Skip to content

Add authorization via central OPA instance#1

Merged
tpoliaw merged 20 commits into
mainfrom
auth
Dec 16, 2024
Merged

Add authorization via central OPA instance#1
tpoliaw merged 20 commits into
mainfrom
auth

Conversation

@tpoliaw

@tpoliaw tpoliaw commented Nov 4, 2024

Copy link
Copy Markdown
Collaborator

No description provided.

callumforrester
callumforrester previously approved these changes Dec 9, 2024

@callumforrester callumforrester left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This makes sense to me, it would be good if we could add tests and/or prescribe a way to test it offline

Comment thread src/graphql.rs Outdated
@callumforrester

Copy link
Copy Markdown
Contributor

@tpoliaw I suggest we get this merged before #13 and then I'll adjust that

@tpoliaw

tpoliaw commented Dec 10, 2024

Copy link
Copy Markdown
Collaborator Author

@tpoliaw I suggest we get this merged before #13 and then I'll adjust that

Sure, I'm still scattering tests over it but it should be good to go in soon

Comment thread src/graphql/auth.rs

@callumforrester callumforrester left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm happy I understand these changes although my understanding of OPA et al. is still limited

tpoliaw and others added 14 commits December 16, 2024 10:41
Allows the host to be configurable via CLI/env
As the central admin rules do not provide a convenient single endpoint,
we're now using the 'ad-hoc query' endpoint and taking the required
queries as user provided configuration.
Requires new rules on central OPA instance but allows all logic to be
reduced to a single yes/no response.
Now there are no return types to handle there is no need to separate
the admin and access versions.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants