Merge pull request #12966 from markylaing/oidc-identities-cluster-cac…

…he-refresh Auth: Notify cluster members of new or updated OIDC identities
canonical · Feb 27, 2024 · 6fb3d90 · 6fb3d90
2 parents f83d6f0 + 350469e
commit 6fb3d90
Show file tree

Hide file tree

Showing 6 changed files with 277 additions and 217 deletions.
diff --git a/lxc/storage_volume.go b/lxc/storage_volume.go
@@ -14,7 +14,7 @@ import (
 	"github.com/spf13/cobra"
 	"gopkg.in/yaml.v2"
 
-	lxd "github.com/canonical/lxd/client"
+	"github.com/canonical/lxd/client"
 	"github.com/canonical/lxd/shared"
 	"github.com/canonical/lxd/shared/api"
 	cli "github.com/canonical/lxd/shared/cmd"

diff --git a/lxd/api_internal.go b/lxd/api_internal.go
@@ -62,6 +62,7 @@ var apiInternal = []APIEndpoint{
 	internalShutdownCmd,
 	internalSQLCmd,
 	internalWarningCreateCmd,
+	internalIdentityCacheRefreshCmd,
 }
 
 var internalShutdownCmd = APIEndpoint{
@@ -137,6 +138,12 @@ var internalBGPStateCmd = APIEndpoint{
 	Get: APIEndpointAction{Handler: internalBGPState, AccessHandler: allowPermission(entity.TypeServer, auth.EntitlementCanEdit)},
 }
 
+var internalIdentityCacheRefreshCmd = APIEndpoint{
+	Path: "identity-cache-refresh",
+
+	Post: APIEndpointAction{Handler: internalIdentityCacheRefresh, AccessHandler: allowPermission(entity.TypeServer, auth.EntitlementCanEdit)},
+}
+
 type internalImageOptimizePost struct {
 	Image api.Image `json:"image" yaml:"image"`
 	Pool  string    `json:"pool"  yaml:"pool"`
@@ -1083,3 +1090,9 @@ func internalBGPState(d *Daemon, r *http.Request) response.Response {
 
 	return response.SyncResponse(true, s.BGP.Debug())
 }
+
+func internalIdentityCacheRefresh(d *Daemon, r *http.Request) response.Response {
+	logger.Debug("Received identity cache update notification - refreshing cache")
+	d.State().UpdateIdentityCache()
+	return response.EmptySyncResponse
+}