Commit Graph

219 Commits

Author SHA1 Message Date
Chandan Krishna
f56c5a9fd8 Updated Kratos Client and Fixed SQL Migration issues (#403)
* created new migrations for null values

Signed-off-by: zyncc <chandankrishna288@gmail.com>

* fixed not null constraint for sentry_bootstrap_infra

Signed-off-by: zyncc <chandankrishna288@gmail.com>

* migrations not being applied

Signed-off-by: zyncc <chandankrishna288@gmail.com>

* added default values to all not null columns

Signed-off-by: zyncc <chandankrishna288@gmail.com>

* changes to kratos client api

Signed-off-by: zyncc <chandankrishna288@gmail.com>

* fixed casbin entries not showing in database

Signed-off-by: zyncc <chandankrishna288@gmail.com>

* .

Signed-off-by: zyncc <chandankrishna288@gmail.com>

* fixed create / upsert mismatch

Signed-off-by: zyncc <chandankrishna288@gmail.com>

* .

Signed-off-by: zyncc <chandankrishna288@gmail.com>

* .

Signed-off-by: zyncc <chandankrishna288@gmail.com>

* .

Signed-off-by: zyncc <chandankrishna288@gmail.com>

* .

Signed-off-by: zyncc <chandankrishna288@gmail.com>

* created one sql migration file

Signed-off-by: zyncc <chandankrishna288@gmail.com>

* .

Signed-off-by: zyncc <chandankrishna288@gmail.com>

* fixed CVE Vulnerability for golang and golang.org/x/oauth2

Signed-off-by: zyncc <chandankrishna288@gmail.com>

* changed go version to 1.25.5

Signed-off-by: zyncc <chandankrishna288@gmail.com>

* updated golangct-lint version to v2.6

Signed-off-by: zyncc <chandankrishna288@gmail.com>

* golang-ci version

Signed-off-by: zyncc <chandankrishna288@gmail.com>

* added version to golang-ci.yaml

Signed-off-by: zyncc <chandankrishna288@gmail.com>

* fixed golangci config

Signed-off-by: zyncc <chandankrishna288@gmail.com>

---------

Signed-off-by: zyncc <chandankrishna288@gmail.com>
2026-01-16 11:24:33 +05:30
Nirav Parikh
61644d8b11 chore(docs): updated changelog for v0.2.9 release (#381)
updated changelog for v0.2.9 release
updated uptrace bun dependency version to fix vulnerabilities
fix tests
Signed-off-by: niravparikh05 <nir.parikh05@gmail.com>
2025-05-23 16:43:26 +05:30
Swastik Gour
7a4895a5b2 updated main.go script to reinitialize the permissions when the are e… (#366)
* updated main.go script to reinitialize the permissions when the are existing or there is any update

Signed-off-by: swastik959 <Sswastik959@gmail.com>

* added few corrections and added better error logging

Signed-off-by: swastik959 <Sswastik959@gmail.com>

* added the checks for checking the existence of different components

Signed-off-by: swastik959 <Sswastik959@gmail.com>

* started adding the Upsert function

Signed-off-by: swastik959 <Sswastik959@gmail.com>

* added upsert to role.go

Signed-off-by: swastik959 <Sswastik959@gmail.com>

* added tests and auditing

Signed-off-by: swastik959 <Sswastik959@gmail.com>

* updated packages

Signed-off-by: swastik959 <Sswastik959@gmail.com>

* updated go version

Signed-off-by: swastik959 <Sswastik959@gmail.com>

* added minor changes

Signed-off-by: swastik959 <Sswastik959@gmail.com>

* added correction to role_test.go

Signed-off-by: swastik959 <Sswastik959@gmail.com>

* corrected test cases

Signed-off-by: swastik959 <Sswastik959@gmail.com>

---------

Signed-off-by: swastik959 <Sswastik959@gmail.com>
2025-03-20 16:15:38 +05:30
Nirav Parikh
dd563582d0 adding permissions for cli.config.read and code fix for non admin use… (#313)
* adding permissions for cli.config.read and code fix for non admin users cli config download

Signed-off-by: Nirav Parikh <nir.parikh05@gmail.com>

* includes changes for nix, go version 1.21 and addressed review comments

Signed-off-by: nirparikh05 <nir.parikh05@gmail.com>

* fixed lints

Signed-off-by: nirparikh05 <nir.parikh05@gmail.com>

---------

Signed-off-by: Nirav Parikh <nir.parikh05@gmail.com>
Signed-off-by: nirparikh05 <nir.parikh05@gmail.com>
2024-06-03 12:57:00 +05:30
Akshay Gaikwad
ccec5c3c18 fix: unable to create/update project when roles specified (#314)
Crate or Update project with roles association provided under
`projectNamespaceRoles` was failing due to empty group name passed to
Casbin. It fixes minor bug getting group name.

Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com>
2024-05-31 14:50:16 +05:30
Dhruv Jain
ca4e2c6131 refactor: remove unused func/var/methods (#315)
Signed-off-by: Dhruv Jain <92215138+jaydee029@users.noreply.github.com>
2024-04-25 12:16:15 +05:30
甜瓜
01faf03dbb Update yaml.go to fix paralusYAML struct annotation errors (#261)
* Fix the number of wg.add bug 

Fix the number of wg.add bug 

Signed-off-by: 甜瓜 <42953016+tyut22316@users.noreply.github.com>

* Update yaml.go to fix annotation errors

fix the  annotation errors

Signed-off-by: 甜瓜 <42953016+tyut22316@users.noreply.github.com>

---------

Signed-off-by: 甜瓜 <42953016+tyut22316@users.noreply.github.com>
2023-12-21 11:21:52 +05:30
Nirav Parikh
1b7a9a1fa3 changes to view auditlogs by project role users (#247)
feat: changes to view audit logs by project and cluster role users
---------

Signed-off-by: niravparikh05 <nir.parikh05@gmail.com>
2023-09-21 11:34:56 +05:30
Nirav Parikh
749dcb46d4 fix: change relays annotation of Cluster to paralus.dev/relays (#227)
Signed-off-by: niravparikh05 <nir.parikh05@gmail.com>
2023-06-26 12:41:02 +05:30
Kartik Garg
59674a221a style: Fixed Misspells (#223)
Fixed the various misspells which were present in the code pointed out by Go Report Card
Fixes #198

Signed-off-by: Kartik-Garg <kartik.garg@infracloud.io>
2023-05-26 14:23:00 +05:30
hiteshwani29
a30f80f426 fix: cluster list API send internal error for non-exist project
Signed-off-by: hiteshwani29 <hiteshwani29@gmail.com>
Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com>
2023-05-25 22:36:33 +05:30
Akshay Gaikwad
c4ac043b5e feat: Support more than one IdP groups mapping (#172)
Allow mapping more than one IdP groups to an OIdC identity. This
commit upgrades the kratos version (v0.11.0). Kratos v0.11.0 parses
all id token claims into `raw_claims`. The `raw_claims` can be used in
JsonNet mapper to map non-standard claims like `groups` to identity
traits.

Fixes #109

This also includes:
* Remove verbose bug debug logs
* Removes elasticsearch service from docker compose file

Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com>
2023-03-30 12:43:57 +05:30
Nirav Parikh
c645d2398d fix: multiple bootstrap requests using same cluster bootstrap yaml
multiple bootstrap requests and separated the fingerprint mismatch error which binds a target cluster with bootstrap yaml

Signed-off-by: niravparikh05 <nir.parikh05@gmail.com>
2023-03-30 12:30:12 +05:30
Akshay Gaikwad
ffb78940e2 fix: cluster description ignored by server issue (#187)
Server was ignoring cluster description of a request. This commit is
persisting cluster description to db.

Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com>
2023-03-30 12:26:26 +05:30
hiteshwani29
1e7b2eaf63 fix: add validation for project name (#166)
Signed-off-by: hiteshwani29 <hiteshwani29@gmail.com>
2023-03-23 19:08:47 +05:30
Abhijit Mukherjee
de448a8cb3 handled no record found during connect cluster with no org setting set (#168)
Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>
2023-02-27 15:06:57 +05:30
Abhijit Mukherjee
a211287670 Fix: validate non empty projects for delete (#154)
fix: validate non empty projects for delete

Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>
2023-02-20 11:50:00 +05:30
Abhijit Mukherjee
0971def3b3 Feature: Add the ability to configure the SA account lifetime (#139)
added ability to conifigure SA account lifetime with validation

Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>
2023-02-17 15:07:55 +05:30
Abhijit Mukherjee
99cb3765dd Fix: namespace limitation (#138)
fix namespace validation with allowed characters

Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>
2023-02-14 12:56:34 +05:30
Nirav Parikh
80f7a148b0 fix project id is recorded as part of cluster related auditlogs (#128)
Signed-off-by: niravparikh05 <nir.parikh05@gmail.com>
2023-01-27 18:44:19 +05:30
Akshay Gaikwad
1f64d80729 Auto-generate password and force reset (#124)
* Upgrade kratos service to v0.10.1

Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com>

* Upgrade kratos-client-go to v0.10.1

Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com>

* generate password feature for kratos admin creation

Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com>

* Add forceReset property in user spec

Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com>

* added forcereset in the init script

Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>

* Resolve conflicts

Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com>

* Stdout default admin password in initialize script

Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com>

* setting password for new user and sending default password in create user response

Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>

* added new endpoint to service force reset flag update after resetting complete outside authz

Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>

* removed unnecessary overhead in the forcereset endpoint and updated user type proto to remove unused fields

Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>
2023-01-27 18:32:11 +05:30
Nirav Parikh
f4a8a69c7d Delete relay agent from target cluster while cluster deletion (#120)
* updated reconciler to handle delete events

Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>

* fix to ensure relay agent is deleted from taget cluster

Signed-off-by: Nirav Parikh <nir.parikh05@gmail.com>

* updated changelog

Signed-off-by: niravparikh05 <nir.parikh05@gmail.com>

Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>
Signed-off-by: Nirav Parikh <nir.parikh05@gmail.com>
Signed-off-by: niravparikh05 <nir.parikh05@gmail.com>
Co-authored-by: mabhi <abhijit.mukherjee@infracloud.io>
2022-12-29 13:15:08 +05:30
Abhijit Mukherjee
cd55d2d1da record user.login event by kratos hooks (#111)
* record user.login event by kratos hooks

Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>

* added test case for create login auditlog

Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>

* updated change log

Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io>
2022-12-26 11:55:19 +05:30
Abhijit Mukherjee
d7d57cb2d0 Fix modify userinfo service to include scope in response (#108)
Fix modify userinfo service to include scope in response
2022-12-05 15:33:16 +05:30
Nirav Parikh
c30a765daa update timestamp for kubectl_api audit logs as well 2022-11-23 15:23:39 +05:30
Nirav Parikh
2c1d053396 updated query to use time column instead of timestamp from data 2022-11-23 14:11:30 +05:30
Nirav Parikh
319f778e7e added test cases 2022-11-22 19:01:26 +05:30
Nirav Parikh
6465afed9b initial commit for changes to support database as backend for audit logs 2022-11-16 19:05:38 +05:30
Akshay Gaikwad
bde018a3c7 Use max select query for user last access time 2022-11-03 18:16:22 +05:30
Akshay Gaikwad
1d850cb409 Fix failing tests 2022-11-01 17:52:28 +05:30
Akshay Gaikwad
8f8bac25ea Add last login time in user API 2022-11-01 15:57:37 +05:30
Nirav Parikh
b32fe17209 update project details for cluster operations in system audit logs 2022-10-14 15:36:29 +05:30
Nirav Parikh
37402211ee fixed test case for role persmission selectors 2022-10-13 18:50:26 +05:30
Nirav Parikh
f0952a37d8 Fixed creating project scoped role failed from cli 2022-10-11 14:49:56 +05:30
Nirav Parikh
0ea54255de changes to cluster lister, group creation date and default relay version 2022-09-27 20:06:47 +05:30
vivekhiwarkar
10396c7d13 fix for failing test cases 2022-08-26 10:25:06 +05:30
vivekhiwarkar
6bf6e80a9b Fixing buf lint issue 2022-08-25 18:26:34 +05:30
Abin Simon
308fc6c33d Add audit log for kubeconfig download 2022-08-24 15:26:49 +05:30
vivekhiwarkar
411bc6049a changes for review comments 2022-08-22 12:06:13 +05:30
vivekhiwarkar
43b3bc8c7b review comment changes 2022-08-18 16:11:15 +05:30
vivekhiwarkar
9741ceca77 Adding audit points 2022-08-17 12:42:00 +05:30
Abin Simon
5264eef47c Temporarily remove flaky test 2022-08-12 16:43:00 +05:30
Abin Simon
c99e876705 Fix issue with initialization 2022-08-12 16:02:39 +05:30
Vivek Hiwarkar
621a71538d Adding testcases for kubeconfig_settings.go (#46) 2022-08-05 09:18:38 +05:30
Vivek Hiwarkar
c9371aad01 Adding testcases for oidc_provider (#44) 2022-08-05 09:18:21 +05:30
Nirav Parikh
a54827eef1 Merge pull request #50 from paralus/small-cleanup
Drop unnecessary print
2022-07-28 17:50:53 +05:30
Nirav Parikh
c5d2f320ef Validation for custom role (#43) 2022-07-28 17:04:08 +05:30
Abin Simon
8e28632eb9 Drop unnecessary print 2022-07-28 17:01:43 +05:30
Nirav Parikh
5e3ab86b7c renaming cluster role binding to avoid collisions 2022-06-30 18:44:18 +05:30
Nirav Parikh
d6d0184878 fixing codeql alerts 2022-06-27 15:32:27 +05:30