-
Notifications
You must be signed in to change notification settings - Fork 12
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Multiple Policy Files #231
Commits on Apr 4, 2024
-
Update policy app config & config loader to support multiple policy f…
…iles. Files are merged and the merged policy document is validated after all files are loaded. Added a check to disallow multiple bindings of the same action to the same type. Signed-off-by: Jacob See <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 51f6b49 - Browse repository at this point
Copy the full SHA 51f6b49View commit details -
Signed-off-by: Jacob See <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 5c710f4 - Browse repository at this point
Copy the full SHA 5c710f4View commit details -
Add iapl.md documentation (from IAPL proposal gist), move merge logic…
… to a function on the PolicyDocument itself Signed-off-by: Jacob See <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 02231be - Browse repository at this point
Copy the full SHA 02231beView commit details -
Reformat org file structure to markdown
Signed-off-by: Jacob See <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for e99bb56 - Browse repository at this point
Copy the full SHA e99bb56View commit details
Commits on Apr 5, 2024
-
Instead of accepting a policy config map name and assuming that it co…
…ntains one file called policy.yaml, accept a config map (and mount point for it) and don't set the file by environment variable at all. The list of policy files to be read by permissions-api should instead be set as a list in the configuration file, exactly the same as it is for local development. Signed-off-by: Jacob See <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for cfbbe76 - Browse repository at this point
Copy the full SHA cfbbe76View commit details -
Add example & description of policyConfigMapMountPoint and policyFile…
…s to values.yaml Signed-off-by: Jacob See <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for c2cd259 - Browse repository at this point
Copy the full SHA c2cd259View commit details -
Instead of accepting multiple individual file inputs, just accept a d…
…irectory, from which all files are read and interpreted as policy documents. This change was made because it makes it considerably easier to deploy this app as a subchart of another chart, which deploys the actoal policy configmap to be mounted as a volume Signed-off-by: Jacob See <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for d967658 - Browse repository at this point
Copy the full SHA d967658View commit details -
Remove policy file in root dir - it should only exist in the policies…
… dir now Signed-off-by: Jacob See <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 2d58dd1 - Browse repository at this point
Copy the full SHA 2d58dd1View commit details -
Only accept yml or yaml extensions when scanning for policy files.
Signed-off-by: Jacob See <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 4a968cc - Browse repository at this point
Copy the full SHA 4a968ccView commit details