Switch to rego as policy decision engine (#48)

Signed-off-by: aeneasr <[email protected]>
ory · Dec 7, 2018 · ee9bcf2 · ee9bcf2
1 parent a53d3d2
commit ee9bcf2
Show file tree

Hide file tree

Showing 484 changed files with 13,658 additions and 24,250 deletions.
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -5,40 +5,46 @@ version: 2
 jobs:
   format:
     docker:
-      - image: circleci/golang:1.10
+      - image: circleci/golang:1.11
     working_directory: /go/src/github.com/ory/keto
     steps:
       - checkout
-      - run: curl https://raw.githubusercontent.com/golang/dep/master/install.sh | sh
-      - run: go get -u golang.org/x/tools/cmd/goimports
-      - run: dep ensure -vendor-only
-      - run: ./scripts/test-format.sh
+      - run:
+          name: Enable go1.11 modules
+          command: |
+            echo 'export GO111MODULE=on' >> $BASH_ENV
+            source $BASH_ENV
+      - run: curl -L https://git.io/vp6lP | sh
+      - run: mv ./bin/* $GOPATH/bin
+      - run: go mod download
+      - run: gometalinter --disable-all --enable=gofmt --enable=vet --enable=gosec --vendor ./...
 
   swagger:
     docker:
-      - image: circleci/golang:1.10
+      - image: circleci/golang:1.11
     working_directory: /go/src/github.com/ory/keto
     steps:
       - checkout
-      - run: curl https://raw.githubusercontent.com/golang/dep/master/install.sh | sh
-      - run: go get -u github.com/go-swagger/go-swagger/cmd/swagger golang.org/x/tools/cmd/goimports
-      - run: dep ensure -vendor-only
-      - run: ./scripts/run-genswag.sh
+      - run: make init
+      - run: make sdk
+      - run: git add -A && git diff --exit-code
 
   release-npm:
     docker:
       - image: circleci/node:8.9.3
-    working_directory: ~/keto
+    working_directory: ~/hydra
     steps:
       - checkout
       - run: echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" > ~/.npmrc
       - run: |
           npm version -f --no-git-tag-version $CIRCLE_TAG
-      - run: npm publish --access public
+      - run: npm view ory-hydra-sdk
+      - run: npm whoami
+      - run: npm publish
 
   test:
     docker:
-      - image: circleci/golang:1.10
+      - image: circleci/golang:1.11
         environment:
         - TEST_DATABASE_POSTGRESQL=postgres://test:test@localhost:5432/keto?sslmode=disable
         - TEST_DATABASE_MYSQL=root:test@(localhost:3306)/mysql?parseTime=true
@@ -52,18 +58,22 @@ jobs:
         - MYSQL_ROOT_PASSWORD=test
     working_directory: /go/src/github.com/ory/keto
     steps:
+      - run:
+          name: Enable go1.11 modules
+          command: |
+            echo 'export GO111MODULE=on' >> $BASH_ENV
+            source $BASH_ENV
       - checkout
       - run: go get -u github.com/go-swagger/go-swagger/cmd/swagger github.com/bradfitz/goimports github.com/mattn/goveralls golang.org/x/tools/cmd/cover github.com/ory/go-acc
-      - run: curl -L -s https://github.com/golang/dep/releases/download/v0.4.1/dep-linux-amd64 -o /go/bin/dep && chmod +x /go/bin/dep
 
       # Installation
-      - run: curl -sL https://deb.nodesource.com/setup_8.x | sudo -E bash -
-      - run: dep ensure -vendor-only
+      - run: go mod verify
       - run: go install github.com/ory/keto
 
       # Tests
       - run: go test -race -short -v $(go list ./... | grep -v cmd)
-      - run: go-acc -o coverage.txt ./... -- -v -failfast
+      - run: go-acc -v -o coverage.txt ./...
+      - run: ./scripts/test-e2e.sh
 
       # Submit coverage details
       - run: test -z "$CIRCLE_PR_NUMBER" && goveralls -service=circle-ci -coverprofile=coverage.txt -repotoken=$COVERALLS_REPO_TOKEN || echo "forks are not allowed to push to coveralls"
@@ -126,13 +136,16 @@ jobs:
 
   release-binaries:
     docker:
-      - image: circleci/golang:1.10
+      - image: circleci/golang:1.11
     working_directory: /go/src/github.com/ory/keto
     steps:
+      - run:
+          name: Update PATH and Define Environment Variable at Runtime
+          command: |
+            echo 'export GO111MODULE=on' >> $BASH_ENV
+            source $BASH_ENV
       - checkout
-      - run: curl https://raw.githubusercontent.com/golang/dep/master/install.sh | sh
       - run: go get -u github.com/mitchellh/gox github.com/tcnksm/ghr
-      - run: dep ensure -vendor-only
       - run: |
           gox -parallel=2 -ldflags "-X github.com/ory/keto/cmd.Version=`git describe --tags` -X github.com/ory/keto/cmd.BuildTime=`TZ=UTC date -u '+%Y-%m-%dT%H:%M:%SZ'` -X github.com/ory/keto/cmd.GitHash=`git rev-parse HEAD`" -output "dist/{{.Dir}}-{{.OS}}-{{.Arch}}";
       - run: ghr -t $GITHUB_TOKEN -u $CIRCLE_PROJECT_USERNAME -r $CIRCLE_PROJECT_REPONAME --replace `git describe --tags` dist/

diff --git a/.gitignore b/.gitignore
@@ -1,4 +1,4 @@
 node_modules/
-vendor/
 .idea/
-coverage.txt
+coverage.txt
+vendor/
diff --git a/Dockerfile b/Dockerfile
@@ -1,20 +1,26 @@
-FROM golang:1.10-alpine
+FROM golang:1.11-alpine
 
 ARG git_tag
 ARG git_commit
 
-RUN apk add --no-cache git build-base curl
-RUN curl https://raw.githubusercontent.com/golang/dep/master/install.sh | sh
+RUN apk add --no-cache git build-base
 
 WORKDIR /go/src/github.com/ory/keto
 
-ADD ./Gopkg.lock ./Gopkg.lock
-ADD ./Gopkg.toml ./Gopkg.toml
-RUN dep ensure -vendor-only
+RUN go get -u github.com/gobuffalo/packr/packr
+
+ENV GO111MODULE=on
+
+ADD go.mod go.mod
+ADD go.sum go.sum
+
+RUN go mod download
 
 ADD . .
 
-RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags "-s -X github.com/ory/keto/cmd.Version=$git_tag -X github.com/ory/keto/cmd.BuildTime=`TZ=UTC date -u '+%Y-%m-%dT%H:%M:%SZ'` -X github.com/ory/keto/cmd.GitHash=$git_commit" -a -installsuffix cgo -o keto
+RUN go mod verify
+RUN packr
+RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags "-s -X github.com/ory/keto/cmd.Version=$git_tag -X github.com/ory/keto/cmd.BuildTime=`TZ=UTC date -u '+%Y-%m-%dT%H:%M:%SZ'` -X github.com/ory/keto/cmd.GitHash=$git_commit" -a -installsuffix cgo -o keto github.com/ory/keto
 
 FROM scratch
 

diff --git a/Dockerfile-alpine b/Dockerfile-alpine
@@ -1,20 +1,27 @@
-FROM golang:1.10-alpine
+FROM golang:1.11-alpine
 
 ARG git_tag
 ARG git_commit
 
-RUN apk add --no-cache git build-base curl
-RUN curl https://raw.githubusercontent.com/golang/dep/master/install.sh | sh
+RUN apk add --no-cache git build-base
 
 WORKDIR /go/src/github.com/ory/keto
 
-ADD ./Gopkg.lock ./Gopkg.lock
-ADD ./Gopkg.toml ./Gopkg.toml
-RUN dep ensure -vendor-only
+RUN go get -u github.com/gobuffalo/packr/packr
+
+RUN export GO111MODULE=on
+
+
+ADD go.mod go.mod
+ADD go.sum go.sum
+
+RUN go mod download
 
 ADD . .
 
-RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags "-s -X github.com/ory/keto/cmd.Version=$git_tag -X github.com/ory/keto/cmd.BuildTime=`TZ=UTC date -u '+%Y-%m-%dT%H:%M:%SZ'` -X github.com/ory/keto/cmd.GitHash=$git_commit" -a -installsuffix cgo -o keto
+RUN go mod verify
+RUN packr
+RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags "-s -X github.com/ory/keto/cmd.Version=$git_tag -X github.com/ory/keto/cmd.BuildTime=`TZ=UTC date -u '+%Y-%m-%dT%H:%M:%SZ'` -X github.com/ory/keto/cmd.GitHash=$git_commit" -a -installsuffix cgo -o keto github.com/ory/keto
 
 FROM alpine:3.7