Commit Graph

181 Commits

Author SHA1 Message Date
Florian Schade
f38a9f4385 Introduce Policies-Service (#5716)
* add policies service
add policies proxy middleware
add policies event service
add policies grpc service
prepare ci and git environments (ci, make, readme, doc)

* add webfinger to the drone conf

* fix docs
remove not used virus scan postprocessing step

* relocate example rego file
implicitly enable and disable proxy and postprocessing policy checking by setting the query.
update configuration descriptions

* move policies
update readme

* use converter func to convert pp environment to actual environment
expose and test custom rego functions
add engine unit tests
add opa unit tests
update policies readme

Co-authored-by: Martin <github@diemattels.at>

* relocate sample policies to the deployments folder
change and document policies service port

* update index.md and small fix

* add health command
add version command
add debug server

---------

Co-authored-by: Martin <github@diemattels.at>
2023-03-14 16:08:22 +01:00
jkoberg
d56565555b introduce userlog service
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2023-02-21 14:25:21 +01:00
jkoberg
c9dfb778a9 sharpen eventhistory service
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2023-02-21 10:51:32 +01:00
Jörn Friedrich Dreyer
2c98d3246c minimal webfinger (#5373)
* initial webfinger stub

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* add webfinger to proxy, return current host

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* some cleanup

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* allow passing multiple rel params

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* introduce interfaces

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* parse oidc auth token

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* add templating, drop chain, use map of relation providers

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* fix ocis url yaml

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* fix typos

Co-authored-by: Dominik Schmidt <dschmidt@owncloud.com>

* switch to userinfo claims

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* readme cleanup

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* add TODO.md with ideas

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* replace subject on authenticated request responses

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* Apply suggestions from code review

Co-authored-by: Martin <github@diemattels.at>

* markdown lint

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* return a 401 when bearer token expired, some more docs

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* Apply suggestions from code review

Co-authored-by: Martin <github@diemattels.at>

* fix docs

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* clarify env var

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* extract handler func

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* use correct service in reflex.conf

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* test relations

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* Update services/webfinger/pkg/config/config.go

---------

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
Co-authored-by: Dominik Schmidt <dschmidt@owncloud.com>
Co-authored-by: Martin <github@diemattels.at>
2023-02-13 11:05:20 +01:00
jkoberg
06f3f5adb3 start pp service in single binary
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2022-12-08 11:49:04 +01:00
David Christofas
3babaf1a4d remove the graph-explorer servier from ocis (#4733) 2022-10-04 15:55:30 +02:00
Ralf Haferkamp
5d121b4bad Do not start auth-bearer service by default
The auth-bearer service is currently not needed by ocis. Reva tookens
for oidc authenticated clients are currently minted via the auth-machine
service.  This commit does not completely remove the service as we shoud
consider to rework the proxy's oidc middleware to use the auth-bearer
service in the future (see #4701)

Fixes: #4692
2022-09-28 12:11:06 +02:00
Willy Kloucek
6154466bbc rename extensions to services (leftover occurences) 2022-08-17 15:36:52 +02:00
jkoberg
f64ea7dc1b make runset a map
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2022-07-21 16:19:36 +02:00
jkoberg
4b8d1acdf4 allow providing list of services not to start
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2022-07-21 15:51:17 +02:00
Willy Kloucek
9f0a31140f Merge pull request #4102 from wkloucek/fix-logging-levels
fix logging levels and go micro default log level
2022-07-11 09:31:19 +02:00
Bishop Clark
155baa83cb Update README.md
adjective order
2022-07-09 12:45:02 -07:00
Willy Kloucek
83bbabac3c remove leftover setMicroLogger from runtime 2022-07-08 07:55:11 +02:00
Ralf Haferkamp
875ad911db Fixup previous commit to avoid using blank imports 2022-07-07 17:16:28 +02:00
Willy Kloucek
33f6ee34fc fix logging levels and go-micro logging format 2022-07-05 13:49:30 +02:00
Christian Richter
f8f1320501 refactor extensions -> services
Signed-off-by: Christian Richter <crichter@owncloud.com>
2022-06-27 14:05:36 +02:00
Ralf Haferkamp
d25aa7b20f Remove "accounts" service 2022-05-11 15:29:34 +02:00
Ralf Haferkamp
5ba1b8f2c1 Remove "glauth" service
The "glauth" service is no longer used. After we switched to
libregraph/idm.
2022-05-11 15:29:34 +02:00
Willy Kloucek
0453dba7a3 remove rpc side of kill and run commands 2022-05-09 13:23:17 +02:00
Jörn Friedrich Dreyer
51e1aa2978 rename users and groups extensions
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-05-05 09:14:27 +00:00
Michael Barz
189987bcbd Bump major version to v2 2022-05-04 14:49:59 +02:00
Jörn Friedrich Dreyer
565548ebce storage-metadata -> storage-system
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-05-04 08:14:13 +00:00
Jörn Friedrich Dreyer
449a0169f6 approvider -> app-provider
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-05-04 06:39:28 +00:00
Willy Kloucek
26a92f2bad add app-registry service 2022-05-03 15:12:35 +02:00
Willy Kloucek
977c4fd9e9 ensure commands for all services 2022-05-03 15:12:34 +02:00
Jörn Friedrich Dreyer
bfc8196ac2 Merge branch 'master' into search
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-05-02 13:43:24 +00:00
Jörn Friedrich Dreyer
0642a5e0ca Align service naming (#3606)
* use configured names as service names in ocis runtime

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* add changelog

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* correct service names for group and storage-shares

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* use correct service names in .drone.star

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* align ocis-pkg/config/config.go

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-05-02 12:44:21 +02:00
André Duffeck
08df2e32d9 Merge remote-tracking branch 'upstream/master' into search 2022-04-29 13:00:01 +02:00
David Christofas
6bd4330103 update reva to include go-chi workaround 2022-04-27 17:12:42 +02:00
Ralf Haferkamp
45f0940071 Turn of "insecure" of built-in IDP
Setup idp to verify the LDAP server certificate. As this certificate
might be generated on startup, this also moved the IDP to the "delayed"
set of services. So it starts after "idm".
2022-04-26 18:59:10 +02:00
Ralf Haferkamp
1a38f3623c switch default config to idm
- The accounts and glauth service are turned off by default
- proxy is switch from "accounts" to "cs3" for the account backend
- The LDAP configuration (graph, idp, storage) of all services now
  points to idm instead of glauth
2022-04-26 18:59:10 +02:00
David Christofas
40320fbb36 start ocdav delayed
Try to prevent concurrent read/write access on a global map in go-chi
2022-04-25 17:45:02 +02:00
David Christofas
60bf000308 make gateway config similar to other services 2022-04-25 15:44:15 +02:00
David Christofas
76a6588d88 make frontend config similar to other services 2022-04-25 15:44:10 +02:00
David Christofas
430e7f6115 make ocdav config similar to other services 2022-04-25 15:44:06 +02:00
David Christofas
f39e354eea make storage shares config similar to other services 2022-04-25 15:44:01 +02:00
David Christofas
f40ec3c934 make storage users config similar to other services 2022-04-25 15:43:56 +02:00
David Christofas
12c14e3135 make storage publiclink config similar to other services 2022-04-25 15:43:52 +02:00
David Christofas
4c6848e6bf make auth machine config similar to other services 2022-04-25 15:43:48 +02:00
David Christofas
d303bb6f55 make storage metadata config similar to other services 2022-04-25 15:43:43 +02:00
David Christofas
5013d71dac make sharing config similar to other services 2022-04-25 15:43:39 +02:00
David Christofas
7c879343e8 make auth bearer config similar to other services 2022-04-25 15:43:35 +02:00
David Christofas
c70a60d7bc make app provider config similar to other services 2022-04-25 15:43:31 +02:00
David Christofas
9e20992c0b make group provider config similar to other services 2022-04-25 15:43:26 +02:00
David Christofas
ed4e9ee866 make user provider config similar to other services 2022-04-25 15:43:23 +02:00
David Christofas
57e4e70888 remove auth basic command to improve config code 2022-04-25 15:43:15 +02:00
Jörn Friedrich Dreyer
190ee68c95 Merge branch 'master' into search 2022-04-22 09:45:06 +00:00
Willy Kloucek
e5b7496c29 switch source for go micro plugins 2022-04-19 09:44:47 +02:00
Jörn Friedrich Dreyer
37f64eb0e8 Merge branch 'master' into search
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-04-14 11:56:26 +00:00
Jörn Friedrich Dreyer
b4017a0451 minimal report handling
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2022-04-13 15:25:32 +00:00