Nirav Parikh
dd563582d0
adding permissions for cli.config.read and code fix for non admin use… ( #313 )
...
* adding permissions for cli.config.read and code fix for non admin users cli config download
Signed-off-by: Nirav Parikh <nir.parikh05@gmail.com >
* includes changes for nix, go version 1.21 and addressed review comments
Signed-off-by: nirparikh05 <nir.parikh05@gmail.com >
* fixed lints
Signed-off-by: nirparikh05 <nir.parikh05@gmail.com >
---------
Signed-off-by: Nirav Parikh <nir.parikh05@gmail.com >
Signed-off-by: nirparikh05 <nir.parikh05@gmail.com >
2024-06-03 12:57:00 +05:30
Akshay Gaikwad
ccec5c3c18
fix: unable to create/update project when roles specified ( #314 )
...
Crate or Update project with roles association provided under
`projectNamespaceRoles` was failing due to empty group name passed to
Casbin. It fixes minor bug getting group name.
Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com >
2024-05-31 14:50:16 +05:30
Dhruv Jain
ca4e2c6131
refactor: remove unused func/var/methods ( #315 )
...
Signed-off-by: Dhruv Jain <92215138+jaydee029@users.noreply.github.com >
2024-04-25 12:16:15 +05:30
甜瓜
01faf03dbb
Update yaml.go to fix paralusYAML struct annotation errors ( #261 )
...
* Fix the number of wg.add bug
Fix the number of wg.add bug
Signed-off-by: 甜瓜 <42953016+tyut22316@users.noreply.github.com >
* Update yaml.go to fix annotation errors
fix the annotation errors
Signed-off-by: 甜瓜 <42953016+tyut22316@users.noreply.github.com >
---------
Signed-off-by: 甜瓜 <42953016+tyut22316@users.noreply.github.com >
2023-12-21 11:21:52 +05:30
Nirav Parikh
1b7a9a1fa3
changes to view auditlogs by project role users ( #247 )
...
feat: changes to view audit logs by project and cluster role users
---------
Signed-off-by: niravparikh05 <nir.parikh05@gmail.com >
2023-09-21 11:34:56 +05:30
Nirav Parikh
749dcb46d4
fix: change relays annotation of Cluster to paralus.dev/relays ( #227 )
...
Signed-off-by: niravparikh05 <nir.parikh05@gmail.com >
2023-06-26 12:41:02 +05:30
Kartik Garg
59674a221a
style: Fixed Misspells ( #223 )
...
Fixed the various misspells which were present in the code pointed out by Go Report Card
Fixes #198
Signed-off-by: Kartik-Garg <kartik.garg@infracloud.io >
2023-05-26 14:23:00 +05:30
hiteshwani29
a30f80f426
fix: cluster list API send internal error for non-exist project
...
Signed-off-by: hiteshwani29 <hiteshwani29@gmail.com >
Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com >
2023-05-25 22:36:33 +05:30
Akshay Gaikwad
c4ac043b5e
feat: Support more than one IdP groups mapping ( #172 )
...
Allow mapping more than one IdP groups to an OIdC identity. This
commit upgrades the kratos version (v0.11.0). Kratos v0.11.0 parses
all id token claims into `raw_claims`. The `raw_claims` can be used in
JsonNet mapper to map non-standard claims like `groups` to identity
traits.
Fixes #109
This also includes:
* Remove verbose bug debug logs
* Removes elasticsearch service from docker compose file
Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com >
2023-03-30 12:43:57 +05:30
Nirav Parikh
c645d2398d
fix: multiple bootstrap requests using same cluster bootstrap yaml
...
multiple bootstrap requests and separated the fingerprint mismatch error which binds a target cluster with bootstrap yaml
Signed-off-by: niravparikh05 <nir.parikh05@gmail.com >
2023-03-30 12:30:12 +05:30
Akshay Gaikwad
ffb78940e2
fix: cluster description ignored by server issue ( #187 )
...
Server was ignoring cluster description of a request. This commit is
persisting cluster description to db.
Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com >
2023-03-30 12:26:26 +05:30
hiteshwani29
1e7b2eaf63
fix: add validation for project name ( #166 )
...
Signed-off-by: hiteshwani29 <hiteshwani29@gmail.com >
2023-03-23 19:08:47 +05:30
Abhijit Mukherjee
de448a8cb3
handled no record found during connect cluster with no org setting set ( #168 )
...
Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io >
2023-02-27 15:06:57 +05:30
Abhijit Mukherjee
a211287670
Fix: validate non empty projects for delete ( #154 )
...
fix: validate non empty projects for delete
Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io >
2023-02-20 11:50:00 +05:30
Abhijit Mukherjee
0971def3b3
Feature: Add the ability to configure the SA account lifetime ( #139 )
...
added ability to conifigure SA account lifetime with validation
Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io >
2023-02-17 15:07:55 +05:30
Abhijit Mukherjee
99cb3765dd
Fix: namespace limitation ( #138 )
...
fix namespace validation with allowed characters
Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io >
2023-02-14 12:56:34 +05:30
Nirav Parikh
80f7a148b0
fix project id is recorded as part of cluster related auditlogs ( #128 )
...
Signed-off-by: niravparikh05 <nir.parikh05@gmail.com >
2023-01-27 18:44:19 +05:30
Akshay Gaikwad
1f64d80729
Auto-generate password and force reset ( #124 )
...
* Upgrade kratos service to v0.10.1
Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com >
* Upgrade kratos-client-go to v0.10.1
Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com >
* generate password feature for kratos admin creation
Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com >
* Add forceReset property in user spec
Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com >
* added forcereset in the init script
Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io >
* Resolve conflicts
Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com >
* Stdout default admin password in initialize script
Signed-off-by: Akshay Gaikwad <akgaikwad001@gmail.com >
* setting password for new user and sending default password in create user response
Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io >
* added new endpoint to service force reset flag update after resetting complete outside authz
Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io >
* removed unnecessary overhead in the forcereset endpoint and updated user type proto to remove unused fields
Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io >
2023-01-27 18:32:11 +05:30
Nirav Parikh
f4a8a69c7d
Delete relay agent from target cluster while cluster deletion ( #120 )
...
* updated reconciler to handle delete events
Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io >
* fix to ensure relay agent is deleted from taget cluster
Signed-off-by: Nirav Parikh <nir.parikh05@gmail.com >
* updated changelog
Signed-off-by: niravparikh05 <nir.parikh05@gmail.com >
Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io >
Signed-off-by: Nirav Parikh <nir.parikh05@gmail.com >
Signed-off-by: niravparikh05 <nir.parikh05@gmail.com >
Co-authored-by: mabhi <abhijit.mukherjee@infracloud.io >
2022-12-29 13:15:08 +05:30
Abhijit Mukherjee
cd55d2d1da
record user.login event by kratos hooks ( #111 )
...
* record user.login event by kratos hooks
Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io >
* added test case for create login auditlog
Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io >
* updated change log
Signed-off-by: mabhi <abhijit.mukherjee@infracloud.io >
2022-12-26 11:55:19 +05:30
Abhijit Mukherjee
d7d57cb2d0
Fix modify userinfo service to include scope in response ( #108 )
...
Fix modify userinfo service to include scope in response
2022-12-05 15:33:16 +05:30
Nirav Parikh
c30a765daa
update timestamp for kubectl_api audit logs as well
2022-11-23 15:23:39 +05:30
Nirav Parikh
2c1d053396
updated query to use time column instead of timestamp from data
2022-11-23 14:11:30 +05:30
Nirav Parikh
319f778e7e
added test cases
2022-11-22 19:01:26 +05:30
Nirav Parikh
6465afed9b
initial commit for changes to support database as backend for audit logs
2022-11-16 19:05:38 +05:30
Akshay Gaikwad
bde018a3c7
Use max select query for user last access time
2022-11-03 18:16:22 +05:30
Akshay Gaikwad
1d850cb409
Fix failing tests
2022-11-01 17:52:28 +05:30
Akshay Gaikwad
8f8bac25ea
Add last login time in user API
2022-11-01 15:57:37 +05:30
Nirav Parikh
b32fe17209
update project details for cluster operations in system audit logs
2022-10-14 15:36:29 +05:30
Nirav Parikh
37402211ee
fixed test case for role persmission selectors
2022-10-13 18:50:26 +05:30
Nirav Parikh
f0952a37d8
Fixed creating project scoped role failed from cli
2022-10-11 14:49:56 +05:30
Nirav Parikh
0ea54255de
changes to cluster lister, group creation date and default relay version
2022-09-27 20:06:47 +05:30
vivekhiwarkar
10396c7d13
fix for failing test cases
2022-08-26 10:25:06 +05:30
vivekhiwarkar
6bf6e80a9b
Fixing buf lint issue
2022-08-25 18:26:34 +05:30
Abin Simon
308fc6c33d
Add audit log for kubeconfig download
2022-08-24 15:26:49 +05:30
vivekhiwarkar
411bc6049a
changes for review comments
2022-08-22 12:06:13 +05:30
vivekhiwarkar
43b3bc8c7b
review comment changes
2022-08-18 16:11:15 +05:30
vivekhiwarkar
9741ceca77
Adding audit points
2022-08-17 12:42:00 +05:30
Abin Simon
5264eef47c
Temporarily remove flaky test
2022-08-12 16:43:00 +05:30
Abin Simon
c99e876705
Fix issue with initialization
2022-08-12 16:02:39 +05:30
Vivek Hiwarkar
621a71538d
Adding testcases for kubeconfig_settings.go ( #46 )
2022-08-05 09:18:38 +05:30
Vivek Hiwarkar
c9371aad01
Adding testcases for oidc_provider ( #44 )
2022-08-05 09:18:21 +05:30
Nirav Parikh
a54827eef1
Merge pull request #50 from paralus/small-cleanup
...
Drop unnecessary print
2022-07-28 17:50:53 +05:30
Nirav Parikh
c5d2f320ef
Validation for custom role ( #43 )
2022-07-28 17:04:08 +05:30
Abin Simon
8e28632eb9
Drop unnecessary print
2022-07-28 17:01:43 +05:30
Nirav Parikh
5e3ab86b7c
renaming cluster role binding to avoid collisions
2022-06-30 18:44:18 +05:30
Nirav Parikh
d6d0184878
fixing codeql alerts
2022-06-27 15:32:27 +05:30
Nirav Parikh
58e83c42a3
removed scheduling from codeql and fixed an alert
2022-06-27 13:13:44 +05:30
Abin Simon
7cd0156805
Use /dev/stdout for log default output
2022-06-17 14:32:01 +05:30
Abin Simon
981e82ec00
Fix project related tests
2022-06-17 13:19:25 +05:30