Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

acl: adding Roles to Tokens #5514

Merged
merged 2 commits into from
Apr 15, 2019
Merged

acl: adding Roles to Tokens #5514

merged 2 commits into from
Apr 15, 2019

Commits on Apr 15, 2019

  1. acl: adding Roles to Tokens 

    Roles are named and can express the same bundle of permissions that can
currently be assigned to a Token (lists of Policies and Service
Identities). The difference with a Role is that it not itself a bearer
token, but just another entity that can be tied to a Token.

This lets an operator potentially curate a set of smaller reusable
Policies and compose them together into reusable Roles, rather than
always exploding that same list of Policies on any Token that needs
similar permissions.

This also refactors the acl replication code to be semi-generic to avoid
3x copypasta.
    @rboyer
    rboyer committed Apr 15, 2019
    Configuration menu
    Copy the full SHA
    de43694 View commit details
    Browse the repository at this point in the history

  2. make the role name regex less restrictive

    @rboyer
    rboyer committed Apr 15, 2019
    Configuration menu
    Copy the full SHA
    d08f16d View commit details
    Browse the repository at this point in the history