diff options
| author | mo khan <mo@mokhan.ca> | 2025-07-15 16:37:08 -0600 |
|---|---|---|
| committer | mo khan <mo@mokhan.ca> | 2025-07-17 16:30:22 -0600 |
| commit | 45df4d0d9b577fecee798d672695fe24ff57fb1b (patch) | |
| tree | 1b99bf645035b58e0d6db08c7a83521f41f7a75b /etc/authzd/staging.gitlab.com | |
| parent | f94f79608393d4ab127db63cc41668445ef6b243 (diff) | |
feat: migrate from Cedar to SpiceDB authorization system
This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.
Key changes:
- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization
This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.
Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.
Diffstat (limited to 'etc/authzd/staging.gitlab.com')
| -rw-r--r-- | etc/authzd/staging.gitlab.com/authorization/sparkle/team/entities.json | 70 |
1 files changed, 0 insertions, 70 deletions
diff --git a/etc/authzd/staging.gitlab.com/authorization/sparkle/team/entities.json b/etc/authzd/staging.gitlab.com/authorization/sparkle/team/entities.json deleted file mode 100644 index 5515d6a1..00000000 --- a/etc/authzd/staging.gitlab.com/authorization/sparkle/team/entities.json +++ /dev/null @@ -1,70 +0,0 @@ -[ - { - "uid": { - "type": "Project", - "id": "16781932" - }, - "attrs": { - "name": "team", - "path": "team", - "full_path": "authorization/sparkle/team" - }, - "parents": [ - { - "type": "Group", - "id": "24445167" - } - ] - }, - { - "uid": { - "type": "User", - "id": "1675940" - }, - "attrs": { - "username": "mokhax", - "access_level": 50 - }, - "parents": [] - }, - { - "uid": { - "type": "User", - "id": "1676317" - }, - "attrs": { - "username": "jayswain", - "access_level": 30 - }, - "parents": [] - }, - { - "uid": { - "type": "Group", - "id": "24445166" - }, - "attrs": { - "name": "authorization", - "path": "authorization", - "full_path": "authorization" - }, - "parents": [] - }, - { - "uid": { - "type": "Group", - "id": "24445167" - }, - "attrs": { - "name": "sparkle", - "path": "sparkle", - "full_path": "authorization/sparkle" - }, - "parents": [ - { - "type": "Group", - "id": "24445166" - } - ] - } -]
\ No newline at end of file |
