342734 authen .Realm = MapRealmFromMethodType (methods [0 ].Type , "" )
@@ -2745,7 +2745,7 @@ func (p *Provider) EnsureAAA(ctx context.Context, req *provider.EnsureAAARequest
27452745 Local : MapLocalFromMethodList (methods ),
27462746 }
27472747 if methods [0 ].Type == v1alpha1 .AAAMethodTypeGroup {
2748- consoleAuth .Realm = "tacacs"
2748+ consoleAuth .Realm = AAARealmTacacs
27492749 consoleAuth .ProviderGroup = methods [0 ].GroupName
27502750 } else {
27512751 consoleAuth .Realm = MapRealmFromMethodType (methods [0 ].Type , "" )
@@ -2761,10 +2761,10 @@ func (p *Provider) EnsureAAA(ctx context.Context, req *provider.EnsureAAARequest
27612761 author := & AAADefaultAuthor {
27622762 Name : "Author" ,
27632763 CmdType : "config" ,
2764- LocalRbac : MapLocalFromMethodList (methods ) == "yes" ,
2764+ LocalRbac : MapLocalFromMethodList (methods ) == AAAValueYes ,
27652765 }
27662766 if methods [0 ].Type == v1alpha1 .AAAMethodTypeGroup {
2767- author .Realm = "tacacs"
2767+ author .Realm = AAARealmTacacs
27682768 author .ProviderGroup = methods [0 ].GroupName
27692769 } else {
27702770 author .Realm = MapRealmFromMethodType (methods [0 ].Type , "" )
@@ -2778,10 +2778,10 @@ func (p *Provider) EnsureAAA(ctx context.Context, req *provider.EnsureAAARequest
27782778 methods := req .AAA .Spec .Accounting .Default .Methods
27792779 acct := & AAADefaultAcc {
27802780 Name : "Accounting" ,
2781- LocalRbac : MapLocalFromMethodList (methods ) == "yes" ,
2781+ LocalRbac : MapLocalFromMethodList (methods ) == AAAValueYes ,
27822782 }
27832783 if methods [0 ].Type == v1alpha1 .AAAMethodTypeGroup {
2784- acct .Realm = "tacacs"
2784+ acct .Realm = AAARealmTacacs
27852785 acct .ProviderGroup = methods [0 ].GroupName
27862786 } else {
27872787 acct .Realm = MapRealmFromMethodType (methods [0 ].Type , "" )
@@ -2797,7 +2797,7 @@ func (p *Provider) DeleteAAA(ctx context.Context, req *provider.DeleteAAARequest
27972797 if req .AAA .Spec .Accounting != nil && req .AAA .Spec .Accounting .Default != nil {
27982798 acct := & AAADefaultAcc {
27992799 Name : "Accounting" ,
2800- Realm : "local" ,
2800+ Realm : AAARealmLocal ,
28012801 LocalRbac : true ,
28022802 }
28032803 if err := p .Patch (ctx , acct ); err != nil {
@@ -2810,7 +2810,7 @@ func (p *Provider) DeleteAAA(ctx context.Context, req *provider.DeleteAAARequest
28102810 author := & AAADefaultAuthor {
28112811 Name : "Author" ,
28122812 CmdType : "config" ,
2813- Realm : "local" ,
2813+ Realm : AAARealmLocal ,
28142814 LocalRbac : true ,
28152815 }
28162816 if err := p .Patch (ctx , author ); err != nil {
@@ -2821,9 +2821,9 @@ func (p *Provider) DeleteAAA(ctx context.Context, req *provider.DeleteAAARequest
28212821 // Reset AAA authentication to local
28222822 if req .AAA .Spec .Authentication != nil {
28232823 authen := & AAADefaultAuth {
2824- Realm : "local" ,
2825- Local : "yes" ,
2826- Fallback : "yes" ,
2824+ Realm : AAARealmLocal ,
2825+ Local : AAAValueYes ,
2826+ Fallback : AAAValueYes ,
28272827 ErrEn : false ,
28282828 }
28292829 if err := p .Patch (ctx , authen ); err != nil {
@@ -2832,9 +2832,9 @@ func (p *Provider) DeleteAAA(ctx context.Context, req *provider.DeleteAAARequest
28322832
28332833 if req .AAA .Spec .Authentication .Login != nil && req .AAA .Spec .Authentication .Login .Console != nil {
28342834 consoleAuth := & AAAConsoleAuth {
2835- Realm : "local" ,
2836- Local : "yes" ,
2837- Fallback : "yes" ,
2835+ Realm : AAARealmLocal ,
2836+ Local : AAAValueYes ,
2837+ Fallback : AAAValueYes ,
28382838 ErrEn : false ,
28392839 }
28402840 if err := p .Patch (ctx , consoleAuth ); err != nil {
@@ -2853,8 +2853,8 @@ func (p *Provider) DeleteAAA(ctx context.Context, req *provider.DeleteAAARequest
28532853
28542854 // Delete TACACS+ server hosts
28552855 for _ , server := range req .AAA .Spec .TACACSServers {
2856- provider := & TacacsPlusProvider {Name : server .Address }
2857- if err := p .client .Delete (ctx , provider ); err != nil {
2856+ srv := & TacacsPlusProvider {Name : server .Address }
2857+ if err := p .client .Delete (ctx , srv ); err != nil {
28582858 return err
28592859 }
28602860 }
0 commit comments