From 45df4d0d9b577fecee798d672695fe24ff57fb1b Mon Sep 17 00:00:00 2001
From: mo khan <mo@mokhan.ca>
Date: Tue, 15 Jul 2025 16:37:08 -0600
Subject: feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.
---
 .../authorization/sparkle/team/entities.json       | 70 ----------------------
 1 file changed, 70 deletions(-)
 delete mode 100644 etc/authzd/staging.gitlab.com/authorization/sparkle/team/entities.json

(limited to 'etc/authzd/staging.gitlab.com')

diff --git a/etc/authzd/staging.gitlab.com/authorization/sparkle/team/entities.json b/etc/authzd/staging.gitlab.com/authorization/sparkle/team/entities.json
deleted file mode 100644
index 5515d6a1..00000000
--- a/etc/authzd/staging.gitlab.com/authorization/sparkle/team/entities.json
+++ /dev/null
@@ -1,70 +0,0 @@
-[
-  {
-    "uid": {
-      "type": "Project",
-      "id": "16781932"
-    },
-    "attrs": {
-      "name": "team",
-      "path": "team",
-      "full_path": "authorization/sparkle/team"
-    },
-    "parents": [
-      {
-        "type": "Group",
-        "id": "24445167"
-      }
-    ]
-  },
-  {
-    "uid": {
-      "type": "User",
-      "id": "1675940"
-    },
-    "attrs": {
-      "username": "mokhax",
-      "access_level": 50
-    },
-    "parents": []
-  },
-  {
-    "uid": {
-      "type": "User",
-      "id": "1676317"
-    },
-    "attrs": {
-      "username": "jayswain",
-      "access_level": 30
-    },
-    "parents": []
-  },
-  {
-    "uid": {
-      "type": "Group",
-      "id": "24445166"
-    },
-    "attrs": {
-      "name": "authorization",
-      "path": "authorization",
-      "full_path": "authorization"
-    },
-    "parents": []
-  },
-  {
-    "uid": {
-      "type": "Group",
-      "id": "24445167"
-    },
-    "attrs": {
-      "name": "sparkle",
-      "path": "sparkle",
-      "full_path": "authorization/sparkle"
-    },
-    "parents": [
-      {
-        "type": "Group",
-        "id": "24445166"
-      }
-    ]
-  }
-]
\ No newline at end of file
-- 
cgit v1.2.3