15 Commits (0cce224adb641a3bccec8cee8b38eaf4d0f49327)

Author	SHA1	Message	Date
Jo	40d3b02648	Auth: Separate anonymous settings to its own struct (#97791) ... separate anonymous settings to its own struct	6 months ago
Alexander Zobnin	61d71ec5b1	Zanzana: Handle anonymous users (#97171) ... * add anonymous users to schema * sync anonymous user role * remove unused * fix linter * only add anonymous reconciler if feature is enabled	6 months ago
Karl Persson	718612aabf	Zanzana: Update relation names (#97638) ... * Update relation names to match k8s verbs * Only check namespace if relation is valid * Only list for valid relations	6 months ago
Alexander Zobnin	c8caf787d4	Zanzana: handle service accounts (#97123) ... * add service account to the schema * sync managed permissions for service accounts * sync SA basic roles * sync SA roles * Fix endless loop in reconciler while read openfga	6 months ago
Alexander Zobnin	170e0e1813	Zanzana: List then search implementation (#96705) ... * Zanzana: Search with list * Allow to pass werb into list request * split list search into 2 functions * fix listing resources * remove unused * refactor * remove unused function * Add more logging to reconciler * Fix search for users with access to all resources * fix findFoldersZanzanaList * search for folders as well by default * refactor * use compile for list and search * remove list from client * remove only from client * remove list from interface * run compile once * refactor * refactor * add search tests * fix tests * Fix linter	6 months ago
Karl Persson	e995d4f682	Zanzana: Add setting zanzana reconciliation interval (#96687) ... Add config option under RBAC for zanzana reconciliation interval	6 months ago
Karl Persson	7e442efa9c	Zanzana: sync roles and bindings (#96661) ... * Sync fix and custom roles and team bindings. * Add collector for user role bindings	6 months ago
Karl Persson	1f34096fdf	Zanzana: reconcile basic roles and bindings (#96473) ... * Add reconciler for basic roles * Add reconciler for basic role bindings	6 months ago
Gabriel MABILLE	cc9cdbe82d	Authz: Move extension proto up a layer (#96254) ... * Authz: Move extension proto up a layer * Lint	7 months ago
Karl Persson	9f66843915	Zanzana: use namespace when performing reconciliation (#96205) ... * Special handling for zanzana reconciliation if stack id is configured * remove sync call	7 months ago
Alexander Zobnin	910ec7e7dc	Zanzana: Use separate store for each org (#96015) ... * Move server init into server package * map store name to id * refactor model loading * pass namespace into reconcilers and collectors * refactor * Extend authz server with Read and Write methods * use new read/write in reconciler * implement server side read and write * Sync permissions for every org * handle namespace in check and list * split read and write * provide conditions * Fix client implementation * fix nil conditions * remove unused client code * use lock for store access * move type translators to common package * fix folder collector * fix store creation * remove unused AuthorizationModelId * fix server tests * fix linter	7 months ago
Karl Persson	f0a5b444e3	Zanzana: generic resource only (#96019) ... * Remove collectors * Remove zanzana search check, we need to rewrite that part to the new schema * Only use generic resource schema and cleanup code we don't want to keep / need to re-write	7 months ago
Karl Persson	dfa8f786d2	Zanzana: fix generic schema (#95648) ... * Change schema so that resource checks on a folder walks the tree	7 months ago
Karl Persson	e0163c93c2	Zanzana: reconcile generic schema (#95492) ... * Rename to CheckObject * Implement authz.AccessClient * Move folder tree to reconciler and use new schema * Move shared functionality to common package * Add reconciler for managed permissions and resource translations * Add support for folder resources	7 months ago
Karl Persson	4083b2208e	Zanzana: periodic sync of team members (#94752) ... * Rewrite zanzana collector to fetch all available pages * Register access control as a background service * If zanzana is enabled we run Syncs and start Reconciliation job * Update pkg/services/authz/zanzana/client/client.go Co-authored-by: Alexander Zobnin <alexanderzobnin@gmail.com> * Use server lock when doing performing reconciliation	7 months ago