Commit Graph

134 Commits

Author SHA1 Message Date
Qu Xuan
7b845d17c7 fix(common): dump task info when stucking 2021-04-26 10:45:38 +08:00
Qiu Jian
0eaf20da26 fix(keystone): panic if request with an invalid token
service report nil pointer panic if request with an invalid token string
2020-12-16 16:43:24 +08:00
Qiu Jian
4349cc7f98 fix: auth permission result incorrect 2020-11-04 12:04:45 +08:00
Qiu Jian
2d39cb4cb0 feature: policy group support 2020-10-24 22:46:46 +08:00
Jian Qiu
34ee80f011 feature: use informer to update endpoint, policy and service configs (#7596)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2020-08-25 17:45:33 +08:00
屈轩
1244c170b7 fix: 避免glance metadata-list project scope无权限 (#7402)
Co-authored-by: Qu Xuan <quxuan@yunionyun.com>
2020-07-31 18:01:27 +08:00
Yousong Zhou
29a3171a3a cloudcommon: policy: fix interval and oneshot sync
Reduce CPU utilization caused by queued time.AfterFunc calls
2020-06-21 18:33:08 +08:00
Qiu Jian
2efb7fc9e6 fix: policy allow if one of the matching rules is allow 2020-06-16 23:06:30 +08:00
Qiu Jian
5ebb18b691 fix: policy-explain not working properly 2020-06-09 22:17:35 +08:00
Qiu Jian
e7b198ab35 fix: explainPolicy piggyback owner's privilige 2020-06-08 10:23:40 +08:00
Qiu Jian
728524fefc fix: empty matched policies list for roles 2020-05-22 18:47:57 +08:00
Qiu Jian
b312b5dacb fix: bugfixes 2020-05-16 01:04:12 +08:00
Qiu Jian
54689d862b fix: fail to explain permission for disabled policy 2020-05-16 00:18:28 +08:00
Qiu Jian
ecb483b9be fix: prevent policy violation 2020-04-28 23:28:29 +08:00
Qiu Jian
cada2d607c fix: remove obsolete policy definitions 2020-04-06 16:37:38 +08:00
Qiu Jian
09bc348c66 feature: recode cloudcommon policy default/resource codes 2020-03-30 19:35:55 +08:00
Qiu Jian
944c90fcff fix: allow list loadbalancer cluster by default 2020-03-28 08:53:59 +08:00
Qiu Jian
732dcdcb61 feature: system resource domainize 2020-03-27 01:20:29 +08:00
Zexi Li
78688a8ba2 Merge pull request #5550 from tb365/feature/tb-policy-AppendDefaultPolicies
auth policy append default policies
2020-03-19 10:08:49 +08:00
TangBin
a1e3ea9095 auth policy append default policies 2020-03-18 12:02:31 +08:00
Qiu Jian
e915d7d55b fix: policy fetcher not retry after initial failure 2020-03-17 18:27:17 +08:00
Qiu Jian
a9ed2da099 fix: allow project do user-list, group-list, returns current
project user and group
2020-03-05 20:06:38 +08:00
Qiu Jian
cf5498ac24 feature: recode structuralized GetExtraDetails and ListItemFilter 2020-03-04 14:01:25 +08:00
yunion-ci-robot
b32f534b50 Merge pull request #4829 from ioito/hotfix/qx-cloudevent-systemc-resource
fix: 公有云日志权限列表
2020-01-14 02:29:02 +08:00
Qu Xuan
12fe979952 fix: 公有云日志权限列表 2020-01-13 11:20:00 +08:00
Qiu Jian
5fb17ce3f2 fix: set default read privileges for reading all quotas 2020-01-11 17:57:28 +08:00
TangBin
5552d6ea8e update rbac default policy 2019-12-30 18:39:49 +08:00
TangBin
1c202009a6 add services query permission 2019-12-23 18:06:35 +08:00
Qu Xuan
41eda02a8d fix: globalvpc属于系统资源 2019-12-19 11:41:49 +08:00
Rain
59a7b155a3 fix(notify): Fix the bugs of user cache and some api's params 2019-12-17 17:18:22 +08:00
TangBin
91c1561c4e add elastic cache sku default policy 2019-11-18 17:31:48 +08:00
Qiu Jian
cad0f2c1c5 feature: cloud account share_mode support 2019-11-15 15:09:12 +08:00
Rain
d65e0a51f7 feature: Add update interface for guest image; add 'disk_format','min_disk_size','min_ram_size' for guest image
fix: input.Disks's length maybe zero when creating vm that will trigger panic
2019-10-30 16:38:00 +08:00
ioito
21be27e36c add rds operation 2019-10-24 11:40:22 +08:00
Zexi Li
8fd10ec457 climc: k8s import cluster support 2019-10-22 19:05:03 +08:00
Qiu Jian
2c7c817ddc fix: string2scope ignore user scope 2019-10-11 22:06:05 +08:00
Qiu Jian
5a024b7cfe fix: reduce policy sync worker queue size 2019-09-27 23:00:13 +08:00
Rain
e3ea4e3bb8 fix 2019-09-27 14:15:29 +08:00
ioito
a40729b71a fix: typo 2019-09-26 11:11:19 +08:00
Rain
dc68d23ff6 support Secondary authority management for contact and notification
rpc=>grpc, go=>workerMan

pull dingtalk auto

grpc
2019-09-24 15:33:53 +08:00
yunion-ci-robot
fd83c5e656 Merge pull request #2790 from ioito/hotfix/qx-dbinstance-sku-policy
hotfix: avolid auth for yunionmeta dbinstance_skus
2019-09-11 21:48:21 +08:00
Rain
3211230a86 add interface fetch resources of snats and dnats
snat network show

check sourcecidr is available when creating snat

add natgateway, snattable, dnattable to compute system resources
2019-09-07 18:48:35 +08:00
ioito
2dd60a7362 hotfix: avolid auth for yunionmeta dbinstance_skus 2019-09-07 16:01:20 +08:00
ioito
bcd9622219 fix: networkinterfaces belong system resource 2019-09-05 14:47:23 +08:00
Qiu Jian
77c4a53059 feature: 1. ak/sk auth support 2. a full feature s3gateway works with
Cyberduck

注意:以下两个文件的修改还未被官方合并,所以下次make
mod的时候会被覆盖,需要注意checkout恢复:

vendor/github.com/Azure/azure-sdk-for-go/storage/blockblob.go
vendor/github.com/tencentyun/cos-go-sdk-v5/object_part.go
2019-08-30 00:12:39 +08:00
Yousong Zhou
8d0e12027a policy: 将lb集群相关资源归入系统资源类 2019-08-26 07:38:41 +00:00
Qiu Jian
a177f8c2af fix: use policy match weight to override less specific policy 2019-08-23 21:14:47 +08:00
Zexi
dfc92a66eb schedtags: support scope 2019-08-23 13:35:58 +08:00
Qiu Jian
c938da9edd fix: adjust default policies for system resources 2019-08-05 18:56:05 +08:00
Qiu Jian
fea61697e9 fix: allow turn off non-default domain projects 2019-07-27 15:52:02 +08:00