Commit Graph

576 Commits

Author SHA1 Message Date
Chuan Ren bedaeb5265 Add aws signature v4 signer 2020-11-11 15:55:16 -08:00
Mark D. Roth 27e1c1c56d clang-tidy: enable google-readability-braces-around-statements 2020-11-06 13:41:44 -08:00
Chuan Ren 2b1265b42f Add file-sourced external credentials 2020-11-02 14:11:50 -08:00
ZhenLian 518ed1303c Add Credential Loading From Static Providers For TLS Credentials 2020-10-22 13:55:31 -07:00
Chuan Ren 4c93d36d08 Add url-sourced external credentials 2020-10-20 13:56:55 -07:00
Esun Kim e7434d385e Fix by tidy-modernize-use-override 2020-10-16 14:01:06 -07:00
Esun Kim 47dd5fd78e Fix by modernize-use-bool-literals 2020-10-16 10:14:45 -07:00
Mark D. Roth 012381235f
Merge pull request #24208 from renkelvin/base
[3PI Support] Add base external account credentials class
2020-10-13 10:27:14 -07:00
Chuan Ren 0cf672d42e Add implementation of base external account credentials 2020-10-12 16:18:11 -07:00
Yash Tibrewal 4013fd9dc9
Merge pull request #24313 from yashykt/xdscredscpp
C++ API to create Xds channel credentials
2020-10-08 22:27:21 -07:00
Yash Tibrewal c52cb09f47 Add experimental XdsCredentials with support for insecure channel_credentials and security_connector 2020-10-08 20:37:47 -07:00
Esun Kim 8e9e895ffc Replace grpc_shutdown_blocking with grpc_shutdown 2020-10-08 10:57:05 -07:00
Ashitha Santhosh 2cfb1bf2cf
Merge pull request #24159 from ashithasantosh/eval_flaky
Use TestEnvironment to fix flaky test.
2020-09-17 21:28:23 -07:00
Yash Tibrewal 11abbd3828 Add parsing logic for GoogleMeshCaConfig 2020-09-17 09:33:10 -07:00
Ashitha Santhosh 443c8aa8f1 Create TestEnvironment to fix flaky test. 2020-09-15 13:15:23 -07:00
ZhenLian 1a275d7eab Add tls_certificate_distributor implementation 2020-09-08 10:20:21 -07:00
Ashitha Santhosh b1fd4a45a4 Add EvaluateArgs test. 2020-08-27 13:00:56 -07:00
ashithasantosh 5820e833fc Add activation logic and endpoint getters. 2020-08-18 19:12:22 -07:00
Yash Tibrewal 55821f5cf8 Revert "Merge pull request #23786 from michaelywg/cel_create_activation"
This reverts commit fe59761648, reversing
changes made to 1856e224c3.
2020-08-17 14:01:53 -07:00
Michael Wang b8771966f1 Added tests for eval_args address/port getters. Implemented said getters and CreateActivation.
Added logging for unsupported attributes

fixed make issues by moving grpc_authorization_engine under grpc

changed inet_aton to inet_pton

fixed issue leftover from initial implementation of evalargs
2020-08-14 04:30:42 +00:00
Michael Wang d0311ac81a Basic class definition and constructor Cel eval engine
Merge remote-tracking branch 'upstream/master' into celeval_constructor

Iterate through policies and store CEL condition

git push origin ce Merge remote-tracking branch 'upstream/master' into celeval_constructor

added class and constructor comments for CelEvaluationEngine

CelEvaluationEngine class and constructor

Added cel_evaluation_engine to build

ran clang_tidy_code.sh

updated BUILD with cel_evaluation_engine

added rbac.upb.h/cc to BUILD

Rewrote cel_evaluation_engine code with upb conventions

removed unnecessary deps for cel_evaluation_engine in BUILD

Cel_evaluation_engine uses arenas to manage condition pointers

Used upb::Arena instead of upb_arena*, added temp_arena to save memory

Added action_allow_ member variable

Added fullstops to comments

initialize action_allow_

changed variable names to be more clear

removed unnecessary headers

correctly initialize the action_allow_ variable

changed constructor to use an initializer list

ran clang_tidy and clang_format scripts

added cel_engine_test

resolved merge conflicts and rewrote cel engine constructor to use new map api

changed variables to be more clear and made them const

changed syntax.upb.h so the build succeeds

changed syntax.upb.h so the build succeeds

changed version of upb in bazel_dpes

regenerated upb files with new upb version

added TODO regarding two-policy design

modified CelEvaluationEngine and tests to use two rbac policies

Made test messages consistent and added a case with too many policies

changed name from cel_engine to authorization_engine

fixed merge issues and updated authorization engine to v3 rbac

made constructor public and added namespace grpc_core
2020-08-04 18:23:21 +00:00
Karthik Ravi Shankar 1de0bfd9e2
Revert "Revert "Move create_channel and credentials from ::grpc_impl to ::grpc"" 2020-07-24 12:47:33 -07:00
Karthik Ravi Shankar f1bc43edf6
Revert "Move create_channel and credentials from ::grpc_impl to ::grpc" 2020-07-24 11:08:54 -07:00
Karthik Ravi Shankar 9ad399384a Merge branch 'master' into create-channel 2020-07-23 00:47:36 -07:00
Richard Belleville 089d90933a
Merge pull request #23203 from gnossen/python_google_default_creds
Implement compute_engine_channel_credentials in Python
2020-07-22 13:14:54 -07:00
Richard Belleville d40a91dde5 Don't check tenancy if credentials specified 2020-07-21 17:55:00 +00:00
Richard Belleville c4491121c6 Stop checking g_is_on_gce in security connector 2020-07-21 00:17:34 +00:00
Esun Kim 315caf5d05 Added grpc::testing::TestEnvironment 2020-07-19 19:38:31 -07:00
Karthik Ravi Shankar 1999b20c7d Merge branch 'master' into create-channel 2020-07-13 10:58:31 -07:00
Richard Belleville 535d0da0dd Complete synchronously 2020-07-10 19:05:56 +00:00
Richard Belleville 56ed8f3be4 Merge remote-tracking branch 'origin/master' into python_google_default_creds 2020-07-10 01:09:58 +00:00
Richard Belleville acbda9835e Reuse mdelem 2020-07-10 00:50:23 +00:00
Richard Belleville ff5f4bb6fc Add test 2020-07-10 00:31:23 +00:00
Richard Belleville 8412476a9b Add sunny day core API path 2020-07-09 21:49:06 +00:00
Richard Belleville d067b63d48 WIP 2020-07-08 23:09:57 +00:00
Mark D. Roth 9404f66f70 Replace most uses of gpr_asprintf() with absl calls. 2020-07-07 12:01:02 -07:00
Richard Belleville c8a8a6aea4 Get new core API design building 2020-07-07 00:18:42 +00:00
Karthik Ravi Shankar 331519496e Merge branch 'master' into create-channel 2020-07-01 15:15:39 -07:00
Esun Kim 62ac3f075a Added call to grpc::testing::TestEnvironment in tests 2020-07-01 11:37:57 -07:00
Karthik Ravi Shankar fa0c73146c Fix formatting issue 2020-06-29 17:28:11 -07:00
Karthik Ravi Shankar 0963497181 Fix fetch oauth2 test 2020-06-29 17:07:56 -07:00
Richard Belleville c10cae4659 Remove platform-specific assertion 2020-06-26 17:54:48 +00:00
Richard Belleville f2a0f47fbb Add test 2020-06-26 05:44:39 +00:00
jiangtaoli2016 e8f17c5f96 Fix SPIFFE ID check 2020-06-24 08:53:09 -07:00
Mark D. Roth 3bb427195e Revert "Merge pull request #23053 from grpc/revert-22772-gpr_strvec"
This reverts commit 4b7452bcdb, reversing
changes made to 133d0076b4.
2020-05-28 11:13:12 -07:00
Karthik Ravi Shankar f46c07f3f8
Revert "Remove gpr_strvec." 2020-05-26 17:25:45 -07:00
Mark D. Roth c2ef110303 Replace gpr_strvec with absl::StrJoin(). 2020-05-21 08:47:41 -07:00
ZhenLian 2252895011
Merge pull request #22863 from ZhenLian/zhen_tmp_branch
Expose Peer SPIFFE Identity
2020-05-08 09:24:00 -07:00
ZhenLian b98457ff79 fix first round of feedback 2020-05-07 23:04:13 -07:00
ZhenLian 9f92365657 Expose Peer SPIFFE Identity 2020-05-05 10:57:54 -07:00
ZhenLian d75de51e43 [10/n] remove hard-coded credential paths and rebuild the project 2020-04-29 10:51:56 -07:00
Mark D. Roth fc6f26c89b Remove grpc_core::StringView. 2020-04-27 07:46:13 -07:00
ZhenLian 096c276182 [4/n] Avoid using hardcoded test credentials 2020-04-14 11:47:19 -07:00
Mark D. Roth 41cfae4234 Revert "Merge pull request #19693 from apolcyn/control_plane_creds"
This reverts commit 162fccdb90, reversing
changes made to 228e7557fa.
2020-04-02 08:13:26 -07:00
ZhenLian 738272f3a8 [ImproveTLS] add a wrapper to error_detail in C core args 2020-03-18 09:35:39 -07:00
Zhen Lian cbc977204b [ImproveTLS] fix memory leak issue from users' perspective 2020-03-04 17:04:06 -08:00
Matthew Stevenson 006980a915 Merge remote-tracking branch 'upstream/master' into tls-documentation-1 2020-02-28 07:34:26 -08:00
Matthew Stevenson 786e6c3ed3 Fix build issues. 2020-02-27 11:07:12 -08:00
Matthew Stevenson ad9a9a7067 Remove unnecessary comments. 2020-02-27 10:18:57 -08:00
Matthew Stevenson 3c87fb610f Add comments to TlsFetchKeyMaterials API and add a test file for the TLS credentials options. 2020-02-27 10:01:14 -08:00
Moiz Haidry f53456210d Addressed Mark's comments 2020-02-27 09:03:52 -08:00
Moiz Haidry ede2ffc1a8 Addressed Mark's comments 2020-02-26 12:51:35 -08:00
Moiz Haidry 67565b767d CallCredentials debug string API 2020-02-25 16:09:03 -08:00
Vijay Pai f6b38f75a4
Revert "feat: add x-goog-user-project header from quota_project_id field" 2020-02-24 09:56:52 -08:00
Jiangtao Li ddd010781f
Merge pull request #21324 from tmatsuo/x-goog-user-project
feat: add x-goog-user-project header from quota_project_id field
2020-02-20 14:57:44 -08:00
Julien Boeuf f930322bf9 Add more tests for STS
- ensure that we don't crash if the token file is not readable.
- fixed the oauth2 token fetcher as well.
2020-02-13 16:08:45 -08:00
Mark D. Roth 568f490aef
Merge pull request #21256 from markdroth/json_new_api_security
Convert security code to use new JSON API
2020-01-30 11:08:26 -08:00
Mark D. Roth f961942266 Convert security code to use new JSON API 2020-01-30 07:44:22 -08:00
Zhen Lian 9ded19e24d fix first round of comments 2020-01-28 15:17:07 -08:00
Takashi Matsuo 9bed17b987 feat: add x-goog-user-project header from quota_project field 2020-01-28 13:36:36 -08:00
Zhen Lian ffcf4f477e [TLS Lib Clean-up] Add hostname check For tls library 2020-01-23 17:01:21 -08:00
Yang Gao 56972ae715
Merge pull request #21648 from yang-g/init_first
InitGoogleTest before grpc_init
2020-01-14 15:07:37 -08:00
yang-g 5bc57b64fe InitGoogleTest before grpc_init 2020-01-14 13:29:15 -08:00
Julien Boeuf 323e23a7c5 Fix STS credentials to ignore empty actor token path. 2020-01-13 11:24:15 -08:00
Yihua Zhang c8c284ed3a merge with upstream/master 2020-01-07 15:33:26 -08:00
Yihua Zhang e10d90ba27 add security level negotiation between call creds and channel. 2020-01-06 11:40:27 -08:00
Akshay Kumar db11b94f25 FullChainExperimental-01-200103 2020-01-03 22:37:18 -08:00
Yihua Zhang a6dbc7adb5 rename spiffe to tls 2019-12-05 16:03:37 -08:00
Juanli Shen 2693d34c30 Make StringView cmp compatible with absl 2019-12-03 13:47:12 -08:00
jboeuf 7fa653dbfb
Merge pull request #21277 from jboeuf/sts_creds_fix
Fixing bug where subject token was used instead of the actor token.
2019-11-27 11:30:49 -08:00
Jan Tattermusch 13843be76e
fix type 2019-11-26 21:07:42 +01:00
Jan Tattermusch eb137ea519 clang format 2019-11-25 07:46:05 -05:00
Jan Tattermusch 04796c8ccb fix //test/core/security:credentials_test under local bazel run 2019-11-25 13:37:57 +01:00
Julien Boeuf cedf76ee9a Fixing bug where subject token was used instead of the actor token. 2019-11-22 15:23:00 -08:00
ZhenLian 0748d57de3
Merge pull request #20873 from ZhenLian/zhen_design_writeup_3
[Exposing ALTS Context 1/2] Fill in context on TSI and Security Connector Layer
2019-11-08 08:54:04 -08:00
Esun Kim e45b60d1fe Fix unique_ptr<char> memory allocation mismatch 2019-11-07 17:53:59 -08:00
Zhen Lian ddf565db33 running clang-format -i on each modified files 2019-11-07 13:13:42 -08:00
Esun Kim b2b7fc9af8 Replaced grpc_core::UniquePtr with std::unique_ptr 2019-11-07 13:05:39 -08:00
Esun Kim 3a519a0b64 Replaced grpc_core New & Delete with C++ new & delete 2019-11-06 17:52:26 -08:00
Esun Kim de81f120b2 Abseilify StringView 2019-11-06 10:58:03 -08:00
Lidi Zheng c34bef4ca4 Format all Bazel files with buildifier 2019-11-05 14:03:52 -08:00
Yash Tibrewal 4b31415e61
Merge pull request #20892 from yashykt/removsched
Replace GRPC_CLOSURE_SCHED with ExecCtx::Run
2019-11-05 10:48:12 -08:00
Esun Kim 81df105ac8 Deprecate gpr_get/set_allocation_functions 2019-11-04 19:47:33 -08:00
Yash Tibrewal 3a189d7e08 test changes 2019-10-31 17:09:38 -07:00
Zhen Lian e8d570618e [Exposing ALTS Context 1/2] Fill in context on TSI and Security Connector Layer 2019-10-30 13:39:52 -07:00
Vijay Pai e0fdf40e9d
Merge pull request #20700 from vjpai/more_cpp_warning_removals_201910210916_17
Remove unused-parameter warnings, round 2 (17 of 19)
2019-10-28 11:26:58 -07:00
Jiangtao Li 57818b0d02
Merge pull request #20565 from coryan/fix-issue-16872
bug: remove racy code to detect GCE on Windows
2019-10-24 15:39:02 -07:00
Vijay Pai 2477b966e2 Remove unused-parameter warnings, round 2 (17 of 19) 2019-10-24 13:08:35 -07:00
Carlos O'Ryan 2144c719fc
Run clang_format_all_the_things.sh 2019-10-24 13:24:33 -04:00
Vijay Pai be6911d1d2
Merge pull request #20650 from vjpai/remove_warn_11
Remove unused parameter warnings (11 of 20)
2019-10-18 10:13:50 -07:00