Commit Graph

3592 Commits

Author SHA1 Message Date
6c6c5359b1 Add options to config () 2020-03-31 17:13:21 +01:00
8dbb5153f4 Tweak Auth Interface 2020-03-31 17:01:51 +01:00
2674790694 Service => Service Auth ()
* Service => Service Auth

* WithServicePrivileges => ServicePrivileges

* Fixes for CLI login

* ServicePrivileges => ServiceToken

* Fallback to service token

Co-authored-by: Ben Toogood <ben@micro.mu>
2020-03-31 16:18:04 +01:00
9fb1d476a2 Merge branch 'master' into auth-srv-srv 2020-03-31 16:15:17 +01:00
36386354d7 Fallback to service token 2020-03-31 13:51:32 +01:00
bd70820b6b ServicePrivileges => ServiceToken 2020-03-31 13:48:28 +01:00
956029ae3d Fixes for CLI login 2020-03-31 13:30:14 +01:00
e0c7f48d20 WithServicePrivileges => ServicePrivileges 2020-03-31 12:57:38 +01:00
d659e435c6 Service => Service Auth 2020-03-31 12:44:34 +01:00
3d274ab6a2 Add namespace support to Kubernetes client ()
* Add namespace support to Kubernetes client

* Fix LastUpdateTime Condition
2020-03-31 12:03:32 +01:00
1222d076f2 There can be only one! ()
* There can be only one

* fix proto?
v2.4.0
2020-03-31 10:18:50 +01:00
76ade7efd9 Auth - Swap Refresh to Token and change secrets to be strings, not tokens ()
* Refresh => Token

* Secret is no longer a token

Co-authored-by: Ben Toogood <ben@micro.mu>
2020-03-31 10:06:13 +01:00
c706ebe3fb auth proto: provide help to protoc-gen-go ()
Signed-off-by: Vasiliy Tolstov <v.tolstov@unistack.org>
2020-03-31 00:35:11 +03:00
9e6db79860 regenerate all proto ()
* regenerate all proto

Signed-off-by: Vasiliy Tolstov <v.tolstov@unistack.org>

* regenerate from proto

Signed-off-by: Vasiliy Tolstov <v.tolstov@unistack.org>

* regenerate from proto

Signed-off-by: Vasiliy Tolstov <v.tolstov@unistack.org>
2020-03-30 21:58:32 +01:00
756b346672 auth/service: move all proto files to single dir ()
Signed-off-by: Vasiliy Tolstov <v.tolstov@unistack.org>
2020-03-30 18:23:00 +03:00
4db2f5e79d Add Namespace to Auth ()
Co-authored-by: Ben Toogood <ben@micro.mu>
2020-03-30 09:51:37 +01:00
3d7d5ce6b4 api: add static router and improve path parser in rpc handler ()
* api: add static router and improve path parser in rpc handler

Signed-off-by: Vasiliy Tolstov <v.tolstov@unistack.org>

* expose metadata context key to be able to get unmodified map keys

Signed-off-by: Vasiliy Tolstov <v.tolstov@unistack.org>

* server/grpc: fix jsonpb codec for protobuf msg

Signed-off-by: Vasiliy Tolstov <v.tolstov@unistack.org>

* api/handler/rpc: write 204 status code when rsp is nil

Signed-off-by: Vasiliy Tolstov <v.tolstov@unistack.org>

* api/handler/rpc: add check for nil response for non javascript

Signed-off-by: Vasiliy Tolstov <v.tolstov@unistack.org>
2020-03-30 09:04:59 +01:00
8282e781e4 grpc pool should check state ()
Co-authored-by: huangshaojie <huangshaojie@corp.netease.com>
2020-03-28 08:48:25 +00:00
e4acc63d5f add mdns registry debug ()
Signed-off-by: Vasiliy Tolstov <v.tolstov@unistack.org>
2020-03-27 22:33:49 +03:00
45ee5e9ad1 Move error for api validation to trace level ()
* remove error on endpoint validation

* trace level
2020-03-27 14:01:47 +00:00
b60fde0e64 Pass through source and metadata in Update and Delete calls to runtime () 2020-03-27 11:37:12 +00:00
011a783a9e store/cockroach: fix dropped test errors ()
Co-authored-by: Asim Aslam <asim@aslam.me>
2020-03-27 10:15:37 +00:00
6723d17b22 Default auth, return account secret on Inspect ()
Co-authored-by: Ben Toogood <ben@micro.mu>
2020-03-27 09:54:29 +00:00
47c7181d41 Default Auth: Add blank secret to account to prevent nil errors ()
* Remove debug auth logs

* Default auth, return account secret on Inspect

Co-authored-by: Ben Toogood <ben@micro.mu>
2020-03-27 09:46:17 +00:00
b38da6ced0 api/handler/rpc: process all methods and merge url params to json body ()
* api/handler/rpc: process all methods and merge url params to json body

Signed-off-by: Vasiliy Tolstov <v.tolstov@unistack.org>

* add merge json test

Signed-off-by: Vasiliy Tolstov <v.tolstov@unistack.org>
2020-03-27 07:59:31 +00:00
1a53307a78 Remove debug auth logs ()
Co-authored-by: Ben Toogood <ben@micro.mu>
2020-03-26 19:00:24 +00:00
e204f3e2e8 Add metadata Get method () 2020-03-26 18:50:00 +00:00
329bd09f93 Fix Auth Init bug ()
Co-authored-by: Ben Toogood <ben@micro.mu>
2020-03-26 18:09:51 +00:00
4648fd0d09 Auth debugging ()
* More auth debugging

* More auth debugging

* Increase auth debugging

Co-authored-by: Ben Toogood <ben@micro.mu>
2020-03-26 17:55:35 +00:00
c905df3be6 Log auth verify requests ()
* More auth debugging

* More auth debugging

Co-authored-by: Ben Toogood <ben@micro.mu>
2020-03-26 17:35:28 +00:00
62f9a054a4 100mb () 2020-03-26 16:57:31 +00:00
00e7804f96 Auth - Add debugging to loading rules ()
* Fix auth multi-rule edgecase

* Add logging to auth rules

Co-authored-by: Ben Toogood <ben@micro.mu>
2020-03-26 16:30:31 +00:00
42b6bf5bbf Fix auth multi-rule edgecase ()
Co-authored-by: Ben Toogood <ben@micro.mu>
2020-03-26 15:52:48 +00:00
844c456839 Refactor Auth Service Protos, Add Access Rules ()
* Refactor auth/service into two protos

* Accounts Proto

* Store Prefixes

* Misc

* Tweak Protos

Co-authored-by: Ben Toogood <ben@micro.mu>
Co-authored-by: Asim Aslam <asim@aslam.me>
2020-03-26 13:12:43 +00:00
7182ca1fd0 fix server logging () 2020-03-26 13:08:06 +00:00
02839cfba5 api/handler: use http.MaxBytesReader and buffer pool ()
* api/handler: use http.MaxBytesReader

protect api handlers from OOM cases

Signed-off-by: Vasiliy Tolstov <v.tolstov@unistack.org>
2020-03-26 14:29:28 +03:00
776a7d6cd6 Update filter comment for proxy () 2020-03-26 08:05:00 +00:00
beaa434610 logger: fix reading env var ()
Signed-off-by: Vasiliy Tolstov <v.tolstov@unistack.org>
2020-03-25 22:00:43 +00:00
6efc5556e5 use requested service () 2020-03-25 20:59:37 +00:00
8d0826a031 Add check for k8s condition () 2020-03-25 19:32:41 +00:00
378d03eb66 Tidying up auth ()
* Don't clear auth rules if request fails

* Add jitter to auth service loading rules

* Remove unused error from ContextWithToken result

Co-authored-by: Ben Toogood <ben@micro.mu>
2020-03-25 18:34:13 +00:00
56af826230 Update auth to pass seconds and not nanoseconds ()
Co-authored-by: Ben Toogood <ben@micro.mu>
2020-03-25 17:03:45 +00:00
511ebd8ec2 Fix Token Expiry Bug ()
Co-authored-by: Ben Toogood <ben@micro.mu>
2020-03-25 14:40:37 +00:00
1057ef6acb Add ContextWithToken ()
* Add ContextWithToken

* Tidying up BearerScheme

Co-authored-by: Ben Toogood <ben@micro.mu>
2020-03-25 11:20:53 +00:00
35e2a68a98 Fix auth bug restricting access to unauthorised endpoints ()
Co-authored-by: Ben Toogood <ben@micro.mu>
2020-03-25 10:31:33 +00:00
0e56382107 Fix service level auth, add improved error descriptions to aid with debugging ()
Co-authored-by: Ben Toogood <ben@micro.mu>
2020-03-25 09:35:29 +00:00
dff98355be Missing ; in SQL query 2020-03-24 23:49:09 +00:00
8100d26430 api/router/registry: use logger ()
* api/router/registry: use logger

Signed-off-by: Vasiliy Tolstov <v.tolstov@unistack.org>

* api/server/acme: use logger

Signed-off-by: Vasiliy Tolstov <v.tolstov@unistack.org>
2020-03-24 20:45:11 +00:00
397a8638f4 Cockroach Store bugfix () 2020-03-24 17:16:38 +00:00
eb4d2ae6aa Remove useless variable from cockroach store () 2020-03-24 15:37:30 +00:00