Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[DRAFT] Add a base setup for resource access evaluation and adds a sample plugin #10

Draft
wants to merge 66 commits into
base: main
Choose a base branch
from
Draft

[DRAFT] Add a base setup for resource access evaluation and adds a sample plugin #10

wants to merge 66 commits into from

Conversation

DarshitChanpura
Copy link
Owner

@DarshitChanpura DarshitChanpura commented Aug 30, 2024 •
edited
Loading

@DarshitChanpura
Copy link
Owner Author 

[2024-08-30T16:13:37,401][INFO ][o.o.s.f.SecurityFilter   ] [smoketestnode] <NONE> indices are made immutable.
[2024-08-30T16:13:37,502][INFO ][o.o.a.r.ResourceService  ] [smoketestnode] Security plugin enabled: Using OpenSearchSecurityPlugin
[2024-08-30T16:13:37,508][INFO ][o.o.t.NettyAllocator     ] [smoketestnode] creating NettyAllocator with the following configs: [name=unpooled, suggested_max_allocation_size=256kb, factors={opensearch.unsafe.use_unpooled_allocator=null, g1gc_enabled=true, g1gc_region_size=1mb, heap_size=1gb}]
[2024-08-30T16:13:37,512][INFO ][o.o.s.s.t.SSLConfig      ] [smoketestnode] SSL dual mode is disabled

security plugin is recognized correctly.

@DarshitChanpura DarshitChanpura mentioned this pull request Aug 30, 2024
Draft
@DarshitChanpura DarshitChanpura changed the base branch from main to add-issue-labels-to-PRs September 6, 2024 17:22
@DarshitChanpura DarshitChanpura changed the base branch from add-issue-labels-to-PRs to main September 6, 2024 17:22
@DarshitChanpura DarshitChanpura changed the title [DRAFT] Add a base setup for resource access evaluation [DRAFT] Add a base setup for resource access evaluation and adds a sample plugin Sep 6, 2024
cwperks and others added 21 commits November 20, 2024 08:39
@cwperks
Explicitly create index before ingesting document in ComplianceAuditl…
deb9c43 
…ogTest.testWriteLogDiffsEnabledAndLogRequestBodyDisabled (opensearch-project#4919)

Signed-off-by: Craig Perkins <[email protected]>
@reta
Update Gradle to 8.11 (opensearch-project#4920)
49bc80f 
Signed-off-by: Andriy Redko <[email protected]>
@reta
Update Gradle to 8.11.1 (opensearch-project#4924)
9dfd5a0 
Signed-off-by: Andriy Redko <[email protected]>
@DarshitChanpura
Add a base setup for resource access evaluation
831dca3 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Adds handler and other access management components for resource sharing
1c65eff 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Adds sample resource plugin
118cb07 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Removes node_modules entry from gitingore
c41b67d 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Handles changes related to scope
45d4fa5 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Updates sample plugin to implement a custom scope
ae2464d 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Fixes Checkstyle and spotless issues
aea2253 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Fixes initialization error
1e17dc0 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Renames sample resource plugin and adds a logger statement
84746e8 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Changes package name for sample plugin
83e4da0 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Re-organizes and renames sample plugin files
4b9b9b1 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Updates method references to conform to core
81216f1 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Fixes compile errors
1e33dad 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Fixes some names and method implementations
a671cc1 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Adds few concrete method implementations in security plugin
47b73da 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Adds capability to introduce index listeners for all resource plugins
8942a80 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Removes sampleplugin to be added in a separate PR
2b06603 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Updates settings.gradle
6f42bf1 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Fixes imports
45b002e 
Signed-off-by: Darshit Chanpura <[email protected]>
@dependabot
Bump Wandalen/wretry.action from 3.7.2 to 3.7.3 (opensearch-project#4931
6a16fdb 
)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
DarshitChanpura and others added 7 commits December 5, 2024 17:58
@DarshitChanpura
Convert sets to lists
0fe9779 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Explicitly casts painless entries to set to avoid duplicates
6d7f4c0 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Fixes revoke access script
9d4ca1e 
Signed-off-by: Darshit Chanpura <[email protected]>
@cwperks
Ensure no active threads in any threadpool for tests in the integrati…
7ae045c 
…onTest package (opensearch-project#4943)

Signed-off-by: Craig Perkins <[email protected]>
@cwperks
Add release notes for 1.3.20 release (opensearch-project#4953)
d31b188 
Signed-off-by: Craig Perkins <[email protected]>
@cwperks
Change log level for log line in OBO Authenticator if OBO is disabled (…
a1d4408 
…opensearch-project#4952)

Signed-off-by: Craig Perkins <[email protected]>
@DarshitChanpura
Fixes revoke script to handle duplicates
b4b22d6 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura DarshitChanpura force-pushed the resource-access-control branch from b10316e to b4b22d6 Compare December 6, 2024 20:11
DarshitChanpura and others added 22 commits December 7, 2024 00:47
@DarshitChanpura
Updates logger statement
e87bb80 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Adds validation for resource ownership when granting and revoking access
5ad813b 
Signed-off-by: Darshit Chanpura <[email protected]>
@dependabot
Bump org.checkerframework:checker-qual from 3.48.2 to 3.48.3 (opensea…
0edba23 
…rch-project#4958)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump com.carrotsearch.randomizedtesting:randomizedtesting-runner from…
47ee2cf 
… 2.8.1 to 2.8.2 (opensearch-project#4959)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump org.eclipse.platform:org.eclipse.core.runtime from 3.31.100 to 3…
719c659 
….32.0 (opensearch-project#4960)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @reta
Bump org.eclipse.platform:org.eclipse.equinox.common from 3.19.100 to…
3c7404f 
… 3.19.200 (opensearch-project#4957)

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Andriy Redko <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Andriy Redko <[email protected]>
@DarshitChanpura
Adds super-admin bypass
c08a992 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Updates method names and adds missing java doc
8e3d41c 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Updates methods to return actual resources instead of resource ids
cabbcd6 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Stash context to fetch resources from a system index
dc964ac 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Optimize call to fetch resources
cc973c6 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Updates javadoc
3ce3d92 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Adds input validation
428e11e 
Signed-off-by: Darshit Chanpura <[email protected]>
@dependabot
Bump org.apache.commons:commons-text from 1.12.0 to 1.13.0 (opensearc…
3a6dd40 
…h-project#4969)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump com.google.googlejavaformat:google-java-format from 1.25.0 to 1.…
79a3299 
…25.2 (opensearch-project#4970)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@shikharj05
Refactor SafeSerializationUtils for better performance (opensearch-pr…
2f870c7 
…oject#4973)

Signed-off-by: shikharj05 <[email protected]>
@DarshitChanpura
Adds auditlog capability and conform to changes in core
a55ac22 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Conforms to type bounding change introduced in core
1c62d36 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Merge remote-tracking branch 'upstream/main' into resource-access-con…
6a23f46 
…trol
@DarshitChanpura
Stashes context while fetching resource sharing record
c24323c 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Fixes accessDeclaredMembers error caused in AuditConfig class
f514859 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Changes log levels and improves log statements
193e846 
Signed-off-by: Darshit Chanpura <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
6 participants
@DarshitChanpura @cwperks @reta @willyborankin @terryquigleysas @shikharj05