v0.1.1

Changelog

040087d GitBook: [main] 17 pages and one asset modified
37037e1 Grafana Provider (#21)
e49e195 Grafana resource and access management (#23)
99bee61 Merge branch 'main' into golangci
9a91365 Merge branch 'main' of github.com:odpf/guardian into refactor
5af799b Merge branch 'refactor' of github.com:odpf/guardian into refactor
09c3887 Merge branch 'update-bq-provider' of https://github.com/odpf/guardian into update-bq-provider
3f04d73 Merge pull request #12 from odpf/shield
3371b8f Merge pull request #13 from odpf/refactor
6caf9f5 Merge pull request #14 from odpf/metabase
2435909 Merge pull request #15 from odpf/metabase-resources
1a2b503 Merge pull request #19 from odpf/golangci
15c4414 Merge pull request #44 from odpf/update-bq-provider
f64ff86 Setup grafana client (#22)
f9f59b9 chore: change release pipeline to use goreleaser (#20)
2e4746c chore: code review changes
be2cbc5 chore: enable fix flag in golangci.yaml
3f2e673 chore: fix linting error
f736655 chore: fix linting issues
0a411fd chore: ignore .vscode config folder (#52)
d70a0b6 chore: linting error
a60edc1 chore: rebase
4854ed9 chore: remove generate dependencies step
f1fee6f chore: setup golanci-linter
81a592e chore: update issue templates
b201dcb chore: update policy command
098bf1a chore: use entrypoint instead of cmd
fa84fdc ci: add brew release (#78)
906c987 ci: add docs pipeline
42976f4 doc: update summary
fd1de7b feat(appeal): add resource_id and role filters in appealRepository.Find
58af0e8 feat(appeal): throw error if pending appeals with the same user, resource_id, and role are still exist
b4977bf feat(policy): additional appeals policy (#66)
d7ea19e feat: add GRPC support (#28)
9a4200f feat: add blocked as one of approval status (#47)
434448e feat: add custom help message from salt (#51)
679a6c9 feat: add datasource resource (#30)
1ba1f6f feat: add details to each resource of an appeal (#49)
b052e8d feat: add filters to list resource api (#61)
96dc341 feat: add flow resource (#29)
ec76278 feat: add gcloud IAM provider (#41)
f0d3521 feat: add iam shield client
6a9a1a5 feat: add metabase provider
5bf2aff feat: add metric resource (#33)
0b4066c feat: add more filters and payload fields in some endpoints (#37)
1485210 feat: add provider config for tableau (#25)
3ceea7f feat: add user specific endpoints for appeals and approvals (#45)
7de4251 feat: add view resource (#31)
4374b39 feat: add workbook resource (#27)
eb34621 feat: added appeal validation (#46)
0e67fd5 feat: approval step non-human/automatic approval resolution
ef4cb10 feat: create metabase client
474b8ad feat: extend http iam provider (#76)
209acdf feat: fetch resources for metabase provider
bf0688b feat: get details apis (#56)
c045c3e feat: guardian cli (#34)
2729816 feat: initialize shield client with new config
901d2d2 feat: make notification messages configurable (#38)
fd655a9 feat: metabase access manager (#16)
835fb25 feat: resolve multiple automatic approvals recursively (#57)
1cc8896 feat: send notification for expiring access reminder (#36)
ff72e40 feat: setup tableau client (#26)
4cc4573 feat: soft delete a resource when deleted from provider (#54)
4d5a54d feat: support http iam client
322b623 feat: update format and guide on policy cmd (#53)
a61b99f feat: update provider command
79a4ca1 fix(provider): change logger type to odpf/salt/log
5b4ae29 fix: add id condition in resource repository GetOne method
8eedb15 fix: add missing pointer when decoding mapstructure
daf2873 fix: changed prefix from project to projects
cffa5b7 fix: fix bigquery tests
ae656eb fix: fix revoke access method logic
aaf5e29 fix: fix wrong returned error value on decrypt
8dd7168 fix: manage access to external gcp projects
1e11b9c fix: move AuthenticatedEmailHeaderKey constant to appeal package
fd86545 fix: omit details and labels on bulk upsert
bdb1e76 fix: omit details and labels on bulk upsert
6f095b5 fix: omit provider credentials in handler level
99ef4e3 fix: pass raw email address approver config value
2a60bac fix: put resource objet to the appeal object used for notification details
ad13d04 fix: put resource objet to the appeal object used for notification details
4291282 fix: remove projectID from provider URN
44879aa fix: rename identitymanager to iam
6c0c27d fix: resolve actor's email from header instead of request body
20c53a2 fix: shield client misc fixes
a09ed29 fix: update bigquery provider
e3da046 merge: move handlers to api package
7f34e6a refactor(logger): migrate logging to use odpf/salt/log (#43)
307c5a2 refactor: add IsHumanApproval method in approval struct
92aecce refactor: add appeal extension validation (#50)
e8675c3 refactor: add policy validations (#48)
bc41472 refactor: change getApprovalSteps to getPolicies
45ccbc3 refactor: distribute config to each package
e5d98a9 refactor: make job intervals confgurable (#55)
10dbe44 refactor: move endpoint initialization to server init
ceef1da refactor: move manager emails struct to iam package
54d340c refactor: move to salt provider
9cc6b3b refactor: remove unnecessary handler interface definitions
8d8f431 refactor: rename IsHumanApproval to IsManualApproval
168412c refactor: simplify notification objects generation

Docker images

• docker pull docker.io/odpf/guardian:0.1.1
• docker pull docker.io/odpf/guardian:v0.1.1-amd64

v0.1.0

Features

• Configurable provider and approval policy via API calls
• Auto-fetch resources from providers
• Access management to BigQuery resources
• Slack notifications to appeal creator or approvers based on the appeal's events