Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add ReBAC authorization with OpenFGA #11905

Closed
wants to merge 26 commits into from
Closed

Add ReBAC authorization with OpenFGA #11905

wants to merge 26 commits into from

Commits on Aug 28, 2023

  1. gomod: Add github.com/openfga/go-sdk 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    8c79fec View commit details
    Browse the repository at this point in the history

  2. Makefile: Add update-openfga 

    This adds the update-openfga target which generates a go source file
containing the JSON representation of the OpenFGA authorization model.

Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    0d6750d View commit details
    Browse the repository at this point in the history

Commits on Aug 29, 2023

  1. test/lint: Add check for OpenFGA auth model 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    3dbd5c1 View commit details
    Browse the repository at this point in the history

  2. lxd/auth: Add ErrNotSupported 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    78683c1 View commit details
    Browse the repository at this point in the history

  3. lxd/auth: Extend Authorizer interface 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    c53781a View commit details
    Browse the repository at this point in the history

  4. lxd/auth: Update TLS driver 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    244ec84 View commit details
    Browse the repository at this point in the history

  5. lxd/auth: Add Relation and ObjectType constants 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    289a96a View commit details
    Browse the repository at this point in the history

  6. lxd/auth: Add helper function to get full object names 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    3adaf41 View commit details
    Browse the repository at this point in the history

  7. lxd/auth: Update commonAuthorizer 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    51bbda3 View commit details
    Browse the repository at this point in the history

  8. lxd/cluster/config: Add OpenFGA config keys 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    404e075 View commit details
    Browse the repository at this point in the history

  9. lxd/auth: Add OpenFGA authorization driver 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    151e905 View commit details
    Browse the repository at this point in the history

  10. lxd/metrics: Add function to filter samples 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    cc04f7e View commit details
    Browse the repository at this point in the history

  11. lxd: Add OpenFGA setup 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    1472a17 View commit details
    Browse the repository at this point in the history

  12. daemon: Update allowPermission to use ObjectType and Relation 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    a647053 View commit details
    Browse the repository at this point in the history

  13. lxd/metrics: Support fine-grained auth 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    b0df8cc View commit details
    Browse the repository at this point in the history

  14. lxd/projects: Support fine-grained auth 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    40b78e2 View commit details
    Browse the repository at this point in the history

  15. lxd/images: Support fine-grained auth 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    df3ef74 View commit details
    Browse the repository at this point in the history

  16. lxd/instances: Support fine-grained auth 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    62f58f0 View commit details
    Browse the repository at this point in the history

  17. lxd/network_acls: Support fine-grained auth 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    28fb027 View commit details
    Browse the repository at this point in the history

  18. lxd/network_zones: Support fine-grained auth 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    914e0b9 View commit details
    Browse the repository at this point in the history

  19. lxd/network: Support fine-grained auth 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    9a2b783 View commit details
    Browse the repository at this point in the history

  20. lxd/profiles: Support fine-grained auth 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    70910c9 View commit details
    Browse the repository at this point in the history

  21. lxd/storage_buckets: Support fine-grained auth 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    c3d9f1e View commit details
    Browse the repository at this point in the history

  22. lxd/storage_volumes: Support fine-grained auth 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    32bf5b7 View commit details
    Browse the repository at this point in the history

  23. lxd: Support relations when cancelling operations 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    304b6ab View commit details
    Browse the repository at this point in the history

  24. lxd/project: Update FilterUsedBy 

    Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>
    @monstermunchkin
    monstermunchkin committed Aug 29, 2023
    Configuration menu
    Copy the full SHA
    a991356 View commit details
    Browse the repository at this point in the history