39 Commits

Author SHA1 Message Date
Nirav Parikh
dd563582d0 adding permissions for cli.config.read and code fix for non admin use… (#313)
* adding permissions for cli.config.read and code fix for non admin users cli config download

Signed-off-by: Nirav Parikh <nir.parikh05@gmail.com>

* includes changes for nix, go version 1.21 and addressed review comments

Signed-off-by: nirparikh05 <nir.parikh05@gmail.com>

* fixed lints

Signed-off-by: nirparikh05 <nir.parikh05@gmail.com>

---------

Signed-off-by: Nirav Parikh <nir.parikh05@gmail.com>
Signed-off-by: nirparikh05 <nir.parikh05@gmail.com>
2024-06-03 12:57:00 +05:30
Nirav Parikh
0cd2a35ab5 expose cluster status update rpc (#296)
* expose cluster status update rpc

Signed-off-by: Nirav Parikh <nir.parikh05@gmail.com>

* added cluster rpc to relay peering rpc server listener

Signed-off-by: Nirav Parikh <nir.parikh05@gmail.com>

---------

Signed-off-by: Nirav Parikh <nir.parikh05@gmail.com>
2024-02-28 10:41:10 +05:30
Sharan
56fdc1c27b fix: add custom Empty instead of google.protobuf.Empty (#291)
Signed-off-by: sharan <sharanrdude@gmail.com>
2024-02-14 17:28:19 +05:30
Nirav Parikh
1b7a9a1fa3 changes to view auditlogs by project role users (#247)
feat: changes to view audit logs by project and cluster role users
---------

Signed-off-by: niravparikh05 <nir.parikh05@gmail.com>
2023-09-21 11:34:56 +05:30
Abhijit Mukherjee
6b8cc3163d docs: added api keys as headers for all grpc messages (#163)
* added api keys as headers for all grpc messages

Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>

* changes to have multiple api keys for auth in partner swagger docs

Signed-off-by: niravparikh05 <nir.parikh05@gmail.com>

---------

Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>
Signed-off-by: niravparikh05 <nir.parikh05@gmail.com>
Co-authored-by: niravparikh05 <nir.parikh05@gmail.com>
2023-03-30 15:20:58 +05:30
Nirav Parikh
c645d2398d fix: multiple bootstrap requests using same cluster bootstrap yaml
multiple bootstrap requests and separated the fingerprint mismatch error which binds a target cluster with bootstrap yaml

Signed-off-by: niravparikh05 <nir.parikh05@gmail.com>
2023-03-30 12:30:12 +05:30
Abhijit Mukherjee
0971def3b3 Feature: Add the ability to configure the SA account lifetime (#139)
added ability to conifigure SA account lifetime with validation

Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>
2023-02-17 15:07:55 +05:30
Akshay Gaikwad
1f64d80729 Auto-generate password and force reset (#124)
* Upgrade kratos service to v0.10.1

Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com>

* Upgrade kratos-client-go to v0.10.1

Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com>

* generate password feature for kratos admin creation

Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com>

* Add forceReset property in user spec

Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com>

* added forcereset in the init script

Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>

* Resolve conflicts

Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com>

* Stdout default admin password in initialize script

Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com>

* setting password for new user and sending default password in create user response

Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>

* added new endpoint to service force reset flag update after resetting complete outside authz

Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>

* removed unnecessary overhead in the forcereset endpoint and updated user type proto to remove unused fields

Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>
2023-01-27 18:32:11 +05:30
Abhijit Mukherjee
cd55d2d1da record user.login event by kratos hooks (#111)
* record user.login event by kratos hooks

Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>

* added test case for create login auditlog

Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>

* updated change log

Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>
2022-12-26 11:55:19 +05:30
Nirav Parikh
6465afed9b initial commit for changes to support database as backend for audit logs 2022-11-16 19:05:38 +05:30
Akshay Gaikwad
bde018a3c7 Use max select query for user last access time 2022-11-03 18:16:22 +05:30
Akshay Gaikwad
d656513ddf Add last login field to User proto 2022-11-01 13:33:02 +05:30
vivekhiwarkar
6bf6e80a9b Fixing buf lint issue 2022-08-25 18:26:34 +05:30
Nirav Parikh
9107f6e1b5 changes to fix project updates for namespaces 2022-06-14 20:15:46 +05:30
Nirav Parikh
bb4e78b9f4 recreated pb files to update the desc encoded values after changes to paralus 2022-06-10 13:22:08 +05:30
Akshay Gaikwad
0ee494cc97 Rename rcloud, Rafay references 2022-06-08 18:41:32 +05:30
Nirav Parikh
c3320a8234 Merge pull request #145 from RafayLabs/ns-dev
Namespace related development changes
2022-05-27 12:30:42 +05:30
niravparikh05
0ae35d2024 added changes for namespaced dynamic roles and created at metadata field 2022-05-24 15:48:56 +05:30
Abin Simon
c576932eda Create /user/:username/forgotpassword endpoint 2022-05-24 12:08:37 +05:30
niravparikh05
8ab85e57c9 changes to support namespaces 2022-05-23 12:42:51 +05:30
Abin Simon
bebffe2c25 Changes to support audit log change in prompt 2022-05-20 15:02:18 +05:30
Abin Simon
68bd13b891 Use projcts instead of projectids for search 2022-05-20 10:29:34 +05:30
Abin Simon
f3de101f94 Update User spec to include IDPGroups 2022-05-13 13:37:07 +05:30
niravparikh05
c99c1c5a7e reverting changes for isGlobal in role resource 2022-04-14 18:36:55 +05:30
Abin Simon
5d5b097770 Remove is_global column from resourcerole table 2022-04-14 16:55:48 +05:30
Abin Simon
d89136de65 Don't allow users to update builtin roles 2022-04-14 15:26:18 +05:30
Abin Simon
36bfda653b Add host, ua and ip to session data 2022-04-08 17:42:26 +05:30
Abin Simon
5306d6a2c6 Send recovery url back after user creation 2022-04-06 13:39:36 +05:30
nirav-rafay
639ff1da30 addressed review comments, changes for custom roles and sso users 2022-04-04 11:41:58 +05:30
nirav-rafay
ce9063e990 rebasing with fixes for ui 2022-04-01 12:03:42 +05:30
Abin Simon
ff4f5d160e Switch from permission to permissions for userinfo 2022-03-29 16:02:29 +05:30
Abin Simon
f849cc59c3 Initial version of GetUserInfo for fetching full info about current users 2022-03-29 15:09:19 +05:30
Abin Simon
e8cc7d2f1c Implement filtering of users and groups via sentry
Drop the previous implementationusing custom code
2022-03-29 15:09:19 +05:30
Abin Simon
cf0b830924 Basic QueryOptions filtering for groups and users 2022-03-29 15:09:19 +05:30
nirav-rafay
dbfc2b3928 Merge pull request #39 from RafaySystems/casbin-url-mappings
Add support for mapping permission names to urls when creating the roles
2022-03-21 12:09:13 +05:30
nirav-rafay
d469315bad changes for cli config download, apikey services and cli auth verify (#55) 2022-03-11 20:06:55 +05:30
abin-rafay
0e9be5e589 Audit engine query endpoints (#43) 2022-03-08 16:44:41 +05:30
shrey-rafay
bfaeb4831d Add support for mapping permission names to urls when creating the roles 2022-03-04 16:24:06 +05:30
nirav-rafay
c66bdc25cd restructure rcloud-base as a single base controller (#37)
* restructure rcloud-base as a single base controller
* updated master.rest
* moved sentry from internal to pkg as it is used by relay
* removing unused rpc and it's dependencies
* Fix usermgmt tests
* Don't redefine variables in rest file
Co-authored-by: Abin Simon <abin.simon@rafay.co>
2022-03-03 17:59:06 +05:30