From 96a36747dfa4bbc900118fdd01d93daad77a770f Mon Sep 17 00:00:00 2001 From: "Federico M. Facca" Date: Wed, 4 May 2022 10:24:10 +0200 Subject: [PATCH] Set-up repository for 0.2.0 release (#97) * release 0.2.0 --- README.md | 45 +++++++--------------------- RELEASE_NOTES.md | 2 +- anubis-management-api/src/version.py | 2 +- docs/user/walkthrough.md | 2 +- open-api-spec/openapi.json | 2 +- 5 files changed, 15 insertions(+), 38 deletions(-) diff --git a/README.md b/README.md index f9b941d..e2b96fc 100644 --- a/README.md +++ b/README.md @@ -267,46 +267,23 @@ To test the rego policy locally: 1. Install the opa client, e.g.: - ```bash - cd scripts - curl -L -o opa https://openpolicyagent.org/downloads/v0.37.2/opa_linux_amd64_static - chmod 755 ./opa - ``` + ```bash + cd scripts + curl -L -o opa https://openpolicyagent.org/downloads/v0.37.2/opa_linux_amd64_static + chmod 755 ./opa + ``` 1. Run: - ```bash - $ source .env - $ test_rego.sh - ``` + ```bash + $ source .env + $ test_rego.sh + ``` ## Status and Roadmap -The current PoC provides already a quite complete validation of the -overall goals. For additional planned features you can -check either the text below, or the pending [issues](issues). - -- [ ] Design an API that allow to record policies for tenant. - - [x] Store a policy as a tuple: *who* can access *which* resource to do - *what* (eventually in future also when and how). - A prototype is available, see [anubis-management-api](anubis-management-api). - - [x] Allow to create and manage "service_paths" for tenants. - A prototype is available, see [anubis-management-api](anubis-management-api). - - [x] Have way to define who can define policy for which resource - (it could be based on the same approach) - - [ ] Allows to test policies calling OPA validator -- [ ] Design a translator that - - [x] Coverts the abstract policy who / whom / what - into a OPA compatible format. - A prototype is available, see [anubis-management-api](anubis-management-api). - - [x] Define a set of rules that enforce policies on a specific API. - A prototype is available, see [policy.rego](config/opa-service/policy.rego). - - [ ] Store policies in OPA, instead of retrieve them. - - [ ] Record additional data in the OPA data API as needed - (may not be required) - -The [anubis-management-api](anubis-management-api) is a prototype, it needs some -work to be more configurable, e.g. in term of db. +For additional planned features you can +check the pending [issues](https://github.com/orchestracities/anubis/issues). ## Credits diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md index 23dfe04..6265de7 100644 --- a/RELEASE_NOTES.md +++ b/RELEASE_NOTES.md @@ -1,6 +1,6 @@ # Anubis Release Notes -## 0.2-dev +## 0.2 ### New features diff --git a/anubis-management-api/src/version.py b/anubis-management-api/src/version.py index 5674d0a..b8500c7 100644 --- a/anubis-management-api/src/version.py +++ b/anubis-management-api/src/version.py @@ -1 +1 @@ -ANUBIS_VERSION = '0.2.0-dev' +ANUBIS_VERSION = '0.2.0' diff --git a/docs/user/walkthrough.md b/docs/user/walkthrough.md index 8b1070e..fd4598a 100644 --- a/docs/user/walkthrough.md +++ b/docs/user/walkthrough.md @@ -2,7 +2,7 @@ # Anubis Anubis is a flexible Policy Enforcement solution that makes easier to reuse security policies across different services, assuming the policies entail the same resource. -## Version: 0.2.0-dev +## Version: 0.2.0 ### /v1/tenants/service_paths diff --git a/open-api-spec/openapi.json b/open-api-spec/openapi.json index f73b9e2..5c67a6e 100644 --- a/open-api-spec/openapi.json +++ b/open-api-spec/openapi.json @@ -3,7 +3,7 @@ "info": { "title": "Anubis", "description": "Anubis is a flexible Policy Enforcement solution that makes easier to reuse security policies across different services, assuming the policies entail the same resource.", - "version": "0.2.0-dev" + "version": "0.2.0" }, "paths": { "/v1/tenants/service_paths": {