open-consul/agent/consul
R.B. Boyer 9542fdc9bc acl: adding Roles to Tokens (#5514)
Roles are named and can express the same bundle of permissions that can
currently be assigned to a Token (lists of Policies and Service
Identities). The difference with a Role is that it not itself a bearer
token, but just another entity that can be tied to a Token.

This lets an operator potentially curate a set of smaller reusable
Policies and compose them together into reusable Roles, rather than
always exploding that same list of Policies on any Token that needs
similar permissions.

This also refactors the acl replication code to be semi-generic to avoid
3x copypasta.
2019-04-26 14:49:12 -05:00
..
autopilot
fsm acl: adding Roles to Tokens (#5514) 2019-04-26 14:49:12 -05:00
prepared_query
state acl: adding Roles to Tokens (#5514) 2019-04-26 14:49:12 -05:00
acl.go acl: adding Roles to Tokens (#5514) 2019-04-26 14:49:12 -05:00
acl_client.go acl: adding Roles to Tokens (#5514) 2019-04-26 14:49:12 -05:00
acl_endpoint.go acl: adding Roles to Tokens (#5514) 2019-04-26 14:49:12 -05:00
acl_endpoint_legacy.go acl: adding Roles to Tokens (#5514) 2019-04-26 14:49:12 -05:00
acl_endpoint_test.go acl: adding Roles to Tokens (#5514) 2019-04-26 14:49:12 -05:00
acl_replication.go acl: adding Roles to Tokens (#5514) 2019-04-26 14:49:12 -05:00
acl_replication_legacy.go acl: adding Roles to Tokens (#5514) 2019-04-26 14:49:12 -05:00
acl_replication_legacy_test.go acl: adding Roles to Tokens (#5514) 2019-04-26 14:49:12 -05:00
acl_replication_test.go acl: adding Roles to Tokens (#5514) 2019-04-26 14:49:12 -05:00
acl_replication_types.go acl: adding Roles to Tokens (#5514) 2019-04-26 14:49:12 -05:00
acl_server.go acl: adding Roles to Tokens (#5514) 2019-04-26 14:49:12 -05:00
acl_test.go acl: adding Roles to Tokens (#5514) 2019-04-26 14:49:12 -05:00
acl_token_exp.go acl: tokens can be created with an optional expiration time (#5353) 2019-04-26 14:47:51 -05:00
acl_token_exp_test.go acl: tokens can be created with an optional expiration time (#5353) 2019-04-26 14:47:51 -05:00
autopilot.go
autopilot_oss.go
autopilot_test.go
catalog_endpoint.go
catalog_endpoint_test.go
client.go
client_serf.go
client_test.go
config.go acl: adding Roles to Tokens (#5514) 2019-04-26 14:49:12 -05:00
config_endpoint.go Implement config entry replication (#5706) 2019-04-26 13:38:39 -04:00
config_endpoint_test.go Implement config entry replication (#5706) 2019-04-26 13:38:39 -04:00
config_replication.go Implement config entry replication (#5706) 2019-04-26 13:38:39 -04:00
config_replication_test.go Implement config entry replication (#5706) 2019-04-26 13:38:39 -04:00
connect_ca_endpoint.go
connect_ca_endpoint_test.go
consul_ca_delegate.go
coordinate_endpoint.go
coordinate_endpoint_test.go
enterprise_client_oss.go
enterprise_server_oss.go
filter.go
filter_test.go
flood.go
health_endpoint.go
health_endpoint_test.go
helper_test.go acl: adding Roles to Tokens (#5514) 2019-04-26 14:49:12 -05:00
intention_endpoint.go
intention_endpoint_test.go
internal_endpoint.go
internal_endpoint_test.go
issue_test.go
kvs_endpoint.go
kvs_endpoint_test.go
leader.go acl: adding Roles to Tokens (#5514) 2019-04-26 14:49:12 -05:00
leader_oss.go
leader_test.go Implement bootstrapping proxy defaults from the config file (#5714) 2019-04-26 14:25:03 -04:00
merge.go
merge_test.go
operator_autopilot_endpoint.go
operator_autopilot_endpoint_test.go
operator_endpoint.go
operator_raft_endpoint.go
operator_raft_endpoint_test.go
prepared_query_endpoint.go
prepared_query_endpoint_test.go
raft_rpc.go
replication.go Implement config entry replication (#5706) 2019-04-26 13:38:39 -04:00
rpc.go
rpc_test.go
rtt.go
rtt_test.go
segment_oss.go
serf_test.go
server.go acl: tokens can be created with an optional expiration time (#5353) 2019-04-26 14:47:51 -05:00
server_lookup.go
server_lookup_test.go
server_oss.go
server_serf.go
server_test.go Implement bootstrapping proxy defaults from the config file (#5714) 2019-04-26 14:25:03 -04:00
session_endpoint.go
session_endpoint_test.go
session_timers.go
session_timers_test.go
session_ttl.go
session_ttl_test.go
snapshot_endpoint.go
snapshot_endpoint_test.go
stats_fetcher.go
stats_fetcher_test.go
status_endpoint.go
status_endpoint_test.go
txn_endpoint.go
txn_endpoint_test.go
util.go
util_test.go