Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(rbac): prevent policy creation when rbac plugin is disabled #2407

Merged

Conversation

PatAKnight
Copy link
Member

Description

Adds a new allow all permission policy that can be used to whenever the permission framework is disabled. This allows us to skip the creation of a number of resources because we load in this allow all permission policy instead of the RBAC one.

Also included is a number of other updates.

  • Creates a new directory called policies and moves the allow-all-policy.ts and permission-policy.ts to this directory
  • Cleans up the options for the PoliciesServer as there was some duplicates

@PatAKnight PatAKnight requested review from AndrienkoAleksandr and a team as code owners October 21, 2024 12:05
Copy link

changeset-bot bot commented Oct 21, 2024

🦋 Changeset detected

Latest commit: 4881150

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package
Name Type
@janus-idp/backstage-plugin-rbac-backend Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@PatAKnight PatAKnight force-pushed the prevent-policy-creation branch from ea6730e to 4881150 Compare October 25, 2024 12:02
Copy link

Quality Gate Failed Quality Gate failed

Failed conditions
45.4% Duplication on New Code (required ≤ 3%)

See analysis details on SonarCloud

Copy link
Collaborator

@AndrienkoAleksandr AndrienkoAleksandr left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested, works like expected. Looks good to me.

@PatAKnight
Copy link
Member Author

/override "SonarCloud Code Analysis"

Copy link

openshift-ci bot commented Oct 28, 2024

@PatAKnight: Overrode contexts on behalf of PatAKnight: SonarCloud Code Analysis

In response to this:

/override "SonarCloud Code Analysis"

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-merge-bot openshift-merge-bot bot merged commit e6ef910 into janus-idp:main Oct 28, 2024
8 of 9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants