jcoffey-dev
3eb0f4c589
RBAC (api/internal/authz) is live on /query and /dashboards, backed by a new enterprise/ module (session issuance, audit logging, RBAC storage, OIDC/SAML protocol wiring) that core never imports -- only calls over HTTP. Found and fixed a real cross-tenant vulnerability in dashboards (no tenant_id filtering at all) while writing the threat model doc. Two things are explicitly NOT done, documented rather than hidden: tenant isolation for log data itself (/query still shares one ClickHouse connection and Tantivy index across every tenant -- RBAC controls who can query, not what a query can see), and human SSO login (protocol wiring exists, no HTTP handler calls it yet). See docs/security/threat-model.md and docs/phase-4-runbook.md. Also adds deploy/ (Go Operator + Helm chart, validated offline only -- no cluster was reachable in this environment).
93 lines
2.0 KiB
Go
93 lines
2.0 KiB
Go
// Hand-written, not `controller-gen object:headerFile=...` generated --
|
|
// no controller-gen binary available in this environment (see
|
|
// groupversion_info.go's doc comment). Kept under the conventional
|
|
// zz_generated.deepcopy.go name so its purpose is recognizable, and
|
|
// covered by api_test.go's round-trip tests since a hand-written
|
|
// DeepCopy is exactly the kind of code a typo silently breaks.
|
|
package v1alpha1
|
|
|
|
import (
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
"k8s.io/apimachinery/pkg/runtime"
|
|
)
|
|
|
|
func (in *TenantSpec) DeepCopy() *TenantSpec {
|
|
if in == nil {
|
|
return nil
|
|
}
|
|
out := new(TenantSpec)
|
|
*out = *in
|
|
return out
|
|
}
|
|
|
|
func (in *TenantStatus) DeepCopyInto(out *TenantStatus) {
|
|
*out = *in
|
|
if in.Conditions != nil {
|
|
out.Conditions = make([]metav1.Condition, len(in.Conditions))
|
|
for i := range in.Conditions {
|
|
in.Conditions[i].DeepCopyInto(&out.Conditions[i])
|
|
}
|
|
}
|
|
}
|
|
|
|
func (in *TenantStatus) DeepCopy() *TenantStatus {
|
|
if in == nil {
|
|
return nil
|
|
}
|
|
out := new(TenantStatus)
|
|
in.DeepCopyInto(out)
|
|
return out
|
|
}
|
|
|
|
func (in *Tenant) DeepCopyInto(out *Tenant) {
|
|
*out = *in
|
|
out.TypeMeta = in.TypeMeta
|
|
in.ObjectMeta.DeepCopyInto(&out.ObjectMeta)
|
|
out.Spec = in.Spec
|
|
in.Status.DeepCopyInto(&out.Status)
|
|
}
|
|
|
|
func (in *Tenant) DeepCopy() *Tenant {
|
|
if in == nil {
|
|
return nil
|
|
}
|
|
out := new(Tenant)
|
|
in.DeepCopyInto(out)
|
|
return out
|
|
}
|
|
|
|
func (in *Tenant) DeepCopyObject() runtime.Object {
|
|
if c := in.DeepCopy(); c != nil {
|
|
return c
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (in *TenantList) DeepCopyInto(out *TenantList) {
|
|
*out = *in
|
|
out.TypeMeta = in.TypeMeta
|
|
in.ListMeta.DeepCopyInto(&out.ListMeta)
|
|
if in.Items != nil {
|
|
out.Items = make([]Tenant, len(in.Items))
|
|
for i := range in.Items {
|
|
in.Items[i].DeepCopyInto(&out.Items[i])
|
|
}
|
|
}
|
|
}
|
|
|
|
func (in *TenantList) DeepCopy() *TenantList {
|
|
if in == nil {
|
|
return nil
|
|
}
|
|
out := new(TenantList)
|
|
in.DeepCopyInto(out)
|
|
return out
|
|
}
|
|
|
|
func (in *TenantList) DeepCopyObject() runtime.Object {
|
|
if c := in.DeepCopy(); c != nil {
|
|
return c
|
|
}
|
|
return nil
|
|
}
|