| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
Drop old stuff (#2618) * Drop docker provisioner * Drop healer * Drop iaas * Remove unused function * Drop NodeProvisioner interface * Remove unused functions * Fix lint * Remove unused tests * Drop NodeContainers * Remove unused function * Remove unused tests * Remove unused permissions * Fix tests * Remove unused permissions * Fix test TestRoleAddPermissionsInvalid * Fix test TestAddPermissionsToARolePermissionNotAllowed * Drop app sleep support * Fix test TestListFilteringByStatuses * Set kubernetes as default provisioner * Drop unused test * Remove unused interfaces * Remove unused interfaces[2] | 3 年前 | |
Tsuru healthcheck info json (#2893) * feat: app info now returns healthcheck/startupcheck * ref: simplify process merging * feat: use process merging and probe dissasembling * test: regression test on tsuru app info with integration tests * fix: should ignore when wrongly created deployment with liveness probe exists but with no readines probes * test: adjust get raw app info with curl to see healthcheck data | 30 天前 | |
Propagate email of tsuru team token to Services (#2833) * Writing draft * add tests | 7 个月前 | |
move types/bind/binder.go to types package | 1 年前 | |
broker,service,team,quota: propagate context | 5 年前 | |
Refactor/remove unnused queue iaas code (#2810) * refactor: remove unnused code on queues, IaaS and nodes * refactor: yamlfmt | 8 个月前 | |
feat/tags for jobs (#2781) * feat: tags for jobs * test: tags for jobs * chore: review suggestions | 10 个月前 | |
Migrate App to types part 3 (#2701) | 1 年前 | |
Set contextType for certissuer perms | 1 年前 | |
refactor: remove unnused definitions (#2818) * refactor: remove unnused definitions * fix: do not remove autogenerated code | 7 个月前 | |
Migrate App to types part 3 (#2701) | 1 年前 | |
Feat - Multiple App Healthchecks (#2741) * feat: add new tsuru.yaml format * feat: use new yaml data model if processes list is available * ref: remove unnused healthcheck arguments * test: new check for processes on yaml and remove tests on old hc validations * test: kubernetes build for multi-healthcheck apps * ref: avoid shadowing variables when dealing with healthcheck data * chore: warn user about Procfile and global healthcheck deprecation | 1 年前 | |
Feature/service fine grained permissions (#2878) * chore: add task detail * feat: dynamic permission registry * feat(role): add dynamic permission support Introduce DynamicSchemeNames on Role and implement dynamic permission management: AddDynamicPermissions, RemoveDynamicPermissions and DynamicPermissionsFor. Persist dynamic schemes using Mongo ($addToSet / $pullAll) and refresh in-memory state after updates. Replace manual context checks with slices.Contains and add tests for dynamic schemes and related helpers. * feat: extend token interface for dynamic permissions * feat: implement method+path matching with virtual std ServeMux * feat: manifest ingestion with fine grained permissions * feat: repopulate service api manifest during startup * feat: proxy manifest to action matching (WIP) * feat: service proxying with new permission validation * feat: role management and service management with dynamic permissions * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * fix: return error if created permission is empry string * ref: remove manifest fields unnused on permission flow * ref: re-use list permissions route for dynamic permissions as well * test: adjust match on manifest * chore: newer routes should be under 1.31 path version * ref: remove duplicated field operationName * ref: format * test: integratoin 1 * test: integration tests for fine grained service permissions * feat: use old endpoints to add/remove dynamic permissions to roles * test: use tsuru cli for permission handling on integration * test: run all integratoin tests * ref: fix linting errors * chore: add instance proxy to check-handlers * test: fix failing test missing global ctx on action contexts * Simplify token usage removing duplicated code * Simplify token usage removing duplicated code[2] * Simplify dynamic permissions removing in-memory registry Dynamic permission schemes are now pure values derived from the permission name, and the service manifests stored in the database are the single source of truth for which actions exist. This removes the stateful dynamicRegistry, its startup rebuild (RepopulateDynamicPermissions) and all register/unregister/rollback synchronization on manifest ingest. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * Drop unused method * chore: remove spec files * Drop unused method[2] * ref: move new typing to types package and adjust usage * ref: extract permission listing into method * ref: lint and fmt * fix: typing issue on func impl * fix: "service-action" should not be a valid dynamic permission name * test: integration with two services and same actions * simplify code * refactor: validate manifest instead of normalizing it Replace normalizeManifest with validateManifest so ingesting a manifest no longer mutates the caller's input. Validation now checks operations in place (method casing, path patterns, duplicate actions/routes) without building a normalized copy. Drop the LegacyEnabledAt field and its timestamp bookkeeping, which was only needed to carry normalization state across updates. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * refactor: make manifest matcher stateless Remove the global manifestMatchStates sync.Map and the per-manifest manifestMatchState cache. compiledMatcher now builds the ServeMux and action lookup fresh on each call, dropping the shared mutable state keyed by manifest pointer. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * refactor: require uppercase manifest method instead of normalizing Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * fix: address review comments on fine-grained service permissions - manifestGrantConflicts now detects orphaned ancestor-level dynamic grants (e.g. service-action.<svc>.rules or service-action.<svc>) by checking whether each grant still covers any action kept by the next manifest, instead of only exact-matching removed action names - gate integration flow skip logging behind the verbose env setting - add missing "team" requirement to the serviceBind integration flow so it is skipped (not broken) when TSURU_INTEGRATION_TEAM is unset Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * feat: do not use force to change service manifest orphaned perms * chore: bump vulnerable dependencies --------- Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Co-authored-by: Wilson Júnior <wilsonpjunior@gmail.com> Co-authored-by: Claude Fable 5 <noreply@anthropic.com> Co-authored-by: Paulo Sousa <paulo.sousa@corp.globo.com> | 1 个月前 | |
tag validator service (#2670) * Add first draft to tag validation server * initialize noop tag service * Fix lint * Add support to call tag service via GRPC * Add tests for validation of apps and services | 2 年前 | |
Migrate MGO to Official Mongo Driver - part 1 (#2698) * working to migrate to new mongo driver * Change read of team tokens to new driver * Read plan uses new mongodb driver * Read app cache uses new mongodb driver * Reset storagev2 connection on tests * Read webhooks now uses new mongodb driver * Read tracked instances now uses new mongodb driver * Read quota now uses new mongodb driver * Read app versions now uses new mongodb driver * Read auth groups now uses new mongodb driver * Reset storagev2 connection on tests | 2 年前 | |
fix: add missing mock file | 5 年前 |