Skip to content

Commit

Permalink
Set-up repository for 0.2.0 release (#97)
Browse files Browse the repository at this point in the history
* release 0.2.0
  • Loading branch information
chicco785 authored May 4, 2022
1 parent 3e21b03 commit 96a3674
Show file tree
Hide file tree
Showing 5 changed files with 15 additions and 38 deletions.
45 changes: 11 additions & 34 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -267,46 +267,23 @@ To test the rego policy locally:

1. Install the opa client, e.g.:

```bash
cd scripts
curl -L -o opa https://openpolicyagent.org/downloads/v0.37.2/opa_linux_amd64_static
chmod 755 ./opa
```
```bash
cd scripts
curl -L -o opa https://openpolicyagent.org/downloads/v0.37.2/opa_linux_amd64_static
chmod 755 ./opa
```

1. Run:

```bash
$ source .env
$ test_rego.sh
```
```bash
$ source .env
$ test_rego.sh
```

## Status and Roadmap

The current PoC provides already a quite complete validation of the
overall goals. For additional planned features you can
check either the text below, or the pending [issues](issues).

- [ ] Design an API that allow to record policies for tenant.
- [x] Store a policy as a tuple: *who* can access *which* resource to do
*what* (eventually in future also when and how).
A prototype is available, see [anubis-management-api](anubis-management-api).
- [x] Allow to create and manage "service_paths" for tenants.
A prototype is available, see [anubis-management-api](anubis-management-api).
- [x] Have way to define who can define policy for which resource
(it could be based on the same approach)
- [ ] Allows to test policies calling OPA validator
- [ ] Design a translator that
- [x] Coverts the abstract policy who / whom / what
into a OPA compatible format.
A prototype is available, see [anubis-management-api](anubis-management-api).
- [x] Define a set of rules that enforce policies on a specific API.
A prototype is available, see [policy.rego](config/opa-service/policy.rego).
- [ ] Store policies in OPA, instead of retrieve them.
- [ ] Record additional data in the OPA data API as needed
(may not be required)

The [anubis-management-api](anubis-management-api) is a prototype, it needs some
work to be more configurable, e.g. in term of db.
For additional planned features you can
check the pending [issues](https://github.com/orchestracities/anubis/issues).

## Credits

Expand Down
2 changes: 1 addition & 1 deletion RELEASE_NOTES.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Anubis Release Notes

## 0.2-dev
## 0.2

### New features

Expand Down
2 changes: 1 addition & 1 deletion anubis-management-api/src/version.py
Original file line number Diff line number Diff line change
@@ -1 +1 @@
ANUBIS_VERSION = '0.2.0-dev'
ANUBIS_VERSION = '0.2.0'
2 changes: 1 addition & 1 deletion docs/user/walkthrough.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
# Anubis
Anubis is a flexible Policy Enforcement solution that makes easier to reuse security policies across different services, assuming the policies entail the same resource.

## Version: 0.2.0-dev
## Version: 0.2.0

### /v1/tenants/service_paths

Expand Down
2 changes: 1 addition & 1 deletion open-api-spec/openapi.json
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
"info": {
"title": "Anubis",
"description": "Anubis is a flexible Policy Enforcement solution that makes easier to reuse security policies across different services, assuming the policies entail the same resource.",
"version": "0.2.0-dev"
"version": "0.2.0"
},
"paths": {
"/v1/tenants/service_paths": {
Expand Down

0 comments on commit 96a3674

Please sign in to comment.