open-consul/agent/structs
Mark Anderson ab099e5fcb
Refactor config checks oss (#12550)
Currently the config_entry.go subsystem delegates authorization decisions via the ConfigEntry interface CanRead and CanWrite code. Unfortunately this returns a true/false value and loses the details of the source.

This is not helpful, especially since it the config subsystem can be more complex to understand, since it covers so many domains.

This refactors CanRead/CanWrite to return a structured error message (PermissionDenied or the like) with more details about the reason for denial.

Part of #12241

Signed-off-by: Mark Anderson <manderson@hashicorp.com>
2022-03-11 13:45:51 -08:00
..
acl.go acl: return a resposne from ResolveToken that includes the ACLIdentity 2022-01-22 14:33:09 -05:00
acl_cache.go acl: remove ACL.GetPolicy endpoint and resolve legacy acls 2021-09-29 14:33:19 -04:00
acl_cache_test.go
acl_oss.go Cross port of ent #1383 (#11726) 2021-12-03 10:20:25 -08:00
acl_test.go acl: remove Policy.ID and Policy.Revision 2021-11-05 15:43:52 -04:00
auto_encrypt.go
autopilot.go
autopilot_oss.go re-run gofmt on 1.17 (#11579) 2021-11-16 12:04:01 -06:00
catalog.go
catalog_oss.go re-run gofmt on 1.17 (#11579) 2021-11-16 12:04:01 -06:00
check_definition.go preload json values in structs to determine defaults 2021-10-10 17:52:26 -04:00
check_definition_test.go
check_type.go preload json values in structs to determine defaults 2021-10-10 17:52:26 -04:00
config_entry.go Refactor config checks oss (#12550) 2022-03-11 13:45:51 -08:00
config_entry_discoverychain.go Refactor config checks oss (#12550) 2022-03-11 13:45:51 -08:00
config_entry_discoverychain_oss.go re-run gofmt on 1.17 (#11579) 2021-11-16 12:04:01 -06:00
config_entry_discoverychain_test.go Remove support for failover to partition 2021-12-06 12:32:24 -07:00
config_entry_exports.go Refactor config checks oss (#12550) 2022-03-11 13:45:51 -08:00
config_entry_gateways.go Refactor config checks oss (#12550) 2022-03-11 13:45:51 -08:00
config_entry_gateways_test.go Fix some more Enterprise Normalization issues affecting tests 2021-09-23 10:12:37 +01:00
config_entry_intentions.go Refactor config checks oss (#12550) 2022-03-11 13:45:51 -08:00
config_entry_intentions_oss.go re-run gofmt on 1.17 (#11579) 2021-11-16 12:04:01 -06:00
config_entry_intentions_test.go Sync enterprise changes to oss (#10994) 2021-09-08 11:59:30 -04:00
config_entry_mesh.go Refactor config checks oss (#12550) 2022-03-11 13:45:51 -08:00
config_entry_mesh_oss.go re-run gofmt on 1.17 (#11579) 2021-11-16 12:04:01 -06:00
config_entry_oss.go Prevent partition-exports entry from OSS usage 2021-11-29 11:24:16 -07:00
config_entry_oss_test.go re-run gofmt on 1.17 (#11579) 2021-11-16 12:04:01 -06:00
config_entry_test.go Refactor config checks oss (#12550) 2022-03-11 13:45:51 -08:00
connect.go
connect_ca.go ca: examine the full chain in newCARoot 2022-02-17 18:21:30 -05:00
connect_ca_test.go add root_cert_ttl option for consul connect, vault ca providers (#11428) 2021-11-02 11:02:10 -07:00
connect_oss.go re-run gofmt on 1.17 (#11579) 2021-11-16 12:04:01 -06:00
connect_proxy_config.go proxycfg: introduce explicit UpstreamID in lieu of bare string (#12125) 2022-01-20 10:12:04 -06:00
connect_proxy_config_oss.go proxycfg: introduce explicit UpstreamID in lieu of bare string (#12125) 2022-01-20 10:12:04 -06:00
connect_proxy_config_test.go bulk rewrite using this script 2022-01-20 10:46:23 -06:00
discovery_chain.go Header manip for split legs plumbing 2021-09-10 21:09:24 +01:00
discovery_chain_oss.go re-run gofmt on 1.17 (#11579) 2021-11-16 12:04:01 -06:00
errors.go
federation_state.go
identity.go
intention.go acl: fix intention:*:write checks (#11061) 2021-09-16 11:08:45 -05:00
intention_oss.go re-run gofmt on 1.17 (#11579) 2021-11-16 12:04:01 -06:00
intention_test.go bulk rewrite using this script 2022-01-20 10:46:23 -06:00
operator.go
prepared_query.go
prepared_query_test.go
protobuf_compat.go Groundwork for exposing when queries are filtered by ACLs (#11569) 2021-12-03 17:11:26 +00:00
sanitize_oss.go re-run gofmt on 1.17 (#11579) 2021-11-16 12:04:01 -06:00
service_definition.go Add failures_before_warning to checks (#10969) 2021-09-14 12:47:52 -04:00
service_definition_test.go bulk rewrite using this script 2022-01-20 10:46:23 -06:00
snapshot.go
structs.go catalog: compare node names case insensitively in more places (#12444) 2022-02-24 16:54:47 -06:00
structs_filtering_test.go Sync enterprise changes to oss (#10994) 2021-09-08 11:59:30 -04:00
structs_oss.go acl: ensure that the agent recovery token is properly partitioned (#11782) 2021-12-08 17:11:55 -06:00
structs_oss_test.go re-run gofmt on 1.17 (#11579) 2021-11-16 12:04:01 -06:00
structs_test.go catalog: compare node names case insensitively in more places (#12444) 2022-02-24 16:54:47 -06:00
system_metadata.go Add virtual IP generation for term gateway backed services 2022-01-12 12:08:49 -08:00
testing.go Vendor in rpc mono repo for net/rpc fork, go-msgpack, msgpackrpc. (#12311) 2022-02-14 09:45:45 -08:00
testing_catalog.go xds: prefer fed state gateway definitions if they're fresher (#11522) 2021-11-09 16:45:36 +00:00
testing_connect_proxy_config.go
testing_intention.go Cleanup unnecessary normalizing method (#11169) 2021-09-28 15:31:12 -04:00
testing_service_definition.go
txn.go