nirav-rafay
2ea4e264e5
Merge branch 'main' into system-audit
2022-04-11 17:29:55 +05:30
nirav-rafay
992e88faa4
Merge pull request #94 from RafayLabs/init_kratos_fix
...
retrying for kratos to be up during init and possible fix for leader election issue
2022-04-11 17:25:49 +05:30
niravparikh05
ea79bbb13d
retrying for kratos to be up during init and possible fix for leaderelection issue
2022-04-11 17:18:45 +05:30
Abin Simon
8768b77698
Take care of a missing TODO
2022-04-11 13:25:34 +05:30
Abin Simon
2b03267d01
Do not print out ids in audit_logs
2022-04-11 13:25:34 +05:30
Abin Simon
853e7debae
No need to support org or partner ids in audit logs
...
We will add this back in once we have multi-org support in the system.
2022-04-11 13:25:34 +05:30
Abin Simon
ead8b91ccc
Fix initialize script for auditing
2022-04-08 18:04:53 +05:30
Abin Simon
08db221239
Create audit logs for partner and oidc provider
2022-04-08 17:42:26 +05:30
Abin Simon
34c48c5892
Skip org and partner in audit query
2022-04-08 17:42:26 +05:30
Abin Simon
5784968790
Fix timestamp and search
2022-04-08 17:42:26 +05:30
Abin Simon
3aa3fb0410
Add basic info about _filebeat
2022-04-08 17:42:26 +05:30
Abin Simon
89379fe07f
Fix tests after audit log changes
2022-04-08 17:42:26 +05:30
Abin Simon
5c319f3ea8
Move out event write to separate function
2022-04-08 17:42:26 +05:30
Abin Simon
0ebb1a1339
Add audit log write
...
https://blog.sandipb.net/2018/05/03/using-zap-creating-custom-loggers/
2022-04-08 17:42:26 +05:30
Abin Simon
d9d0bc3585
Fix and cleanup tests
2022-04-08 17:42:26 +05:30
Abin Simon
729009d7fb
Add basic audit logging setup
2022-04-08 17:42:26 +05:30
Abin Simon
36bfda653b
Add host, ua and ip to session data
2022-04-08 17:42:26 +05:30
Abin Simon
773d45a0b2
Drop account_id constraints as kratos hard deletes identities
2022-04-08 17:42:26 +05:30
Abin Simon
de3e158c21
Update go packages for kratos
...
go get github.com/ory/kratos/x@v0.8.2-alpha.1
2022-04-08 17:42:26 +05:30
nirav-rafay
a0fd76e02e
Merge pull request #92 from RafayLabs/issue83_fix
...
fix for casbin duplicate issue during init and removing all deletes from init
2022-04-08 15:15:49 +05:30
nirav-rafay
401f244219
Merge pull request #91 from RafayLabs/initialize-script-dockerfile
...
Add Dockerfile for initialize
2022-04-08 15:14:43 +05:30
niravparikh05
565b5083fc
existing if resource permissions already exists
2022-04-08 15:10:47 +05:30
niravparikh05
8397d88836
fix for casbin duplicate issue during init and removing all deletes from init
2022-04-07 17:57:37 +05:30
Nirav Parikh
6892713274
Merge pull request #90 from RafayLabs/prod-init
...
excluding bootstrap registration from authn
2022-04-07 17:54:51 +05:30
Akshay Gaikwad
77d3d6b97e
Change Dockerfile.initialize to multilevel build
2022-04-07 15:41:32 +05:30
Akshay Gaikwad
10b038d9a4
Add Dockerfile for initialize
...
The initialize script bootstrap application with partner, org, admin
account etc. This is going to run as initContainer for primary
application container.
2022-04-07 12:13:31 +05:30
Akshay Gaikwad
f0008692e9
Remove kratos scheme env var from initialize script
2022-04-07 10:57:03 +05:30
Nirav Parikh
f45ab36fb6
Merge pull request #88 from RafayLabs/user-mods
...
Updates to user service
2022-04-06 16:54:05 +05:30
Nirav Parikh
ecf7fd5eeb
Merge pull request #87 from RafayLabs/update-dockerfile
...
COPY migration files to docker image
2022-04-06 16:53:22 +05:30
niravparikh05
d626f402bb
default dev mode
2022-04-06 15:30:33 +05:30
niravparikh05
aac445114d
excluding bootstrap registration from authn
2022-04-06 15:27:51 +05:30
Abin Simon
df72864d09
Add option to filter by user auth mode
...
Pass in type=password or type=oidc to pick the mode
2022-04-06 15:03:01 +05:30
Abin Simon
66c7cc7f10
Filter from all users list if we have don't have filters
2022-04-06 14:01:32 +05:30
Akshay Gaikwad
d83313dd74
COPY migration files to docker image
...
The copied migration files are used to run admindb migration. This is
not the best solution however could be used as workaround till we
support running migrations using go binary itself.
2022-04-06 13:50:08 +05:30
Abin Simon
5306d6a2c6
Send recovery url back after user creation
2022-04-06 13:39:36 +05:30
nirav-rafay
dc2044943b
Merge pull request #84 from RafayLabs/fixes-for-ui
...
rebasing with fixes for ui
2022-04-05 17:27:42 +05:30
nirav-rafay
e51d50d83f
updated default schema url
2022-04-05 12:39:46 +05:30
nirav-rafay
c81ca9eb95
fixed test cases and format
2022-04-04 13:37:36 +05:30
nirav-rafay
639ff1da30
addressed review comments, changes for custom roles and sso users
2022-04-04 11:41:58 +05:30
nirav-rafay
af966bbadb
Merge branch 'fixes-for-ui' of github.com:RafaySystems/rcloud-base into fixes-for-ui
2022-04-01 12:13:25 +05:30
nirav-rafay
ce9063e990
rebasing with fixes for ui
2022-04-01 12:03:42 +05:30
nirav-rafay
7d38707a9e
Merge pull request #86 from RafayLabs/query-options
...
Some stuff that has to do with permissions
2022-04-01 11:30:25 +05:30
Abin Simon
94bb70cb6d
Merge sentry view table models
2022-03-31 13:37:11 +05:30
nirav-rafay
837e5200ea
Merge pull request #85 from RafayLabs/update-auth
...
Update Auth constructor function and middleware
2022-03-30 17:14:54 +05:30
Abin Simon
1ed5a3e876
Rework session handling to prevent cyclic import
...
imports github.com/RafayLabs/rcloud-base/internal/fixtures
imports github.com/RafayLabs/rcloud-base/pkg/service
imports github.com/RafayLabs/rcloud-base/pkg/auth/v3
imports github.com/RafayLabs/rcloud-base/pkg/service
2022-03-30 14:00:05 +05:30
Akshay Gaikwad
5de4ba9765
Add two constructors for authContext
...
This includes:
- SetupAuthContext: Setups authContext with new authContext fields.
- NewAuthContext: Create AuthContext with using authContext fields
from caller function.
2022-03-30 13:00:35 +05:30
Akshay Gaikwad
c972e26d93
Update Auth constructor function and middleware
...
Auth constructor should handle creation of Kratos, database,
ApiKeyService itself for benefit to other dependent modules/repos. The
Prompt module does not need db instance hence it should not pass db
parameter when initializing Auth context and middleware.
Signed-off-by: Akshay Gaikwad <akshay.gaikwad@rafay.co >
2022-03-30 12:16:42 +05:30
Abin Simon
19273730e9
Limit project visibility to only users with project.read
2022-03-29 17:12:01 +05:30
Abin Simon
ff4f5d160e
Switch from permission to permissions for userinfo
2022-03-29 16:02:29 +05:30
Abin Simon
49ce1ca5a1
Add test for userinfo and fix broken tests
2022-03-29 15:58:27 +05:30
