Akshay Gaikwad
eb0b7d3ef2
Provision to create new oidc provider with same name that of deleted
...
When we soft delete oidc provider entry which we are doing for delete
provider API endpoint, we cannot create new oidc provider entry with a
same name due to unique constraint violation on name. Applying unique
constraint to name,trash will allow to create new oidc provider entry
with a same name, but fail on deleting that entry because it violates
unique constraint. Hence this commit adds unique constraint
to (id,name) combined.
2022-05-06 11:31:48 +05:30
niravparikh05
cb485e426e
removing references to sensitive hash information
2022-05-03 17:19:10 +05:30
niravparikh05
27b2b2f8d9
fixes to callback url and associate default org admin group to role
2022-05-03 13:08:23 +05:30
Abin Simon
7ba4f9e518
Drop broken tests from unused modules
...
Dropping broken tests releated to namespaces, gitops and relay peering.
2022-05-02 15:16:10 +05:30
Abin Simon
e92394080b
Fix string formatting in tests
2022-05-02 15:10:37 +05:30
Nirav Parikh
31a89543b0
Merge pull request #125 from RafayLabs/no-restart
...
Fix casbin caching issues
2022-04-29 18:35:46 +05:30
Abin Simon
f9ec22a0ba
Invalidate casbin cache after every update
2022-04-29 15:10:36 +05:30
Abin Simon
5c7776b12e
Set sentry scheme to http if no scheme available
2022-04-29 15:10:19 +05:30
niravparikh05
13e78d6b07
fixes for cli auth
2022-04-28 21:35:42 +05:30
niravparikh05
e9b9b2b7f4
fixes for oidc config and groups list
2022-04-27 21:39:24 +05:30
niravparikh05
101c005312
fixes for permissions and user group assoc
2022-04-26 19:56:36 +05:30
Abin Simon
2dfbc42717
Drop org and partner restriction in relay audit lookup
2022-04-26 15:29:37 +05:30
Abin Simon
9b7dc9a9a0
Use kratos public url in prompt
2022-04-26 13:29:07 +05:30
Abin Simon
686955a4b4
Fix audit log format
2022-04-26 10:26:15 +05:30
Abin Simon
5c2d211100
Don't add id for actor
...
We are dropping all ids from audit log.
2022-04-26 10:26:15 +05:30
niravparikh05
6cc5864082
fix for get user kubeconfig
2022-04-25 17:59:31 +05:30
niravparikh05
db7be6e26e
changes to support prompt
2022-04-25 17:24:08 +05:30
niravparikh05
9e8d767a9e
fixes in middleware to set db and few other fixes
2022-04-22 12:13:23 +05:30
Nirav Parikh
a9cd4e842e
multiple kratos clients for session validation and identity creation ( #114 )
...
* multiple kratos clients for session validation and identity creation
* fixed review comments
* switching few logs to debug
2022-04-21 11:52:20 +05:30
Akshay Gaikwad
9d15c3aa15
Remove Kratos scheme variable from auth
...
kratos Address var includes scheme, so no need to of separate variable
for a scheme.
2022-04-19 15:20:35 +05:30
niravparikh05
8883703328
changes to expose system and user grpc clients for prompt
2022-04-15 15:05:17 +05:30
niravparikh05
c99c1c5a7e
reverting changes for isGlobal in role resource
2022-04-14 18:36:55 +05:30
Nirav Parikh
a9e72810a5
Merge pull request #104 from RafayLabs/issue_fixes
...
issue fixes for cluster delete and adding bootstrap addr to agent config
2022-04-14 17:08:22 +05:30
niravparikh05
4b6cc8f8fe
changes to support cluster proxy config
2022-04-14 17:01:05 +05:30
Abin Simon
309b1a4bda
Add warning about DEV mode when calling userinfo
2022-04-14 16:55:48 +05:30
Abin Simon
5d5b097770
Remove is_global column from resourcerole table
2022-04-14 16:55:48 +05:30
Abin Simon
3f43536ad0
Don't panic if user is not available
2022-04-14 16:25:14 +05:30
Abin Simon
5537cf0608
Don't allow users to delete builtin roles
2022-04-14 16:24:44 +05:30
Abin Simon
d89136de65
Don't allow users to update builtin roles
2022-04-14 15:26:18 +05:30
Nirav Parikh
a6268da716
Merge pull request #101 from RafayLabs/authz-next
...
Tiny tweaks to authz
2022-04-13 12:13:18 +05:30
Abin Simon
9190ac81f2
Make UserInfo not require authz
2022-04-13 12:07:51 +05:30
Abin Simon
610a7da953
Fix returning ordering in authenticate
2022-04-12 19:25:05 +05:30
niravparikh05
2be1a80d92
removing leader election
2022-04-12 15:44:43 +05:30
Abin Simon
cf501a2dd8
Tiny little tidy up post authz fixes
2022-04-12 13:51:43 +05:30
niravparikh05
e45547a453
changes to support dev mode testing
2022-04-12 12:37:34 +05:30
sigmabaryon
fbae03741d
Fix casbin permissions, add kratos changes
2022-04-12 11:26:52 +05:30
Abin Simon
8768b77698
Take care of a missing TODO
2022-04-11 13:25:34 +05:30
Abin Simon
2b03267d01
Do not print out ids in audit_logs
2022-04-11 13:25:34 +05:30
Abin Simon
853e7debae
No need to support org or partner ids in audit logs
...
We will add this back in once we have multi-org support in the system.
2022-04-11 13:25:34 +05:30
Abin Simon
08db221239
Create audit logs for partner and oidc provider
2022-04-08 17:42:26 +05:30
Abin Simon
34c48c5892
Skip org and partner in audit query
2022-04-08 17:42:26 +05:30
Abin Simon
5784968790
Fix timestamp and search
2022-04-08 17:42:26 +05:30
Abin Simon
89379fe07f
Fix tests after audit log changes
2022-04-08 17:42:26 +05:30
Abin Simon
5c319f3ea8
Move out event write to separate function
2022-04-08 17:42:26 +05:30
Abin Simon
0ebb1a1339
Add audit log write
...
https://blog.sandipb.net/2018/05/03/using-zap-creating-custom-loggers/
2022-04-08 17:42:26 +05:30
Abin Simon
d9d0bc3585
Fix and cleanup tests
2022-04-08 17:42:26 +05:30
Abin Simon
729009d7fb
Add basic audit logging setup
2022-04-08 17:42:26 +05:30
Abin Simon
36bfda653b
Add host, ua and ip to session data
2022-04-08 17:42:26 +05:30
niravparikh05
8397d88836
fix for casbin duplicate issue during init and removing all deletes from init
2022-04-07 17:57:37 +05:30
Abin Simon
df72864d09
Add option to filter by user auth mode
...
Pass in type=password or type=oidc to pick the mode
2022-04-06 15:03:01 +05:30
Akshay Gaikwad
niravparikh05
Abin Simon
Nirav Parikh
sigmabaryon
Abin Simon