github/paralus
1
0
Fork 0
mirror of https://github.com/paralus/paralus.git synced 2026-08-24 15:47:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix initialize script for auditing

Browse Source
This commit is contained in:
Abin Simon
2022-04-08 18:04:53 +05:30
parent 08db221239
commit ead8b91ccc
2 changed files with 21 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
master.rest
+1
View File
@@ -486,6 +486,7 @@ X-Session-Token: :token
# Audit by project
GET :host/event/v1/auditlog?filter.timefrom=now-1h
X-Session-Token: :token
## Partner
scripts/initialize/main.go
+20 -7
View File
@@ -14,6 +14,7 @@ import (
"github.com/RafayLabs/rcloud-base/internal/dao"
"github.com/RafayLabs/rcloud-base/internal/models"
providers "github.com/RafayLabs/rcloud-base/internal/provider/kratos"
"github.com/RafayLabs/rcloud-base/pkg/audit"
"github.com/RafayLabs/rcloud-base/pkg/common"
"github.com/RafayLabs/rcloud-base/pkg/enforcer"
"github.com/RafayLabs/rcloud-base/pkg/service"
@@ -50,6 +51,7 @@ const (
dbUserEnv = "DB_USER"
dbPasswordEnv = "DB_PASSWORD"
kratosAddrEnv = "KRATOS_ADDR"
auditFileEnv = "AUDIT_LOG_FILE"
)
func addResourcePermissions(db *bun.DB, basePath string) error {
@@ -108,7 +110,9 @@ func main() {
viper.SetDefault(dbUserEnv, "admindbuser")
viper.SetDefault(dbPasswordEnv, "admindbpassword")
viper.SetDefault(kratosAddrEnv, "http://localhost:4433")
viper.SetDefault(auditFileEnv, "audit.log")
viper.BindEnv(auditFileEnv)
viper.BindEnv(dbAddrEnv)
viper.BindEnv(dbNameEnv)
viper.BindEnv(dbUserEnv)
@@ -120,6 +124,7 @@ func main() {
dbUser := viper.GetString(dbUserEnv)
dbPassword := viper.GetString(dbPasswordEnv)
kratosAddr := viper.GetString(kratosAddrEnv)
auditFile := viper.GetString(auditFileEnv)
content, err := ioutil.ReadFile(path.Join("scripts", "initialize", "roles", "ztka", "roles.json"))
if err != nil {
@@ -147,6 +152,14 @@ func main() {
kratosConfig.Servers[0].URL = kratosAddr
kc := kclient.NewAPIClient(kratosConfig)
ao := audit.AuditOptions{
LogPath: auditFile,
MaxSizeMB: 1,
MaxBackups: 10, // Should we let sidecar do rotation?
MaxAgeDays: 10, // Make these configurable via env
}
auditLogger := audit.GetAuditLogger(&ao)
// authz services
gormDb, err := gorm.Open(postgres.Open(dsn), &gorm.Config{})
if err != nil {
@@ -158,12 +171,12 @@ func main() {
}
as := service.NewAuthzService(db, enforcer)
ps := service.NewPartnerService(db)
os := service.NewOrganizationService(db)
rs := service.NewRoleService(db, as)
gs := service.NewGroupService(db, as)
us := service.NewUserService(providers.NewKratosAuthProvider(kc), db, as, nil, common.CliConfigDownloadData{})
prs := service.NewProjectService(db, as)
ps := service.NewPartnerService(db, auditLogger)
os := service.NewOrganizationService(db, auditLogger)
rs := service.NewRoleService(db, as, auditLogger)
gs := service.NewGroupService(db, as, auditLogger)
us := service.NewUserService(providers.NewKratosAuthProvider(kc), db, as, nil, common.CliConfigDownloadData{}, auditLogger)
prs := service.NewProjectService(db, as, auditLogger)
//check if there are role permissions already present
existingPermissions := &[]models.ResourceRolePermission{}
@@ -278,5 +291,5 @@ func main() {
},
})
fmt.Println("Org Admin signup URL: ", orgA.Spec.RecoveryUrl)
fmt.Println("Org Admin signup URL: ", *orgA.Spec.RecoveryUrl)
}