Commit Graph

523 Commits

Author SHA1 Message Date
ZhenLian 518ed1303c Add Credential Loading From Static Providers For TLS Credentials 2020-10-22 13:55:31 -07:00
Chuan Ren 4c93d36d08 Add url-sourced external credentials 2020-10-20 13:56:55 -07:00
Esun Kim e7434d385e Fix by tidy-modernize-use-override 2020-10-16 14:01:06 -07:00
Esun Kim 47dd5fd78e Fix by modernize-use-bool-literals 2020-10-16 10:14:45 -07:00
Mark D. Roth 012381235f
Merge pull request #24208 from renkelvin/base
[3PI Support] Add base external account credentials class
2020-10-13 10:27:14 -07:00
Chuan Ren 0cf672d42e Add implementation of base external account credentials 2020-10-12 16:18:11 -07:00
Yash Tibrewal 4013fd9dc9
Merge pull request #24313 from yashykt/xdscredscpp
C++ API to create Xds channel credentials
2020-10-08 22:27:21 -07:00
Yash Tibrewal c52cb09f47 Add experimental XdsCredentials with support for insecure channel_credentials and security_connector 2020-10-08 20:37:47 -07:00
Esun Kim 8e9e895ffc Replace grpc_shutdown_blocking with grpc_shutdown 2020-10-08 10:57:05 -07:00
Ashitha Santhosh 2cfb1bf2cf
Merge pull request #24159 from ashithasantosh/eval_flaky
Use TestEnvironment to fix flaky test.
2020-09-17 21:28:23 -07:00
Yash Tibrewal 11abbd3828 Add parsing logic for GoogleMeshCaConfig 2020-09-17 09:33:10 -07:00
Ashitha Santhosh 443c8aa8f1 Create TestEnvironment to fix flaky test. 2020-09-15 13:15:23 -07:00
ZhenLian 1a275d7eab Add tls_certificate_distributor implementation 2020-09-08 10:20:21 -07:00
Ashitha Santhosh b1fd4a45a4 Add EvaluateArgs test. 2020-08-27 13:00:56 -07:00
ashithasantosh 5820e833fc Add activation logic and endpoint getters. 2020-08-18 19:12:22 -07:00
Yash Tibrewal 55821f5cf8 Revert "Merge pull request #23786 from michaelywg/cel_create_activation"
This reverts commit fe59761648, reversing
changes made to 1856e224c3.
2020-08-17 14:01:53 -07:00
Michael Wang b8771966f1 Added tests for eval_args address/port getters. Implemented said getters and CreateActivation.
Added logging for unsupported attributes

fixed make issues by moving grpc_authorization_engine under grpc

changed inet_aton to inet_pton

fixed issue leftover from initial implementation of evalargs
2020-08-14 04:30:42 +00:00
Michael Wang d0311ac81a Basic class definition and constructor Cel eval engine
Merge remote-tracking branch 'upstream/master' into celeval_constructor

Iterate through policies and store CEL condition

git push origin ce Merge remote-tracking branch 'upstream/master' into celeval_constructor

added class and constructor comments for CelEvaluationEngine

CelEvaluationEngine class and constructor

Added cel_evaluation_engine to build

ran clang_tidy_code.sh

updated BUILD with cel_evaluation_engine

added rbac.upb.h/cc to BUILD

Rewrote cel_evaluation_engine code with upb conventions

removed unnecessary deps for cel_evaluation_engine in BUILD

Cel_evaluation_engine uses arenas to manage condition pointers

Used upb::Arena instead of upb_arena*, added temp_arena to save memory

Added action_allow_ member variable

Added fullstops to comments

initialize action_allow_

changed variable names to be more clear

removed unnecessary headers

correctly initialize the action_allow_ variable

changed constructor to use an initializer list

ran clang_tidy and clang_format scripts

added cel_engine_test

resolved merge conflicts and rewrote cel engine constructor to use new map api

changed variables to be more clear and made them const

changed syntax.upb.h so the build succeeds

changed syntax.upb.h so the build succeeds

changed version of upb in bazel_dpes

regenerated upb files with new upb version

added TODO regarding two-policy design

modified CelEvaluationEngine and tests to use two rbac policies

Made test messages consistent and added a case with too many policies

changed name from cel_engine to authorization_engine

fixed merge issues and updated authorization engine to v3 rbac

made constructor public and added namespace grpc_core
2020-08-04 18:23:21 +00:00
Karthik Ravi Shankar 1de0bfd9e2
Revert "Revert "Move create_channel and credentials from ::grpc_impl to ::grpc"" 2020-07-24 12:47:33 -07:00
Karthik Ravi Shankar f1bc43edf6
Revert "Move create_channel and credentials from ::grpc_impl to ::grpc" 2020-07-24 11:08:54 -07:00
Karthik Ravi Shankar 9ad399384a Merge branch 'master' into create-channel 2020-07-23 00:47:36 -07:00
Richard Belleville 089d90933a
Merge pull request #23203 from gnossen/python_google_default_creds
Implement compute_engine_channel_credentials in Python
2020-07-22 13:14:54 -07:00
Richard Belleville d40a91dde5 Don't check tenancy if credentials specified 2020-07-21 17:55:00 +00:00
Richard Belleville c4491121c6 Stop checking g_is_on_gce in security connector 2020-07-21 00:17:34 +00:00
Esun Kim 315caf5d05 Added grpc::testing::TestEnvironment 2020-07-19 19:38:31 -07:00
Karthik Ravi Shankar 1999b20c7d Merge branch 'master' into create-channel 2020-07-13 10:58:31 -07:00
Richard Belleville 535d0da0dd Complete synchronously 2020-07-10 19:05:56 +00:00
Richard Belleville 56ed8f3be4 Merge remote-tracking branch 'origin/master' into python_google_default_creds 2020-07-10 01:09:58 +00:00
Richard Belleville acbda9835e Reuse mdelem 2020-07-10 00:50:23 +00:00
Richard Belleville ff5f4bb6fc Add test 2020-07-10 00:31:23 +00:00
Richard Belleville 8412476a9b Add sunny day core API path 2020-07-09 21:49:06 +00:00
Richard Belleville d067b63d48 WIP 2020-07-08 23:09:57 +00:00
Mark D. Roth 9404f66f70 Replace most uses of gpr_asprintf() with absl calls. 2020-07-07 12:01:02 -07:00
Richard Belleville c8a8a6aea4 Get new core API design building 2020-07-07 00:18:42 +00:00
Karthik Ravi Shankar 331519496e Merge branch 'master' into create-channel 2020-07-01 15:15:39 -07:00
Esun Kim 62ac3f075a Added call to grpc::testing::TestEnvironment in tests 2020-07-01 11:37:57 -07:00
Karthik Ravi Shankar fa0c73146c Fix formatting issue 2020-06-29 17:28:11 -07:00
Karthik Ravi Shankar 0963497181 Fix fetch oauth2 test 2020-06-29 17:07:56 -07:00
Richard Belleville c10cae4659 Remove platform-specific assertion 2020-06-26 17:54:48 +00:00
Richard Belleville f2a0f47fbb Add test 2020-06-26 05:44:39 +00:00
jiangtaoli2016 e8f17c5f96 Fix SPIFFE ID check 2020-06-24 08:53:09 -07:00
Mark D. Roth 3bb427195e Revert "Merge pull request #23053 from grpc/revert-22772-gpr_strvec"
This reverts commit 4b7452bcdb, reversing
changes made to 133d0076b4.
2020-05-28 11:13:12 -07:00
Karthik Ravi Shankar f46c07f3f8
Revert "Remove gpr_strvec." 2020-05-26 17:25:45 -07:00
Mark D. Roth c2ef110303 Replace gpr_strvec with absl::StrJoin(). 2020-05-21 08:47:41 -07:00
ZhenLian 2252895011
Merge pull request #22863 from ZhenLian/zhen_tmp_branch
Expose Peer SPIFFE Identity
2020-05-08 09:24:00 -07:00
ZhenLian b98457ff79 fix first round of feedback 2020-05-07 23:04:13 -07:00
ZhenLian 9f92365657 Expose Peer SPIFFE Identity 2020-05-05 10:57:54 -07:00
ZhenLian d75de51e43 [10/n] remove hard-coded credential paths and rebuild the project 2020-04-29 10:51:56 -07:00
Mark D. Roth fc6f26c89b Remove grpc_core::StringView. 2020-04-27 07:46:13 -07:00
ZhenLian 096c276182 [4/n] Avoid using hardcoded test credentials 2020-04-14 11:47:19 -07:00