| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
refactor and adding baseimage CRD resource (#639) Refactoring code for consistency and removing dead code: * remove services manager * remove zookeeper dependency * remove application manager * rename secretstore -> secrets * update field names (e.g. BaseImageName -> BaseImage) Add baseimage support via CRD: * created CRD for baseimages - may include controller later to track image state * fetch baseImageURL at image creation time Unintended consequences: * new swagger version (when updating ci-golang image) | 7 年前 | |
Fix golint issues (#260) | 8 年前 | |
Enable Auth in CI Enables auth in the CI. This is done by installing Dispatch in bootstrap mode and then creating the necessary service account and policies. We then disable the bootstrap mode, run the tests using the ci-user service account. | 8 年前 | |
Improve service account handling * Fixes an auth issue with service accounts where we were returning the actual orgID of the service account instead of the orgID the service account was trying to access. Without this fix, service accounts wouldn't be able to access other org's even if they had the right policies. Also, as part of the fix I enhanced the casbin policy model and enforcer to better understand cross-organization requests. | 8 年前 | |
Nkaashoek/ZookeeperScaling (#573) * Use zookeeper as a system for distributed locking * Install our own zookeeper charts independent of riff/kafka * Point existing services to this instance of zookeeper * Controller creates and uses znodes as locking scheme as described in: https://zookeeper.apache.org/doc/r3.1.2/recipes.html#sc_recipes_Locks | 8 年前 | |
Fix golint issues | 8 年前 | |
Support Tenancy in Dispatch (#510) * Introduce Tenancy Support in Dispatch * CLI changes * Swagger changes * Remove auth requirements for version * Add ListGlobal method and other refactor for entity store * Add Global Policy, fix CI and CLI In order to denote a policy that applies to all orgs, a global flag is added to the model. When specified, the policy applies to all orgs (in other words god mode). Without this it's not possible to give a single user/account access to all orgs. Also, fixed issues with service account in multi-tenant mode. * Rebase after Identity Manager CLI client changes | 8 年前 | |
single-server-binary (#557) Changes: * All services are now executed from single binary, `dispatch-server`. This allows easier management of middlewares, and also allows `dispatch-server local` to exist (added earlier). * All images (but event-sidecar) have been merged into single image "dispatch-server". * Configuration has been unified: no more `pkg/config`, there is a single place that reads config file, flags and environment variables. * Services now only listen on HTTP port 80, since TLS is terminated at Ingress (But enabling it back will be easy). * Charts have been adjusted, and most importantly, cleaned up from unused volumes (e.g. API manager had volume with Docker socket mounted). * Config files in charts are slimmed down and are using YAML instead of JSON for better readability. * Application manager chart has been removed for now. We don't use it, and it's been broken for some time now (e2e tests for application manager have been gone for couple releases). * Some services have been "deglobalized" - the global flags are gone, and those services that were using global variables have been converted to use struct-level variables that are configured during initialization. | 8 年前 | |
single-server-binary (#557) Changes: * All services are now executed from single binary, `dispatch-server`. This allows easier management of middlewares, and also allows `dispatch-server local` to exist (added earlier). * All images (but event-sidecar) have been merged into single image "dispatch-server". * Configuration has been unified: no more `pkg/config`, there is a single place that reads config file, flags and environment variables. * Services now only listen on HTTP port 80, since TLS is terminated at Ingress (But enabling it back will be easy). * Charts have been adjusted, and most importantly, cleaned up from unused volumes (e.g. API manager had volume with Docker socket mounted). * Config files in charts are slimmed down and are using YAML instead of JSON for better readability. * Application manager chart has been removed for now. We don't use it, and it's been broken for some time now (e2e tests for application manager have been gone for couple releases). * Some services have been "deglobalized" - the global flags are gone, and those services that were using global variables have been converted to use struct-level variables that are configured during initialization. | 8 年前 | |
Rename api-manager -> endpoints (#630) * Follow existing patterns from functions and image - largely rewrote and validated that endpoints are managed correctly - use Meta object * Remove dead-code (api-manager) * Move utils.Constants to api/v1 to avoid circular dependencies Signed-off-by: Berndt Jung <bjung@vmware.com> | 7 年前 | |
Add Organization CLI and fix tenancy issues (#529) * Adds CLI for managing organizations * Adds a flag for specifying global policies (policies that work across organizations) * Update CHANGELOG * Misc fixes for handling service accounts in CLI | 8 年前 | |
Rename api-manager -> endpoints (#630) * Follow existing patterns from functions and image - largely rewrote and validated that endpoints are managed correctly - use Meta object * Remove dead-code (api-manager) * Move utils.Constants to api/v1 to avoid circular dependencies Signed-off-by: Berndt Jung <bjung@vmware.com> | 7 年前 | |
Improve service account handling * Fixes an auth issue with service accounts where we were returning the actual orgID of the service account instead of the orgID the service account was trying to access. Without this fix, service accounts wouldn't be able to access other org's even if they had the right policies. Also, as part of the fix I enhanced the casbin policy model and enforcer to better understand cross-organization requests. | 8 年前 | |
Remove static OrgID across services (#473) * Remove static OrgID across services Until now, all Dispatch services have an OrgID flag that sets the orgID on entities created by those services. With this change, orgID is passed as a custom request header X-DISPATCH-ORG-ID to all API's. Identity Manager is responsible to set this header for all user requests while individual services set this header for inter-service requests. This patch is a pre-requiste to introduce multi-tenancy in Dispatch. * Removes OrgID flags from most services Note:- We don't remove it from Identity Manager since we don't have tenancy concept. Hence, it's statically set only in the identity manager. We also don't remove from service-manager since the k8s service catalog lacks tenancy constructs. * Set the X-DISPATCH-ORG-ID as required req header for API's * Set the X-DISPATCH-ORG-ID in auth response header from IDM * Introduce a entity store method to retrieve all org's * Fix controller sync to handle entities across all org's * Enhance service clients to handle the org header * Fix Charts * Fix tests * Add missing orgID params to service clients * Fix missing OrgID in few places * Camel-case X-Dispatch-Org header and fix api-manager Fixed api-manager to inset X-Dispatch-Org header to Function API requests. | 8 年前 | |
Support Tenancy in Dispatch (#510) * Introduce Tenancy Support in Dispatch * CLI changes * Swagger changes * Remove auth requirements for version * Add ListGlobal method and other refactor for entity store * Add Global Policy, fix CI and CLI In order to denote a policy that applies to all orgs, a global flag is added to the model. When specified, the policy applies to all orgs (in other words god mode). Without this it's not possible to give a single user/account access to all orgs. Also, fixed issues with service account in multi-tenant mode. * Rebase after Identity Manager CLI client changes | 8 年前 | |
Rename api-manager -> endpoints (#630) * Follow existing patterns from functions and image - largely rewrote and validated that endpoints are managed correctly - use Meta object * Remove dead-code (api-manager) * Move utils.Constants to api/v1 to avoid circular dependencies Signed-off-by: Berndt Jung <bjung@vmware.com> | 7 年前 | |
Improve service account handling * Fixes an auth issue with service accounts where we were returning the actual orgID of the service account instead of the orgID the service account was trying to access. Without this fix, service accounts wouldn't be able to access other org's even if they had the right policies. Also, as part of the fix I enhanced the casbin policy model and enforcer to better understand cross-organization requests. | 8 年前 | |
Support Tenancy in Dispatch (#510) * Introduce Tenancy Support in Dispatch * CLI changes * Swagger changes * Remove auth requirements for version * Add ListGlobal method and other refactor for entity store * Add Global Policy, fix CI and CLI In order to denote a policy that applies to all orgs, a global flag is added to the model. When specified, the policy applies to all orgs (in other words god mode). Without this it's not possible to give a single user/account access to all orgs. Also, fixed issues with service account in multi-tenant mode. * Rebase after Identity Manager CLI client changes | 8 年前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 7 年前 | ||
| 8 年前 | ||
| 8 年前 | ||
| 8 年前 | ||
| 8 年前 | ||
| 8 年前 | ||
| 8 年前 | ||
| 8 年前 | ||
| 8 年前 | ||
| 7 年前 | ||
| 8 年前 | ||
| 7 年前 | ||
| 8 年前 | ||
| 8 年前 | ||
| 8 年前 | ||
| 7 年前 | ||
| 8 年前 | ||
| 8 年前 |