consul/agent/structs
R.B. Boyer cc1aa3f973 acl: adding Roles to Tokens (#5514)
Roles are named and can express the same bundle of permissions that can
currently be assigned to a Token (lists of Policies and Service
Identities). The difference with a Role is that it not itself a bearer
token, but just another entity that can be tied to a Token.

This lets an operator potentially curate a set of smaller reusable
Policies and compose them together into reusable Roles, rather than
always exploding that same list of Policies on any Token that needs
similar permissions.

This also refactors the acl replication code to be semi-generic to avoid
3x copypasta.
2019-04-26 14:49:12 -05:00
..
acl.go acl: adding Roles to Tokens (#5514) 2019-04-26 14:49:12 -05:00
acl_cache.go acl: adding Roles to Tokens (#5514) 2019-04-26 14:49:12 -05:00
acl_cache_test.go acl: adding Roles to Tokens (#5514) 2019-04-26 14:49:12 -05:00
acl_legacy.go acl: ACL Tokens can now be assigned an optional set of service identities (#5390) 2019-04-26 14:48:04 -05:00
acl_legacy_test.go New ACLs (#4791) 2018-10-19 12:04:07 -04:00
acl_test.go acl: adding Roles to Tokens (#5514) 2019-04-26 14:49:12 -05:00
catalog.go agent: remove ConnectProxyServiceName 2018-06-14 09:41:49 -07:00
check_definition.go agent: fix formatting 2018-11-07 02:16:03 -08:00
check_definition_test.go agent: fix formatting 2018-11-07 02:16:03 -08:00
check_type.go agent/structs: check is alias if node is empty 2018-07-12 09:36:11 -07:00
config_entry.go Add the service registration manager to the agent 2019-04-23 00:17:27 -07:00
connect.go fix typos reported by golangci-lint:misspell (#5434) 2019-03-06 11:13:28 -06:00
connect_ca.go connect: tame thundering herd of CSRs on CA rotation (#5228) 2019-01-22 17:19:36 +00:00
connect_ca_test.go connect: tame thundering herd of CSRs on CA rotation (#5228) 2019-01-22 17:19:36 +00:00
connect_proxy_config.go Implement data filtering of some endpoints (#5579) 2019-04-16 12:00:15 -04:00
connect_proxy_config_test.go Add Proxy Upstreams to Service Definition (#4639) 2018-10-10 16:55:34 +01:00
connect_test.go Added connect proxy config and local agent state setup on boot. 2018-06-14 09:41:57 -07:00
errors.go Implement /v1/agent/health/service/<service name> endpoint (#3551) 2019-01-07 09:39:23 -05:00
intention.go fsm: add Intention operations to transactions for internal use 2018-10-19 10:02:28 -07:00
intention_test.go agent/consul: set precedence value on struct itself 2018-06-25 12:24:16 -07:00
operator.go Move autopilot to a standalone package 2017-12-11 16:45:33 -08:00
prepared_query.go Improve Connect with Prepared Queries (#5291) 2019-02-04 09:36:51 -05:00
prepared_query_test.go agent: move agent/consul/structs to agent/structs 2017-08-09 14:32:12 +02:00
sanitize_oss.go acl: add stub hooks to support some plumbing in enterprise (#4951) 2018-11-13 15:35:54 -06:00
service_definition.go fix typos reported by golangci-lint:misspell (#5434) 2019-03-06 11:13:28 -06:00
service_definition_test.go Add Proxy Upstreams to Service Definition (#4639) 2018-10-10 16:55:34 +01:00
snapshot.go agent: move agent/consul/structs to agent/structs 2017-08-09 14:32:12 +02:00
structs.go acl: adding Roles to Tokens (#5514) 2019-04-26 14:49:12 -05:00
structs_filtering_test.go Implement data filtering of some endpoints (#5579) 2019-04-16 12:00:15 -04:00
structs_test.go Make central service config opt-in and rework the initial registration 2019-04-24 06:11:08 -07:00
testing_catalog.go Add SidecarService Syntax sugar to Service Definition (#4686) 2018-10-10 16:55:34 +01:00
testing_connect_proxy_config.go Add -sidecar-for and new /agent/service/:service_id endpoint (#4691) 2018-10-10 16:55:34 +01:00
testing_intention.go agent: use testing intention to get valid intentions 2018-06-14 09:41:43 -07:00
testing_service_definition.go Add Proxy Upstreams to Service Definition (#4639) 2018-10-10 16:55:34 +01:00
txn.go txn: update existing txn api docs with new operations 2019-01-15 16:54:07 -08:00