Skip to content

Authz for gateway and otlp_http inputs#3927

Merged
mmatczuk merged 6 commits intomainfrom
mmt/authz
Jan 29, 2026
Merged

Authz for gateway and otlp_http inputs#3927
mmatczuk merged 6 commits intomainfrom
mmt/authz

Conversation

@mmatczuk
Copy link
Copy Markdown
Contributor

No description provided.

Copy link
Copy Markdown
Contributor

@rockwotj rockwotj left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Very nice

Comment thread internal/gateway/authz.go Outdated
PolicyFile string
}

const authzConfigKey = "rp_gateway_authz_config"
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

can we use a custom type here so it's impossible to get conflicts?

Comment thread internal/impl/gateway/input.go Outdated
)

// Gateway HTTP authorization permission
const gatewayPermission authz.PermissionName = "dataplane_gateway"
Copy link
Copy Markdown
Contributor

@rockwotj rockwotj Jan 22, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

cc: @sago2k8 and @birdayz on the permission name. We probably want to call this dataplane_connect_gateway or dataplane_pipeline_gateway because we have many gateways :)

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm all ears.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

plus one to call it dataplane_pipeline_gateway_invoke

@mmatczuk
Copy link
Copy Markdown
Contributor Author

Rebased, changed permission names, changed auth key type.


bindings:
- role: test.admin
principal: test@example.com
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

these are User: prefixed now

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updated.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, I also noted the plural forms already

@mmatczuk mmatczuk merged commit 7be41c6 into main Jan 29, 2026
5 checks passed
@mmatczuk mmatczuk deleted the mmt/authz branch January 29, 2026 14:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants