Skip to content

UserInfoFetcher: ActiveDirectory backend #622

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 23 commits into from
Oct 28, 2024
Merged

UserInfoFetcher: ActiveDirectory backend #622

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
23 commits
Select commit Hold shift + click to select a range
7f7e277
Initial prototype of an AD UIF backend
nightkr Aug 12, 2024
faa1a09
Handle errors
nightkr Aug 13, 2024
f8706a1
Query user groups
nightkr Aug 13, 2024
45ca96c
Allow mapping custom attributes
nightkr Aug 13, 2024
6cc445e
Special-case mapping special LDAP attributes
nightkr Aug 13, 2024
5c6db37
Factor out group fetching
nightkr Aug 13, 2024
d6f9ec1
Error handling and cleanup
nightkr Aug 13, 2024
c8441e7
Make base DN configurable
nightkr Aug 13, 2024
5bb8bb8
Authenticate to AD with Kerberos
nightkr Aug 14, 2024
4b709ea
Encrypt LDAP connections with TLS
nightkr Aug 14, 2024
e5d4f9c
move util -> utils::http
nightkr Aug 14, 2024
d38931e
Unify TLS configuration (to the extent possible), allow multi-CA bundles
nightkr Aug 14, 2024
d4c6375
Documentation
nightkr Aug 14, 2024
56c57e6
Merge branch 'main' into feature/uif-ad
nightkr Aug 14, 2024
220f6b4
Move new UIF dependencies into workspace toml
nightkr Aug 14, 2024
e83e589
Changelog
nightkr Aug 14, 2024
31bad46
Update docs/modules/opa/pages/usage-guide/user-info-fetcher.adoc
nightkr Aug 28, 2024
db44296
Group up backends, clarify that response details will depend on the a…
nightkr Aug 28, 2024
94febb5
s/ldapHostname/ldapServer
nightkr Aug 30, 2024
3fc772a
More debug logging
nightkr Oct 25, 2024
77b8bc1
Add custom attribute mappings to docs
nightkr Oct 25, 2024
dbad157
Merge branch 'main' into feature/uif-ad
nightkr Oct 25, 2024
98ad185
Align LDAP hostname in the example with ad-init
nightkr Oct 25, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@ All notable changes to this project will be documented in this file.
- Added support for OPA 0.67.1 ([#616]).
- The operator can now run on Kubernetes clusters using a non-default cluster domain.
Use the env var `KUBERNETES_CLUSTER_DOMAIN` or the operator Helm chart property `kubernetesClusterDomain` to set a non-default cluster domain ([#637]).
- Added Active Directory backend for user-info-fetcher ([#622]).

### Changed

Expand All @@ -31,6 +32,7 @@ All notable changes to this project will be documented in this file.
[#580]: https://github.com/stackabletech/opa-operator/pull/580
[#616]: https://github.com/stackabletech/opa-operator/pull/616
[#621]: https://github.com/stackabletech/opa-operator/pull/621
[#622]: https://github.com/stackabletech/opa-operator/pull/622
[#637]: https://github.com/stackabletech/opa-operator/pull/637
[#638]: https://github.com/stackabletech/opa-operator/pull/638

Expand Down
199 changes: 199 additions & 0 deletions Cargo.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading