Abin Simon
f3de101f94
Update User spec to include IDPGroups
2022-05-13 13:37:07 +05:30
Akshay Gaikwad
a0424f4000
Modify groupaccount table instead of just policy rules
2022-05-12 18:11:10 +05:30
Akshay Gaikwad
5e7fc110b2
Add IdP groups in Identities table
...
The idp_groups is list of groups IdP user belongs to that is returning
in the OIdC providers token response. The flow of Idp Group mapping is
as follows:
OIdC Provider (OP) return custom claim with groups in a token when
authentication event
|
The value of custom claim is mapped to `idp_groups` of identity
traint using JsonNet mapper.
|
On inserting/updating/deleting `identities` table, Postgresql
sends a pg_notification with
`PG_OPERATION,IDENTITY_ID,IDENTITY_TRAIN` as a payload.
|
The `pkg/service/user.UserService.UpdateIdpUserGroupPolicy` update
the casbin policies for each notification based on payload received.
2022-05-12 12:32:30 +05:30
Abin Simon
cfccc1f55c
Merge pull request #132 from RafayLabs/remote-auth
...
Add auth service
2022-05-10 10:44:21 +05:30
Abin Simon
5b5d099abd
Improve auth service
2022-05-10 09:28:42 +05:30
Abin Simon
34ff1f6e32
Add auth service
2022-05-09 10:13:05 +05:30
Abin Simon
721f995db6
Merge pull request #129 from RafayLabs/hasher-upd
...
removing references to sensitive hash information
2022-05-05 11:11:16 +05:30
niravparikh05
cb485e426e
removing references to sensitive hash information
2022-05-03 17:19:10 +05:30
Nirav Parikh
a26a54574d
Merge pull request #128 from RafayLabs/oidc-updates
...
fixes to callback url and associate default org admin group to role
2022-05-03 17:09:27 +05:30
niravparikh05
27b2b2f8d9
fixes to callback url and associate default org admin group to role
2022-05-03 13:08:23 +05:30
Nirav Parikh
597be0538e
Merge pull request #127 from RafayLabs/synchronizer-udpate
...
[synchronizer] Run once before start listening for database udpate
2022-05-03 13:05:30 +05:30
Nirav Parikh
d0bae84476
Merge pull request #126 from RafayLabs/fix-tests
...
Fix tests
2022-05-03 13:04:02 +05:30
Akshay Gaikwad
6fda5831ee
[synchronizer] Run once before start listening for database udpate
...
At a time of restarting Kratos pod, we noticed to update the Kratos
config we need modify something in IdP UI to trigger the
synchronizer. Instead this change will run synchronizer initially so
it will update Kratos config with database IdP entries if any.
2022-05-03 12:50:32 +05:30
Abin Simon
de8d9d874c
Add step to create kind cluster for tests in CI
2022-05-02 15:17:57 +05:30
Abin Simon
7ba4f9e518
Drop broken tests from unused modules
...
Dropping broken tests releated to namespaces, gitops and relay peering.
2022-05-02 15:16:10 +05:30
Abin Simon
e92394080b
Fix string formatting in tests
2022-05-02 15:10:37 +05:30
Abin Simon
c2142e6abe
Fix tests because of missing fiels
...
--- FAIL: TestAccessorWithNull (0.00s)
accessor_test.go:66: open testdata/secret.yaml: no such file or directory
--- FAIL: TestAccessorSetRaw (0.00s)
accessor_test.go:93: open testdata/pod.yaml: no such file or directory
--- FAIL: TestAccessor (0.00s)
accessor_test.go:128: open testdata/pod.yaml: no such file or directory
2022-05-02 15:10:00 +05:30
Nirav Parikh
31a89543b0
Merge pull request #125 from RafayLabs/no-restart
...
Fix casbin caching issues
2022-04-29 18:35:46 +05:30
Abin Simon
f9ec22a0ba
Invalidate casbin cache after every update
2022-04-29 15:10:36 +05:30
Abin Simon
5c7776b12e
Set sentry scheme to http if no scheme available
2022-04-29 15:10:19 +05:30
Nirav Parikh
df5609f1fa
Merge pull request #123 from RafayLabs/oidc-fixes
...
fixes for oidc config and groups list
2022-04-29 11:18:12 +05:30
niravparikh05
13e78d6b07
fixes for cli auth
2022-04-28 21:35:42 +05:30
niravparikh05
e9b9b2b7f4
fixes for oidc config and groups list
2022-04-27 21:39:24 +05:30
Nirav Parikh
53140574a9
Merge pull request #122 from RafayLabs/synchronizer-omit-trashed
...
[synchronizer] Omit trash oidc providers in synchronizing
2022-04-27 19:03:18 +05:30
Akshay Gaikwad
4331eed88c
[synchronizer] Map provider name to id in kratos confing
2022-04-27 18:33:03 +05:30
Akshay Gaikwad
af09d570bf
[synchronizer] Omit trash oidc providers in synchronizing
2022-04-27 16:47:03 +05:30
Nirav Parikh
d908aef6bf
Merge pull request #121 from RafayLabs/few-fixes
...
fixes for permissions and user group assoc
2022-04-26 21:34:09 +05:30
niravparikh05
33f3d9337b
test case to be fixed
2022-04-26 21:31:13 +05:30
niravparikh05
101c005312
fixes for permissions and user group assoc
2022-04-26 19:56:36 +05:30
Nirav Parikh
8e5e36b6cf
Merge pull request #115 from RafayLabs/audit-log-final
...
Audit log
2022-04-26 15:36:22 +05:30
Abin Simon
2dfbc42717
Drop org and partner restriction in relay audit lookup
2022-04-26 15:29:37 +05:30
Abin Simon
426368014b
Enable audit info server for use in relay-tail
2022-04-26 15:29:26 +05:30
Abin Simon
3a87a77dca
Add trash column to BootstrapAgentTemplate
2022-04-26 15:29:05 +05:30
Abin Simon
9b7dc9a9a0
Use kratos public url in prompt
2022-04-26 13:29:07 +05:30
Abin Simon
a68277e295
Fix fetching user in sentry
...
Previously we were getting the user with quotes around it which caused issues.
2022-04-26 13:28:36 +05:30
Abin Simon
abaa8294bc
Improve cacheablility of docker builds
2022-04-26 13:28:22 +05:30
Abin Simon
686955a4b4
Fix audit log format
2022-04-26 10:26:15 +05:30
Abin Simon
5c2d211100
Don't add id for actor
...
We are dropping all ids from audit log.
2022-04-26 10:26:15 +05:30
Nirav Parikh
9009351c53
Merge pull request #118 from RafayLabs/prompt-fixes
...
changes to support prompt
2022-04-25 18:01:33 +05:30
niravparikh05
6cc5864082
fix for get user kubeconfig
2022-04-25 17:59:31 +05:30
Nirav Parikh
643fccb7ab
Merge pull request #117 from RafayLabs/kratos-register-oidc
...
Add autoregister settings for kratos.yml
2022-04-25 17:24:48 +05:30
niravparikh05
db7be6e26e
changes to support prompt
2022-04-25 17:24:08 +05:30
sigmabaryon
50e8983333
Add autoregister settings for kratos.yml
2022-04-25 16:33:46 +05:30
Nirav Parikh
0ebeb5ed57
Merge pull request #116 from RafayLabs/middleware-fixes
...
fixes in middleware to set db and few other fixes
2022-04-22 12:32:23 +05:30
Nirav Parikh
535a4c13a9
Merge pull request #110 from RafayLabs/rcloudbase-contribution-doc
...
Adding First Draft of Contributing.md
2022-04-22 12:15:29 +05:30
niravparikh05
9e8d767a9e
fixes in middleware to set db and few other fixes
2022-04-22 12:13:23 +05:30
Nirav Parikh
a9cd4e842e
multiple kratos clients for session validation and identity creation ( #114 )
...
* multiple kratos clients for session validation and identity creation
* fixed review comments
* switching few logs to debug
2022-04-21 11:52:20 +05:30
techmaharaj
8e12fdc8f9
Updated help section
2022-04-20 16:29:47 +05:30
techmaharaj
0980f1e4e5
Updating contribution draft
2022-04-20 15:18:13 +05:30
Nirav Parikh
faf5e92ed6
Merge pull request #112 from RafayLabs/update-readme-page
...
Update development guide manual steps
2022-04-19 15:27:39 +05:30