| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
Fixes after main branch renaming | 5 年前 | |
Feature: Use secrets to deploy applications (#2776) * create function to initialize secrets * fix: enhance tests * rbac: add perm to secrets resources * Update tsuru-stack chart * Use prefix on secret to avoid possible conflits * Add flow to cleanup secrets * Add annotation to trigger deployment restart * Remove unnecessary log * secrets does not need to escape expansion * Add support to tsuru-jobs * remove secrets of tsuru-job * use OwnerReferences to cleanup secrets * use OwnerReferences to cleanup secrets on jobs * Simplify the code * Add flag to disable secrets behaviour | 11 个月前 | |
travis: skip bench.sh on pull requests | 8 年前 | |
all: use year of file creation in copyright notice | 9 年前 | |
chore: golang upgrade (#2865) * chore: bump golang version * chore: bump all golang versions * chore: bump alpine version * chore: bump golangci-lint to v2.11.4 * chore: update golangci-lint configuration to v2 compatible * chore: bump golangci-lint action to v8 * chore: bump tsuru-api-docs to v0.0.1 --------- Co-authored-by: ravilock <ravi.me.professional@hotmail.com> | 4 个月前 | |
Feature/service fine grained permissions (#2878) * chore: add task detail * feat: dynamic permission registry * feat(role): add dynamic permission support Introduce DynamicSchemeNames on Role and implement dynamic permission management: AddDynamicPermissions, RemoveDynamicPermissions and DynamicPermissionsFor. Persist dynamic schemes using Mongo ($addToSet / $pullAll) and refresh in-memory state after updates. Replace manual context checks with slices.Contains and add tests for dynamic schemes and related helpers. * feat: extend token interface for dynamic permissions * feat: implement method+path matching with virtual std ServeMux * feat: manifest ingestion with fine grained permissions * feat: repopulate service api manifest during startup * feat: proxy manifest to action matching (WIP) * feat: service proxying with new permission validation * feat: role management and service management with dynamic permissions * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * fix: return error if created permission is empry string * ref: remove manifest fields unnused on permission flow * ref: re-use list permissions route for dynamic permissions as well * test: adjust match on manifest * chore: newer routes should be under 1.31 path version * ref: remove duplicated field operationName * ref: format * test: integratoin 1 * test: integration tests for fine grained service permissions * feat: use old endpoints to add/remove dynamic permissions to roles * test: use tsuru cli for permission handling on integration * test: run all integratoin tests * ref: fix linting errors * chore: add instance proxy to check-handlers * test: fix failing test missing global ctx on action contexts * Simplify token usage removing duplicated code * Simplify token usage removing duplicated code[2] * Simplify dynamic permissions removing in-memory registry Dynamic permission schemes are now pure values derived from the permission name, and the service manifests stored in the database are the single source of truth for which actions exist. This removes the stateful dynamicRegistry, its startup rebuild (RepopulateDynamicPermissions) and all register/unregister/rollback synchronization on manifest ingest. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * Drop unused method * chore: remove spec files * Drop unused method[2] * ref: move new typing to types package and adjust usage * ref: extract permission listing into method * ref: lint and fmt * fix: typing issue on func impl * fix: "service-action" should not be a valid dynamic permission name * test: integration with two services and same actions * simplify code * refactor: validate manifest instead of normalizing it Replace normalizeManifest with validateManifest so ingesting a manifest no longer mutates the caller's input. Validation now checks operations in place (method casing, path patterns, duplicate actions/routes) without building a normalized copy. Drop the LegacyEnabledAt field and its timestamp bookkeeping, which was only needed to carry normalization state across updates. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * refactor: make manifest matcher stateless Remove the global manifestMatchStates sync.Map and the per-manifest manifestMatchState cache. compiledMatcher now builds the ServeMux and action lookup fresh on each call, dropping the shared mutable state keyed by manifest pointer. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * refactor: require uppercase manifest method instead of normalizing Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * fix: address review comments on fine-grained service permissions - manifestGrantConflicts now detects orphaned ancestor-level dynamic grants (e.g. service-action.<svc>.rules or service-action.<svc>) by checking whether each grant still covers any action kept by the next manifest, instead of only exact-matching removed action names - gate integration flow skip logging behind the verbose env setting - add missing "team" requirement to the serviceBind integration flow so it is skipped (not broken) when TSURU_INTEGRATION_TEAM is unset Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * feat: do not use force to change service manifest orphaned perms * chore: bump vulnerable dependencies --------- Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Co-authored-by: Wilson Júnior <wilsonpjunior@gmail.com> Co-authored-by: Claude Fable 5 <noreply@anthropic.com> Co-authored-by: Paulo Sousa <paulo.sousa@corp.globo.com> | 1 个月前 | |
misc: check-license with opts for first year or all years | 9 年前 | |
misc/fpm: add option to disable pleaserun on postinst | 7 年前 | |
travis: add goreleaser and fpm support | 9 年前 | |
chore(deps): upgrade containerd v1 → v2 (#2892) * chore(deps): upgrade containerd v1 → v2 Replaces github.com/containerd/containerd v1.7.33 with github.com/containerd/containerd/v2 v2.3.3. The only change in source code is the import path in registry/registry.go; all consumed symbols (TokenOptions, ParseAuthHeader, FetchToken, etc.) are unchanged between the two major versions. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * There no IGNORED_VULNS no more --------- Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> | 1 个月前 | |
Simplify ports on tsuru.yaml (#2812) * Simplify ports on tsuru.yaml * Fix lint * Expose Target port to let the user aware which port the service is using on their containers * Add missing field on api.yaml * Rename fields and add warning for future developers * Add tests * Working on integration tests * Add target_port * Attempt to use one port * Attempt to debug multi-ports * Add target_port with bson property * Add first test of internal addresses * Add first test of internal addresses[2] * Add first test of internal addresses[3] * debug * Simplify exposition of TargetPort field * Use port.TargetPort.IntValue() * Simplify tests * Simplify tests[2] | 8 个月前 | |
chore(compose): mininal setup to run Tsuru by Docker Compose (#2641) | 3 年前 | |
chore(ci): update OpenAPI specs on SwaggerHub | 3 年前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 5 年前 | ||
| 11 个月前 | ||
| 8 年前 | ||
| 9 年前 | ||
| 4 个月前 | ||
| 1 个月前 | ||
| 9 年前 | ||
| 7 年前 | ||
| 9 年前 | ||
| 1 个月前 | ||
| 8 个月前 | ||
| 3 年前 | ||
| 3 年前 |