Harshavardhana and kannappanr
002a205c9c
Fix OPA result response handling ( #7763 )
...
Also update the document with updated rego policy
and updated OPA agent REST API.
This PR is to fix a regression caused by PR #7637
2019-06-10 17:06:32 -07:00
Harshavardhana and kannappanr
2c0b3cadfc
Update go mod with sem versions of our libraries ( #7687 )
2019-05-29 16:35:12 -07:00
kannappanr and GitHub
5ecac91a55
Replace Minio refs in docs with MinIO and links ( #7494 )
2019-04-09 11:39:42 -07:00
Harshavardhana and kannappanr
c3ca954684
Implement AssumeRole API for Minio users ( #7267 )
...
For actual API reference read here
https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html
Documentation is added and updated as well at docs/sts/assume-role.md
Fixes #6381
2019-02-27 17:46:55 -08:00
Harshavardhana and Nitish Tiwari
55ef51a99d
Vendorize all recent changes to minio-go ( #7135 )
...
- Default support for S3 dualstack endpoints (IPv6 support)
- Support granular policy conditionals in List operations
- Support proxy cookies for stickiness
2019-01-23 19:22:09 +05:30
Harshavardhana and GitHub
a2f66abbe8
Update STS API docs with Version query param ( #7071 )
2019-01-16 09:38:32 +05:30
Harshavardhana and kannappanr
2d19011a1d
Add support for AssumeRoleWithWebIdentity ( #6985 )
2019-01-04 13:48:12 -08:00
Harshavardhana and kannappanr
2929c1832d
Add sample STS request/response output ( #6794 )
2018-11-12 07:53:55 -08:00
Harshavardhana and kannappanr
6491dfbbd6
Fix etcd TLS handling ( #6748 )
...
etcd fails to connect if TLS config is set, make TLS
conditional to input arguments instead
2018-11-01 21:41:11 -07:00
Harshavardhana and kannappanr
9fe51e392b
Support etcd TLS certficates ( #6719 )
...
This PR supports two models for etcd certs
- Client-to-server transport security with HTTPS
- Client-to-server authentication with HTTPS client certificates
2018-10-29 11:14:12 -07:00
Harshavardhana and kannappanr
7e879a45d5
Add policy claim support for JWT ( #6660 )
...
This way temporary credentials can use canned
policies on the server without configuring OPA.
2018-10-29 11:08:59 -07:00
Harshavardhana and Nitish Tiwari
bab4c90c45
Fix broken links in docs ( #6700 )
2018-10-25 11:39:31 +05:30
Kaan Kabalak and Dee Koder
e6252dee5a
Fix links not working on Docs site ( #6692 )
...
The relative link paths that weren't working have been changed to
direct links to the corresponding Github pages.
2018-10-24 17:00:26 -07:00
Harshavardhana and GitHub
26b4b466df
Fix a typo in multi-user doc ( #6643 )
2018-10-16 20:39:44 -07:00
Harshavardhana and Dee Koder
143e7fe300
Add etcd support to support STS on gateway mode ( #6531 )
2018-10-12 11:32:18 -07:00
Harshavardhana and kannappanr
54ae364def
Introduce STS client grants API and OPA policy integration ( #6168 )
...
This PR introduces two new features
- AWS STS compatible STS API named AssumeRoleWithClientGrants
```
POST /?Action=AssumeRoleWithClientGrants&Token=<jwt>
```
This API endpoint returns temporary access credentials, access
tokens signature types supported by this API
- RSA keys
- ECDSA keys
Fetches the required public key from the JWKS endpoints, provides
them as rsa or ecdsa public keys.
- External policy engine support, in this case OPA policy engine
- Credentials are stored on disks
2018-10-09 14:00:01 -07:00
