-
Notifications
You must be signed in to change notification settings - Fork 10
DO NOT MERGE YET: V2 Changes #41
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
asafc
wants to merge
367
commits into
master
Choose a base branch
from
v2
base: master
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…decars-with-custom-version-suffixes-that Allow building with suffixes that don't appear in the internal version.
Add Sidecar routes for the new rego rules
Add Get User Permissions route
…issions-rebac add resources and resource_types fields to get user permissions
…issions-rebac fix response model to allow resource instance permissions
…load-size-limit Increase OPA_DECISION_LOG_UPLOAD_SIZE_LIMIT to 65536
Colorizer didn't handle color tag being formatted while closing tag static in the format string
Fix query result logging
Raising http.client.HTTPException is a bug because it actually makes the endpoint raise an exception and return 500 instead of the raised error
1. This wasn't even working - it was wrapping _is_allowed with OPAL's fail_silently function which fallbacks on aiohttp.ClientError, _is_allowed is catching aiohttp.ClientError internally.
2. We don't want to return {"allow"=False} on errors, we want to return the error
Fix OPA timeout (and other OPA client errors) behavior
…enants from the pdp
…ith-production-deployment
API: Oops, bug fix so bad OPA status codes will raise an error
Introduce unit tests
Release/v0.7.0
* Added data update callbacks config * Fixed comment
…hecks-time-metrics-to-the-docs-with-the-new fix factdb local role assignments filters
* Added ruff * Updated README.md * Removed black from pre-commit * Run ruff format * Run ruff check --fix * Changed setup.py to pathlib * Fixed tests * Fixed state.py * Fixed offline_mode.py * Renamed exceptions * Fixed ruff checks * Fixed (some) mypy errors * Changed to annotated dependencies * Changed to default_factory(dict) * Fixed README.md and setup.py * Fixed header type * Removed extra arg * Added install dev to README.md * Fixed enforcer API
…ermit-opa Include license in building process
…se-for-public-repositories Create LICENSE
…-assignments-backward-compatible backward compatible local role assignment
* update helm chart version * workflow change
* Fixed state file deadlock * Fixed pre-commit
* update pdp api example on ecs * check ecs * final - update our internal pdp
…so (#238) * fix breaking changes in aioresponses 0.7.8 requiring host and port also * Fixed pre-commit --------- Co-authored-by: Dan Yishai <danyi1212@users.noreply.github.com>
* test1 * check with setup Docker step * try2 * try3 * test with local build check * without ref * Update pdp-tester.yml * Added print PDP container logs * Changed API Key variable * Added PDP Tester job to the CI * Changed CD to reuse CI * Changed PDP Tester build version to 'next' * Added branch to reusable workflow call --------- Co-authored-by: Dan Yishai <danyi1212@users.noreply.github.com>
* Added upgrade pip to docker image * Updated OPAL to v0.8.0rc1
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
No description provided.