Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[DRAFT] Add a base setup for resource access evaluation and adds a sample plugin #10

Draft
wants to merge 42 commits into
base: main
Choose a base branch
from
Draft

[DRAFT] Add a base setup for resource access evaluation and adds a sample plugin #10

wants to merge 42 commits into from

Conversation

DarshitChanpura
Copy link
Owner

@DarshitChanpura DarshitChanpura commented Aug 30, 2024 •
edited
Loading

@DarshitChanpura
Copy link
Owner Author 

[2024-08-30T16:13:37,401][INFO ][o.o.s.f.SecurityFilter   ] [smoketestnode] <NONE> indices are made immutable.
[2024-08-30T16:13:37,502][INFO ][o.o.a.r.ResourceService  ] [smoketestnode] Security plugin enabled: Using OpenSearchSecurityPlugin
[2024-08-30T16:13:37,508][INFO ][o.o.t.NettyAllocator     ] [smoketestnode] creating NettyAllocator with the following configs: [name=unpooled, suggested_max_allocation_size=256kb, factors={opensearch.unsafe.use_unpooled_allocator=null, g1gc_enabled=true, g1gc_region_size=1mb, heap_size=1gb}]
[2024-08-30T16:13:37,512][INFO ][o.o.s.s.t.SSLConfig      ] [smoketestnode] SSL dual mode is disabled

security plugin is recognized correctly.

@DarshitChanpura DarshitChanpura mentioned this pull request Aug 30, 2024
Draft
@DarshitChanpura DarshitChanpura changed the base branch from main to add-issue-labels-to-PRs September 6, 2024 17:22
@DarshitChanpura DarshitChanpura changed the base branch from add-issue-labels-to-PRs to main September 6, 2024 17:22
@DarshitChanpura DarshitChanpura changed the title [DRAFT] Add a base setup for resource access evaluation [DRAFT] Add a base setup for resource access evaluation and adds a sample plugin Sep 6, 2024
cwperks and others added 21 commits November 20, 2024 08:39
@cwperks
Explicitly create index before ingesting document in ComplianceAuditl…
deb9c43 
…ogTest.testWriteLogDiffsEnabledAndLogRequestBodyDisabled (opensearch-project#4919)

Signed-off-by: Craig Perkins <[email protected]>
@reta
Update Gradle to 8.11 (opensearch-project#4920)
49bc80f 
Signed-off-by: Andriy Redko <[email protected]>
@reta
Update Gradle to 8.11.1 (opensearch-project#4924)
9dfd5a0 
Signed-off-by: Andriy Redko <[email protected]>
@DarshitChanpura
Add a base setup for resource access evaluation
831dca3 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Adds handler and other access management components for resource sharing
1c65eff 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Adds sample resource plugin
118cb07 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Removes node_modules entry from gitingore
c41b67d 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Handles changes related to scope
45d4fa5 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Updates sample plugin to implement a custom scope
ae2464d 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Fixes Checkstyle and spotless issues
aea2253 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Fixes initialization error
1e17dc0 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Renames sample resource plugin and adds a logger statement
84746e8 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Changes package name for sample plugin
83e4da0 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Re-organizes and renames sample plugin files
4b9b9b1 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Updates method references to conform to core
81216f1 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Fixes compile errors
1e33dad 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Fixes some names and method implementations
a671cc1 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Adds few concrete method implementations in security plugin
47b73da 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Adds capability to introduce index listeners for all resource plugins
8942a80 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Removes sampleplugin to be added in a separate PR
2b06603 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Updates settings.gradle
6f42bf1 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Fixes imports
45b002e 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Fixes spotless errors
58003f6 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Fixes log statement
078a976 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Renames ResourceManagement repository and add keyword to search query…
8e44cf3 
… term

Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Fixes delete method
16a0ba6 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Fixes updateByQuery painless script
ac53c8f 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Updates revoke handler to use painless script
9e6ae85 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Convert sets to lists
0fe9779 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Explicitly casts painless entries to set to avoid duplicates
6d7f4c0 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Fixes revoke access script
9d4ca1e 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Fixes revoke script to handle duplicates
b4b22d6 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura DarshitChanpura force-pushed the resource-access-control branch from b10316e to b4b22d6 Compare December 6, 2024 20:11
@DarshitChanpura
Updates logger statement
e87bb80 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Adds validation for resource ownership when granting and revoking access
5ad813b 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Adds super-admin bypass
c08a992 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Updates method names and adds missing java doc
8e3d41c 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Updates methods to return actual resources instead of resource ids
cabbcd6 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Stash context to fetch resources from a system index
dc964ac 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Optimize call to fetch resources
cc973c6 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Updates javadoc
3ce3d92 
Signed-off-by: Darshit Chanpura <[email protected]>
@DarshitChanpura
Adds input validation
428e11e 
Signed-off-by: Darshit Chanpura <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@DarshitChanpura @cwperks @reta