Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow custom policies #1394

Merged

Conversation

NikitaSkrynnik
Copy link
Contributor

Description

Allow setting custom policies to authorize registry chain elements

Issue link

How Has This Been Tested?

  • Added unit testing to cover
  • Tested manually
  • Tested by integration testing
  • Have not tested

Types of changes

  • Bug fix
  • New functionallity
  • Documentation
  • Refactoring
  • CI

denis-tingaikin and others added 3 commits December 14, 2022 04:08
Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
pkg/tools/opa/policies.go Outdated Show resolved Hide resolved
pkg/tools/opa/policies.go Outdated Show resolved Hide resolved
pkg/tools/opa/policies.go Outdated Show resolved Hide resolved
pkg/tools/opa/policies.go Outdated Show resolved Hide resolved
pkg/tools/opa/policies.go Show resolved Hide resolved
pkg/registry/common/authorize/ns_server.go Outdated Show resolved Hide resolved
pkg/registry/common/authorize/ns_server.go Outdated Show resolved Hide resolved
pkg/registry/common/authorize/ns_server.go Outdated Show resolved Hide resolved
pkg/tools/opa/policies.go Outdated Show resolved Hide resolved
@denis-tingaikin
Copy link
Member

TODO: Cover it by unit tests

NikitaSkrynnik and others added 4 commits December 15, 2022 01:15
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
@NikitaSkrynnik NikitaSkrynnik marked this pull request as ready for review December 15, 2022 12:37
@denis-tingaikin denis-tingaikin merged commit 9709ed4 into networkservicemesh:main Dec 15, 2022
nsmbot pushed a commit to networkservicemesh/cmd-map-ip-k8s that referenced this pull request Dec 15, 2022
…k@main

PR link: networkservicemesh/sdk#1394

Commit: 9709ed4
Author: Nikita Skrynnik
Date: 2022-12-15 23:39:31 +1100
Message:
  - Allow custom policies (#1394)
* add custom opa policies support

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix all broken tests

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add reading of files and dirs with policies

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add policy files reading from mask

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* fix remaining issues

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix policy file paths for windows

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* move all policies to separate folders

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add default policies to networkservice authorize

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* cleanup

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* Rerun CI

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-admission-webhook-k8s that referenced this pull request Dec 15, 2022
…k@main

PR link: networkservicemesh/sdk#1394

Commit: 9709ed4
Author: Nikita Skrynnik
Date: 2022-12-15 23:39:31 +1100
Message:
  - Allow custom policies (#1394)
* add custom opa policies support

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix all broken tests

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add reading of files and dirs with policies

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add policy files reading from mask

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* fix remaining issues

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix policy file paths for windows

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* move all policies to separate folders

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add default policies to networkservice authorize

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* cleanup

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* Rerun CI

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-cluster-info-k8s that referenced this pull request Dec 15, 2022
…k@main

PR link: networkservicemesh/sdk#1394

Commit: 9709ed4
Author: Nikita Skrynnik
Date: 2022-12-15 23:39:31 +1100
Message:
  - Allow custom policies (#1394)
* add custom opa policies support

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix all broken tests

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add reading of files and dirs with policies

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add policy files reading from mask

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* fix remaining issues

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix policy file paths for windows

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* move all policies to separate folders

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add default policies to networkservice authorize

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* cleanup

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* Rerun CI

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/sdk-kernel that referenced this pull request Dec 15, 2022
…k@main

PR link: networkservicemesh/sdk#1394

Commit: 9709ed4
Author: Nikita Skrynnik
Date: 2022-12-15 23:39:31 +1100
Message:
  - Allow custom policies (#1394)
* add custom opa policies support

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix all broken tests

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add reading of files and dirs with policies

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add policy files reading from mask

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* fix remaining issues

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix policy file paths for windows

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* move all policies to separate folders

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add default policies to networkservice authorize

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* cleanup

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* Rerun CI

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-ipam-vl3 that referenced this pull request Dec 15, 2022
…k@main

PR link: networkservicemesh/sdk#1394

Commit: 9709ed4
Author: Nikita Skrynnik
Date: 2022-12-15 23:39:31 +1100
Message:
  - Allow custom policies (#1394)
* add custom opa policies support

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix all broken tests

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add reading of files and dirs with policies

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add policy files reading from mask

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* fix remaining issues

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix policy file paths for windows

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* move all policies to separate folders

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add default policies to networkservice authorize

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* cleanup

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* Rerun CI

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-registry-proxy-dns that referenced this pull request Dec 15, 2022
…k@main

PR link: networkservicemesh/sdk#1394

Commit: 9709ed4
Author: Nikita Skrynnik
Date: 2022-12-15 23:39:31 +1100
Message:
  - Allow custom policies (#1394)
* add custom opa policies support

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix all broken tests

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add reading of files and dirs with policies

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add policy files reading from mask

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* fix remaining issues

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix policy file paths for windows

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* move all policies to separate folders

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add default policies to networkservice authorize

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* cleanup

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* Rerun CI

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-nse-vfio that referenced this pull request Dec 15, 2022
…k@main

PR link: networkservicemesh/sdk#1394

Commit: 9709ed4
Author: Nikita Skrynnik
Date: 2022-12-15 23:39:31 +1100
Message:
  - Allow custom policies (#1394)
* add custom opa policies support

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix all broken tests

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add reading of files and dirs with policies

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add policy files reading from mask

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* fix remaining issues

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix policy file paths for windows

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* move all policies to separate folders

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add default policies to networkservice authorize

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* cleanup

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* Rerun CI

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-nsmgr-proxy that referenced this pull request Dec 15, 2022
…k@main

PR link: networkservicemesh/sdk#1394

Commit: 9709ed4
Author: Nikita Skrynnik
Date: 2022-12-15 23:39:31 +1100
Message:
  - Allow custom policies (#1394)
* add custom opa policies support

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix all broken tests

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add reading of files and dirs with policies

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add policy files reading from mask

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* fix remaining issues

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix policy file paths for windows

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* move all policies to separate folders

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add default policies to networkservice authorize

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* cleanup

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* Rerun CI

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/sdk-k8s that referenced this pull request Dec 15, 2022
…k@main

PR link: networkservicemesh/sdk#1394

Commit: 9709ed4
Author: Nikita Skrynnik
Date: 2022-12-15 23:39:31 +1100
Message:
  - Allow custom policies (#1394)
* add custom opa policies support

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix all broken tests

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add reading of files and dirs with policies

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add policy files reading from mask

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* fix remaining issues

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix policy file paths for windows

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* move all policies to separate folders

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add default policies to networkservice authorize

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* cleanup

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* Rerun CI

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-nsc-init that referenced this pull request Dec 15, 2022
…k@main

PR link: networkservicemesh/sdk#1394

Commit: 9709ed4
Author: Nikita Skrynnik
Date: 2022-12-15 23:39:31 +1100
Message:
  - Allow custom policies (#1394)
* add custom opa policies support

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix all broken tests

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add reading of files and dirs with policies

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add policy files reading from mask

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* fix remaining issues

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix policy file paths for windows

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* move all policies to separate folders

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add default policies to networkservice authorize

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* cleanup

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* Rerun CI

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-nse-remote-vlan that referenced this pull request Dec 15, 2022
…k@main

PR link: networkservicemesh/sdk#1394

Commit: 9709ed4
Author: Nikita Skrynnik
Date: 2022-12-15 23:39:31 +1100
Message:
  - Allow custom policies (#1394)
* add custom opa policies support

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix all broken tests

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add reading of files and dirs with policies

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add policy files reading from mask

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* fix remaining issues

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix policy file paths for windows

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* move all policies to separate folders

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add default policies to networkservice authorize

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* cleanup

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* Rerun CI

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-nsmgr that referenced this pull request Dec 15, 2022
…k@main

PR link: networkservicemesh/sdk#1394

Commit: 9709ed4
Author: Nikita Skrynnik
Date: 2022-12-15 23:39:31 +1100
Message:
  - Allow custom policies (#1394)
* add custom opa policies support

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix all broken tests

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add reading of files and dirs with policies

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add policy files reading from mask

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* fix remaining issues

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix policy file paths for windows

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* move all policies to separate folders

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add default policies to networkservice authorize

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* cleanup

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* Rerun CI

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-registry-memory that referenced this pull request Dec 15, 2022
…k@main

PR link: networkservicemesh/sdk#1394

Commit: 9709ed4
Author: Nikita Skrynnik
Date: 2022-12-15 23:39:31 +1100
Message:
  - Allow custom policies (#1394)
* add custom opa policies support

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix all broken tests

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add reading of files and dirs with policies

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add policy files reading from mask

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* fix remaining issues

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix policy file paths for windows

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* move all policies to separate folders

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add default policies to networkservice authorize

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* cleanup

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* Rerun CI

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-ipam-vl3 that referenced this pull request Dec 15, 2022
…k@main

PR link: networkservicemesh/sdk#1394

Commit: 9709ed4
Author: Nikita Skrynnik
Date: 2022-12-15 23:39:31 +1100
Message:
  - Allow custom policies (#1394)
* add custom opa policies support

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix all broken tests

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add reading of files and dirs with policies

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add policy files reading from mask

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* fix remaining issues

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix policy file paths for windows

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* move all policies to separate folders

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add default policies to networkservice authorize

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* cleanup

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* Rerun CI

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-nse-remote-vlan that referenced this pull request Dec 15, 2022
…k@main

PR link: networkservicemesh/sdk#1394

Commit: 9709ed4
Author: Nikita Skrynnik
Date: 2022-12-15 23:39:31 +1100
Message:
  - Allow custom policies (#1394)
* add custom opa policies support

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix all broken tests

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add reading of files and dirs with policies

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add policy files reading from mask

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* fix remaining issues

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix policy file paths for windows

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* move all policies to separate folders

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add default policies to networkservice authorize

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* cleanup

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* Rerun CI

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-nse-vfio that referenced this pull request Dec 15, 2022
…k@main

PR link: networkservicemesh/sdk#1394

Commit: 9709ed4
Author: Nikita Skrynnik
Date: 2022-12-15 23:39:31 +1100
Message:
  - Allow custom policies (#1394)
* add custom opa policies support

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix all broken tests

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add reading of files and dirs with policies

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add policy files reading from mask

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* fix remaining issues

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix policy file paths for windows

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* move all policies to separate folders

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add default policies to networkservice authorize

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* cleanup

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* Rerun CI

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-nsc-init that referenced this pull request Dec 15, 2022
…k@main

PR link: networkservicemesh/sdk#1394

Commit: 9709ed4
Author: Nikita Skrynnik
Date: 2022-12-15 23:39:31 +1100
Message:
  - Allow custom policies (#1394)
* add custom opa policies support

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix all broken tests

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add reading of files and dirs with policies

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add policy files reading from mask

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* fix remaining issues

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix policy file paths for windows

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* move all policies to separate folders

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add default policies to networkservice authorize

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* cleanup

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* Rerun CI

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-registry-proxy-dns that referenced this pull request Dec 15, 2022
…k@main

PR link: networkservicemesh/sdk#1394

Commit: 9709ed4
Author: Nikita Skrynnik
Date: 2022-12-15 23:39:31 +1100
Message:
  - Allow custom policies (#1394)
* add custom opa policies support

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix all broken tests

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add reading of files and dirs with policies

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add policy files reading from mask

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* fix remaining issues

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>

* fix policy file paths for windows

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* move all policies to separate folders

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* add default policies to networkservice authorize

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* cleanup

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

* Rerun CI

Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>

Signed-off-by: denis-tingaikin <denis.tingajkin@xored.com>
Signed-off-by: Nikita Skrynnik <nikita.skrynnik@xored.com>
Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
@NikitaSkrynnik NikitaSkrynnik deleted the allow-custom-policies branch July 13, 2023 09:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants