summaryrefslogtreecommitdiffstats
path: root/controller-server
Commit message (Expand)AuthorAgeFilesLines
* Doc updatesJon Marius Venstad2019-03-282-3/+10
* Update PathGroup tests to reflect nice property: no group overlap!Jon Marius Venstad2019-03-281-33/+30
* Verify tenant admins can restart applicationsJon Marius Venstad2019-03-281-0/+5
* More splits, and new roles, with inheritance, and renamingJon Marius Venstad2019-03-286-103/+158
* Move cost/v1 to classifiedInfo path groupJon Marius Venstad2019-03-281-1/+1
* Add some TODOs and fix a path groupJon Marius Venstad2019-03-283-3/+3
* Reinstate dev access for tenant adminsJon Marius Venstad2019-03-281-1/+2
* Define new rolesJon Marius Venstad2019-03-282-7/+35
* Reorder path groups and split into smaller policies, grouped in rolesJon Marius Venstad2019-03-283-61/+113
* Respond on athenz/v1/ with resourcesJon Marius Venstad2019-03-283-5/+21
* Just properties, of courseJon Marius Venstad2019-03-281-2/+2
* Move OpsDB property listing to athenz API (I know, I know ...)Jon Marius Venstad2019-03-2810-57/+41
* Remove tenant-pipeline API path (and clean up after athensDomains)Jon Marius Venstad2019-03-286-50/+7
* Move deployment/v1 to operator path group (it's only read, and not in public)Jon Marius Venstad2019-03-281-6/+6
* Split ControllerAuthorizationFilterTest in resolver and filter partsJon Marius Venstad2019-03-284-131/+159
* Catch and return error messages, as per super class doc (more)Jon Marius Venstad2019-03-282-7/+9
* Move AthenzRoleResolver to upper levelJon Marius Venstad2019-03-284-122/+122
* Move path to Resolver.membership(...) signature (for now)Jon Marius Venstad2019-03-282-7/+8
* Simplify getting context limitations in Athenz resolverJon Marius Venstad2019-03-281-27/+12
* Extract common pattern in RoleMembership.BuilderWithRoleJon Marius Venstad2019-03-283-14/+11
* Change API for building RoleMemberships to reflect the single-system propertyJon Marius Venstad2019-03-284-51/+105
* Ensure RoleMemberships are created only for one system at a timeJon Marius Venstad2019-03-282-7/+10
* Make explicit and verify what context should be extracted for each pathJon Marius Venstad2019-03-283-19/+76
* Update test for user APIJon Marius Venstad2019-03-281-1/+1
* Add userManagement path groupJon Marius Venstad2019-03-282-4/+6
* Allow access to new application pathsJon Marius Venstad2019-03-281-1/+1
* Merge pull request #8917 from vespa-engine/mpolden/remove-unused-log-srv-urlJon Marius Venstad2019-03-266-34/+10
|\
| * Remove unused getLogServerUriMartin Polden2019-03-264-25/+0
| * Sort by cloud *and* versionMartin Polden2019-03-261-6/+6
| * Avoid unnecessary reading of all applications from ZKMartin Polden2019-03-261-3/+4
* | Add statuspage paths, and fix index out of bounds in testJon Marius Venstad2019-03-263-3/+8
* | Allow read access to dashboard, and avoid out of bounds in PathJon Marius Venstad2019-03-262-1/+7
* | Merge pull request #8912 from vespa-engine/freva/use-vip-in-awsValerij Fredriksen2019-03-261-1/+1
|\ \
| * | Use VIP in AWSValerij Fredriksen2019-03-261-1/+1
* | | Update expected responseJon Marius Venstad2019-03-261-1/+1
* | | Correct test nameJon Marius Venstad2019-03-261-1/+1
* | | Add skeleton handler and testJon Marius Venstad2019-03-263-0/+113
* | | Move athenz api to separate packageJon Marius Venstad2019-03-263-4/+3
| |/ |/|
* | Merge pull request #8874 from vespa-engine/mpolden/roles-and-policiesJon Marius Venstad2019-03-2615-182/+782
|\ \
| * | Return error messages, instead of throwing, as per superclass docJon Marius Venstad2019-03-261-6/+9
| * | Short-circuit when everyone is authorized for the requestJon Marius Venstad2019-03-261-0/+5
| * | No principal when authorization filter is run is an errorJon Marius Venstad2019-03-263-6/+8
| * | Update RoleMembershipTest to reflect changesJon Marius Venstad2019-03-261-3/+2
| * | Remove unnecessary declaration of tenant read privilegesJon Marius Venstad2019-03-261-4/+1
| * | Include all roles principal has in returned RoleMembershipJon Marius Venstad2019-03-261-7/+10
| * | Test that build service can read application data for compile versionJon Marius Venstad2019-03-261-0/+6
| * | Move Principal to RoleResolver.membership signatureJon Marius Venstad2019-03-263-22/+34
| * | Ensure path has correct state when evaluating contextJon Marius Venstad2019-03-251-4/+7
| * | Specify prod for rotation overrisdes to avoid mutiple matches for tenant path...Jon Marius Venstad2019-03-251-1/+1
| * | Ensure matches are unique for each path groupJon Marius Venstad2019-03-252-17/+51