Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

RBAC #1200

Merged
merged 109 commits into from
Aug 29, 2019
Merged

RBAC #1200

merged 109 commits into from
Aug 29, 2019

Conversation

Schnitzel
Copy link
Contributor

No description provided.

Schnitzel and others added 30 commits May 28, 2019 10:06
@Schnitzel
develop branch needs to deploy develop images
fed7494
@Schnitzel
do not deploy logs collector on non-master envs
d28affa
@Schnitzel
1 replica for develop
330aed2
@Schnitzel
make keycloak-db and api-db of type mariadb-single as they don't work…
d9c18b4 
… with shared mariadb
@rocketeerbkw
Add keycloak client for api service
f0388bd
@rocketeerbkw
Rename keycloakClient to keycloakAdminClient
b98d126
@rocketeerbkw
Validate keycloak token with keycloak-connect library
4e11643
@rocketeerbkw
Add default roles/policies/permissions for api authz
3a452f2
@rocketeerbkw
Add typescript support to api
47ac318
@rocketeerbkw
Move keycloak config updates to own function
18dc5f5
@rocketeerbkw
Merge branch '1018-keycloak-authz' into develop
22fa238
@rocketeerbkw
Add keycloak client for api service
0e91bc1
@rocketeerbkw
Rename keycloakClient to keycloakAdminClient
9d2dfa1
@rocketeerbkw
Validate keycloak token with keycloak-connect library
c8ae52d
@rocketeerbkw
Add default roles/policies/permissions for api authz
6589f4d
@rocketeerbkw
Add typescript support to api
dae3be5
@rocketeerbkw
Move keycloak config updates to own function
4d28c52
@rocketeerbkw
Remove user related APIs that are not needed
7a5faa9
@rocketeerbkw
Switch API to CRUD users in keycloak only
b8e715b
@rocketeerbkw
Add groups to API
6816079
@rocketeerbkw
Remove customer from API
bb60a69
@rocketeerbkw
Fix testing data
662898e
@rocketeerbkw
Use keycloak authz for resolvers
8dbd125
@rocketeerbkw
Merge branch 'rbac' into develop
29210ca
@rocketeerbkw
Merge remote-tracking branch 'origin/1118-update-mariadb-client' into…
e09f23f 
… develop
@rocketeerbkw
Add keycloak resources/scopes and policies
80d97c8
@rocketeerbkw
auth-server now generates keycloak tokens
5af984c
@rocketeerbkw
Use keycloak authz for resolvers
d918a74
@rocketeerbkw
Merge branch 'rbac' into develop
3e98221
@rocketeerbkw
Fix api issues
fb4c6e5
rocketeerbkw and others added 23 commits July 23, 2019 08:49
@rocketeerbkw
GOV-287 Authenticate gitlab system hooks
be03272
@rocketeerbkw
Add gitlab sync scripts
ad61518
@rocketeerbkw
Add rbac migration scripts
b82417a
@rocketeerbkw
Add process logging to migrations
01d0500
@rocketeerbkw
Fix heap out of memory error. Ignore a keycloak client bugged error
384581c
@rocketeerbkw
Refresh keycloak token during migrations
b455799
@Schnitzel
Create Platform Wide Owner Role
b55f030
@rocketeerbkw
Add process logging to gitlab sync scripts
d03acb9
@rocketeerbkw
Fix keycloak loadByUsername to find strict matches
e71ac18
@rocketeerbkw
Fix gitlab sync scripts
f8d86ec
@Schnitzel
wrong name of scope
eff6dfb
@Schnitzel
inner join to handle not existing user accounts
10a39d9
@rocketeerbkw
Add reset-project-keys migration script
37642b3
@rocketeerbkw
Remove keycloak groups before migrating
ebdca5a
@Schnitzel
inner joins to prevent empty user results
c72544b
@Schnitzel
Merge branch 'rbac' of github.com:amazeeio/lagoon into rbac
c9c76ae
@rocketeerbkw
Fix admin policies and permissions
ab4b350
@Schnitzel
Searchguard Sync updates with RBAC:
3d86352 
- Remove all Sync GraphQL mutations
- create resync script callable directly in api container
- use platform-owner role instead of lagoonadmin role
- create pattern-indexes for all projects not just project specific ones
@rocketeerbkw
Determine user project access by going "down" group chain instead of …
4564b3c 
…"up"
@Schnitzel
Inject projectIDs of Subgroups as well
5fc19f9
@Schnitzel
create new client 'lagoon-searchguard' with script mapper, delete old…
6716031 
… one
@rocketeerbkw
Merge remote-tracking branch 'origin/master' into rbac
7e4d939
@Schnitzel
trigger build
6908603
@Schnitzel Schnitzel added this to the v1.0.0 RBAC milestone Aug 28, 2019
@Schnitzel Schnitzel merged commit 336cd6a into master Aug 29, 2019
@dasrecht dasrecht deleted the rbac branch January 24, 2020 16:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
v1.0.0 RBAC
Development

Successfully merging this pull request may close these issues.
2 participants
@Schnitzel @rocketeerbkw