summaryrefslogtreecommitdiffstats
path: root/controller-server
Commit message (Expand)AuthorAgeFilesLines
* Correct test nameJon Marius Venstad2019-03-261-1/+1
* Add skeleton handler and testJon Marius Venstad2019-03-263-0/+113
* Move athenz api to separate packageJon Marius Venstad2019-03-263-4/+3
* Merge pull request #8874 from vespa-engine/mpolden/roles-and-policiesJon Marius Venstad2019-03-2615-182/+782
|\
| * Return error messages, instead of throwing, as per superclass docJon Marius Venstad2019-03-261-6/+9
| * Short-circuit when everyone is authorized for the requestJon Marius Venstad2019-03-261-0/+5
| * No principal when authorization filter is run is an errorJon Marius Venstad2019-03-263-6/+8
| * Update RoleMembershipTest to reflect changesJon Marius Venstad2019-03-261-3/+2
| * Remove unnecessary declaration of tenant read privilegesJon Marius Venstad2019-03-261-4/+1
| * Include all roles principal has in returned RoleMembershipJon Marius Venstad2019-03-261-7/+10
| * Test that build service can read application data for compile versionJon Marius Venstad2019-03-261-0/+6
| * Move Principal to RoleResolver.membership signatureJon Marius Venstad2019-03-263-22/+34
| * Ensure path has correct state when evaluating contextJon Marius Venstad2019-03-251-4/+7
| * Specify prod for rotation overrisdes to avoid mutiple matches for tenant path...Jon Marius Venstad2019-03-251-1/+1
| * Ensure matches are unique for each path groupJon Marius Venstad2019-03-252-17/+51
| * Remove path which has movedJon Marius Venstad2019-03-251-1/+0
| * Fix somewhat funny typo resulting in very strict access controlJon Marius Venstad2019-03-252-1/+6
| * Define seperate group for /athenz/v1/Martin Polden2019-03-252-3/+9
| * Move /zone/v1/ to deploymentStatusMartin Polden2019-03-251-8/+5
| * Rename deployment -> deploymentStatusMartin Polden2019-03-252-3/+3
| * Rename allow -> allowsMartin Polden2019-03-254-30/+30
| * Verify context for build service pathsMartin Polden2019-03-225-51/+63
| * Ensure that all path spec sets are disjointMartin Polden2019-03-221-0/+16
| * Use roles for authorizationMartin Polden2019-03-225-174/+128
| * Define roles and policiesMartin Polden2019-03-228-0/+547
* | Revert "Remove unused job queue paths in ZK"Martin Polden2019-03-261-3/+0
* | Remove unused job queue paths in ZKMartin Polden2019-03-251-0/+3
* | Merge pull request #8871 from vespa-engine/jvenstad/remove-more-athenz-refere...Martin Polden2019-03-2213-132/+113
|\ \ | |/ |/|
| * Disallow overriding tenant domain on requestsJon Marius Venstad2019-03-226-27/+32
| * Switch over instanceofJon Marius Venstad2019-03-213-26/+33
| * Remove unused methodJon Marius Venstad2019-03-211-6/+0
| * Don't assume request principal is an AthenzPrincipalJon Marius Venstad2019-03-212-33/+30
| * Switch rather than instanceof chainJon Marius Venstad2019-03-211-5/+5
| * Remove AthenzDomain and make Property mandatory in AthenzTenantSpecJon Marius Venstad2019-03-215-12/+8
| * Non-functional changes (doc, imports, etc..)Jon Marius Venstad2019-03-216-25/+7
* | Revert "Revert "Remove /screwdriver/v1""Martin Polden2019-03-2210-227/+1
|/
* Conflicts resolved and remove single-use methodJon Marius Venstad2019-03-213-16/+4
* Rename Claim to Spec, and update some docJon Marius Venstad2019-03-2113-100/+88
* Remove things that were moved to Credentials from TenantClaim and childrenJon Marius Venstad2019-03-218-34/+14
* Remove unused ApplicationClaim and childrenJon Marius Venstad2019-03-218-86/+1
* Rename Claims -> AccessControlRequestsJon Marius Venstad2019-03-214-24/+19
* Update credential docsJon Marius Venstad2019-03-213-12/+13
* Remove cumbersome genericsJon Marius Venstad2019-03-2112-38/+44
* Change signatures to id + spec (for tenant creation) + credentialsJon Marius Venstad2019-03-2122-190/+300
* Renamed permits package to securityJon Marius Venstad2019-03-2111-0/+0
* permit -> claimJon Marius Venstad2019-03-2121-220/+209
* Deal with review commentsJon Marius Venstad2019-03-212-8/+7
* Really removed ManagerJon Marius Venstad2019-03-217-19/+19
* Removed Manager part of AccessControlManager, and renamed fieldJon Marius Venstad2019-03-213-9/+7
* Separate code path for conservative tenant access control updatesJon Marius Venstad2019-03-214-27/+77