consul

Commit Graph

Author	SHA1	Message	Date
Matt Keeler	a704ebe639	Add Namespace support to the API module and the CLI commands (#6874 ) Also update the Docs and fixup the HTTP API to return proper errors when someone attempts to use Namespaces with an OSS agent. Add Namespace HTTP API docs Make all API endpoints disallow unknown fields	2019-12-06 11:14:56 -05:00
R.B. Boyer	c649243f7c	docs: add documentation for all secure acl introduction work (#5640 )	2019-05-01 16:11:23 -05:00
R.B. Boyer	cc1aa3f973	acl: adding Roles to Tokens (#5514 ) Roles are named and can express the same bundle of permissions that can currently be assigned to a Token (lists of Policies and Service Identities). The difference with a Role is that it not itself a bearer token, but just another entity that can be tied to a Token. This lets an operator potentially curate a set of smaller reusable Policies and compose them together into reusable Roles, rather than always exploding that same list of Policies on any Token that needs similar permissions. This also refactors the acl replication code to be semi-generic to avoid 3x copypasta.	2019-04-26 14:49:12 -05:00

Author

SHA1

Message

Date

Matt Keeler

a704ebe639

Add Namespace support to the API module and the CLI commands (#6874 )

Also update the Docs and fixup the HTTP API to return proper errors when someone attempts to use Namespaces with an OSS agent.

Add Namespace HTTP API docs

Make all API endpoints disallow unknown fields

2019-12-06 11:14:56 -05:00

R.B. Boyer

c649243f7c

docs: add documentation for all secure acl introduction work (#5640 )

2019-05-01 16:11:23 -05:00

R.B. Boyer

cc1aa3f973

acl: adding Roles to Tokens (#5514 )

Roles are named and can express the same bundle of permissions that can
currently be assigned to a Token (lists of Policies and Service
Identities). The difference with a Role is that it not itself a bearer
token, but just another entity that can be tied to a Token.

This lets an operator potentially curate a set of smaller reusable
Policies and compose them together into reusable Roles, rather than
always exploding that same list of Policies on any Token that needs
similar permissions.

This also refactors the acl replication code to be semi-generic to avoid
3x copypasta.

2019-04-26 14:49:12 -05:00

3 Commits (c9dbcc31ecd64cd1443251c4ce6e1f5313336497)