Skip to content

[DRAFT] Add a base setup for resource access evaluation and adds a sample plugin#10

Closed
DarshitChanpura wants to merge 46 commits intomainfrom
resource-access-control
Closed

[DRAFT] Add a base setup for resource access evaluation and adds a sample plugin#10
DarshitChanpura wants to merge 46 commits intomainfrom
resource-access-control

Conversation

@DarshitChanpura
Copy link
Owner

@DarshitChanpura DarshitChanpura commented Aug 30, 2024 •
edited
Loading

@DarshitChanpura
Copy link
Owner Author

DarshitChanpura commented Aug 30, 2024 

[2024-08-30T16:13:37,401][INFO ][o.o.s.f.SecurityFilter   ] [smoketestnode] <NONE> indices are made immutable.
[2024-08-30T16:13:37,502][INFO ][o.o.a.r.ResourceService  ] [smoketestnode] Security plugin enabled: Using OpenSearchSecurityPlugin
[2024-08-30T16:13:37,508][INFO ][o.o.t.NettyAllocator     ] [smoketestnode] creating NettyAllocator with the following configs: [name=unpooled, suggested_max_allocation_size=256kb, factors={opensearch.unsafe.use_unpooled_allocator=null, g1gc_enabled=true, g1gc_region_size=1mb, heap_size=1gb}]
[2024-08-30T16:13:37,512][INFO ][o.o.s.s.t.SSLConfig      ] [smoketestnode] SSL dual mode is disabled

security plugin is recognized correctly.

@DarshitChanpura DarshitChanpura mentioned this pull request Aug 30, 2024
Draft
@DarshitChanpura DarshitChanpura changed the base branch from main to add-issue-labels-to-PRs September 6, 2024 17:22
@DarshitChanpura DarshitChanpura changed the base branch from add-issue-labels-to-PRs to main September 6, 2024 17:22
@DarshitChanpura DarshitChanpura changed the title [DRAFT] Add a base setup for resource access evaluation [DRAFT] Add a base setup for resource access evaluation and adds a sample plugin Sep 6, 2024
@DarshitChanpura
Add a base setup for resource access evaluation
831dca3 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Adds handler and other access management components for resource sharing
1c65eff 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Adds sample resource plugin
118cb07 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Removes node_modules entry from gitingore
c41b67d 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Handles changes related to scope
45d4fa5 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Updates sample plugin to implement a custom scope
ae2464d 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Fixes Checkstyle and spotless issues
aea2253 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Fixes initialization error
1e17dc0 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Renames sample resource plugin and adds a logger statement
84746e8 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Changes package name for sample plugin
83e4da0 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Re-organizes and renames sample plugin files
4b9b9b1 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Updates method references to conform to core
81216f1 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Fixes compile errors
1e33dad 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Fixes some names and method implementations
a671cc1 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Adds few concrete method implementations in security plugin
47b73da 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Adds capability to introduce index listeners for all resource plugins
8942a80 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Removes sampleplugin to be added in a separate PR
2b06603 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Updates settings.gradle
6f42bf1 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Fixes imports
45b002e 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Adds concrete implementations of remainder methods
a30be57 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Fixes spotless errors
58003f6 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Fixes log statement
078a976 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Renames ResourceManagement repository and add keyword to search query…
8e44cf3 
… term

Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Fixes delete method
16a0ba6 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Fixes updateByQuery painless script
ac53c8f 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Updates revoke handler to use painless script
9e6ae85 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Convert sets to lists
0fe9779 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Explicitly casts painless entries to set to avoid duplicates
6d7f4c0 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Fixes revoke access script
9d4ca1e 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Fixes revoke script to handle duplicates
b4b22d6 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura DarshitChanpura force-pushed the resource-access-control branch from b10316e to b4b22d6 Compare December 6, 2024 20:11
@DarshitChanpura
Updates logger statement
e87bb80 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Adds validation for resource ownership when granting and revoking access
5ad813b 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Adds super-admin bypass
c08a992 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Updates method names and adds missing java doc
8e3d41c 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Updates methods to return actual resources instead of resource ids
cabbcd6 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Stash context to fetch resources from a system index
dc964ac 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Optimize call to fetch resources
cc973c6 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Updates javadoc
3ce3d92 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Adds input validation
428e11e 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Adds auditlog capability and conform to changes in core
a55ac22 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Conforms to type bounding change introduced in core
1c62d36 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Merge remote-tracking branch 'upstream/main' into resource-access-con…
6a23f46 
…trol
@DarshitChanpura
Stashes context while fetching resource sharing record
c24323c 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Fixes accessDeclaredMembers error caused in AuditConfig class
f514859 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Changes log levels and improves log statements
193e846 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
@DarshitChanpura
Bring user notion to security plugin
13fdb81 
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@DarshitChanpura