1
0
mirror of https://github.com/rancher/steve.git synced 2025-07-05 02:56:35 +00:00
Commit Graph

19 Commits

Author SHA1 Message Date
Sakala Venkata Krishna Rohit
5ae8585e5d
Fix namespace access control in steve (#568)
* Fix adding namespace resource access

* Add tests for addResourceAccess func
2025-04-07 17:40:43 -07:00
Tom Lebreux
b29f7d505c
Reapply "Fix not finding ClusterRoleBinding or RoleBinding for service account…" (#540) (#550)
This reverts commit 53f2165aee.
2025-03-14 11:52:28 -04:00
Tom Lebreux
53f2165aee
Revert "Fix not finding ClusterRoleBinding or RoleBinding for service account…" (#540)
This reverts commit 0f4fd1fde6.
2025-03-11 11:14:21 -04:00
Tom Lebreux
0f4fd1fde6
Fix not finding ClusterRoleBinding or RoleBinding for service accounts (#539) 2025-03-10 13:35:01 -04:00
Felipe Gehrke
6ee8201c8d
#47483 - Adding NonResourceURLs support to AccessStore (#299)
* adding NonResourceURLs support to access_store

* added tests to AccessSet NonResourceURLs handling

* change on test script suggested by @tomleb + go mod tidy

* added nonresource to ext api authorization

* added NonResourceURLs implementation in Authorizes + test

* removed non-resource-url tests from the main test

* added new tests for non-resource-urls

* removed unused test data

* changed nonResourceKey to point to struct{}

* addressed comments from @tomleb

* addressed more comments

* fixing typo

* check for empty accessSet
2024-11-04 23:47:48 -03:00
Alejandro Ruiz
fd9a516ecb
refactor(accesscontrol): deterministic cache key hashing (#292)
* refactor(accesscontrol): make addAccess directly accept PolicyRules

* refactor(accesscontrol): add new types for encapsulating all needed data

* refactor(accesscontrol): make getRules return resource version

* refactor(accesscontrol): add new getRoleRefs to policyRuleIndex

* refactor(accesscontrol): make accessStore use the new types and method

* cleanup(accesscontrol): remove unused code

* cleanup(accesscontrol): adapt tests

* cleanup(accesscontrol): add some comments and remove unused function

* refactor(accesscontrol): rework indexer to make it more readable and testable

* Fix typo

* test: consistent use of t.Error

* test: refactor policyRulesMock to just use a map

* misc: rename toUserInfo function

* refactor: consistent sort by UID
2024-10-28 09:35:59 +01:00
Alejandro Ruiz
32c30149a6
refactor(accesscontrol): add unit tests for CacheKey (#245)
This is a follow up to 435e220 with a small refactor to make the function easier to test, and adding unit tests for CacheKey.
2024-08-28 10:06:21 +02:00
vardhaman22
dae842ea98 updated wrangler from v2 to v3
also updated k8s dependencies to v0.30.1
2024-06-05 22:53:08 +05:30
Kevin Joiner
e35a044d5a Bumps rancher/wrangler to it's tagged v2 version.
The previous wrangler commit included all of the v2 changes.
Except for the import paths changes.
2024-01-24 10:24:01 -05:00
Ryan Sanna
fe125f80f3 fix role revision index for rolebindings that bind to clusterroles 2021-09-14 15:36:51 -07:00
Darren Shepherd
4911ec913f Support lookups where user.Info refers to a serviceaccount. 2020-08-11 10:59:02 -07:00
Darren Shepherd
33b6924291 Update imports for wranger-api 2020-07-14 13:27:47 -07:00
Darren Shepherd
c61e788d6e Don't use slow strings.Compare 2020-03-21 07:49:17 -07:00
Darren Shepherd
6dafed731f RBAC performance improvements 2020-03-01 22:23:36 -07:00
Darren Shepherd
51274d07e7 Fix compile error 2020-02-10 21:02:42 -07:00
Darren Shepherd
3a8e216ec8 Rename variable 2020-02-10 20:54:33 -07:00
Darren Shepherd
9f771dcf65 RBAC caching 2020-02-08 13:03:57 -07:00
Darren Shepherd
674f957b8b Delete unused code 2019-08-12 13:02:03 -07:00
Darren Shepherd
c0299c1506 Initial commit 2019-08-04 10:41:32 -07:00