mirror of
https://github.com/paralus/paralus.git
synced 2026-03-04 18:10:21 +00:00
46cf76db9ff07436a87f479643d70def8759be1e
* issue fixes while testing getauthz and relay-agent-config gen format fix * addressed review comments and added idp table migrations
rcloud-base
This repository contains all the rcloud-system components that are the backbone for ztka and gitops.
Prerequisites
- Postgres database
Ory Kratos- API for user management- We use
Casbin- An authorization library that supports access control models like ACL, RBAC, ABAC
Setting up the database
You can use the bitnami charts for postgresql
Create the initial db/user
Scripts for admindb:
create database admindb;
CREATE ROLE admindbuser WITH LOGIN PASSWORD '<your_password>';
GRANT ALL PRIVILEGES ON DATABASE admindb to admindbuser;
Now in the newly created db:
CREATE EXTENSION IF NOT EXISTS "uuid-ossp";
grant execute on function uuid_generate_v4() to admindbuser;
Scripts for clusterdb:
create database clusterdb;
CREATE ROLE clusterdbuser WITH LOGIN PASSWORD '<your_password>';
GRANT ALL PRIVILEGES ON DATABASE clusterdb to clusterdbuser;
Now in the newly created db:
CREATE EXTENSION IF NOT EXISTS "uuid-ossp";
grant execute on function uuid_generate_v4() to clusterdbuser;
This will grant the necessary permission to the newly created user to run uuid_generate_v4()
Run application migrations
We use golang-migrate to perform migrations.
Install golang-migrate
go install -tags 'postgres' github.com/golang-migrate/migrate/v4/cmd/migrate@latest
-tags 'postgres' is important as otherwise it compiles without postgres support
You can refer to the guide for full details.
Run migrations
Example for admindb:
export POSTGRESQL_URL='postgres://<user>:<pass>@<host>:<port>/admindb?sslmode=disable'
migrate -path ./persistence/migrations/admindb -database "$POSTGRESQL_URL" up
See cli-usage for more info.
Description
All-in-one Kubernetes access manager. User-level credentials, RBAC, SSO, audit logs.
access-managementcloud-securityhacktoberfesthacktoberfest2022k8s-access-managementkubernetes-securityzero-trust-securityztka
Readme
Apache-2.0
20 MiB
Languages
Go
99.2%
Jsonnet
0.5%
PLpgSQL
0.1%