4:55 a.m.
Hi all,
I'm happy to announce the release of Hawkular Inventory 0.16.0.Final.
The most important change in this release is the alignment of authorization
and tenant selection with the rest of the Hawkular components.
From now on, Inventory no longer depends on Keycloak for
authentication and
instead is using JAAS. Any authenticated user is allowed to do
anything by
default.
The tenant is no longer deduced from the authenticated user but is selected
using the Hawkular-Tenant header (which is therefore required in every request
to inventory).
This moves inventory more into a role of a "backend service" which delegates
more granular authentication and authorization to the application layer above
inventory.
That said, the authorization logic has been factored out and made pluggable
and a mechanism to check per-entity CRUD privileges is still in place. We just
swapped the default implementation for a "permissive" one and changed the way
we figure out the tenant.
Apart from this big change, the following enhancements and fixes have been
included in the release:
* all internal properties, stored as "__foo" in the backend, are now available
for filtering as "foo".
* SwitchElementType filter has been "promoted" to the API so that it is usable
by the API clients.
* Hawkular Commons dependency has been updated to 0.7.2.Final
In 0.17.0.Final we will introduce a new REST API and will deprecate the
current one (most probably by moving it to /hawkular/inventory/deprecated).
This work is well underway but unfortunately didn't make it for 0.16.0.Final.
Huge thanks go out to Peter Palaga who did all the security related changes in
this release and Jirka Kremser who provided the generic mapping of internal
properties.
--
Lukas Krejci
4:56 a.m.
Congratulations guys!
2016-05-24 10:55 GMT+02:00 Lukas Krejci <lkrejci(a)redhat.com>:
Hi all,
I'm happy to announce the release of Hawkular Inventory 0.16.0.Final.
The most important change in this release is the alignment of authorization
and tenant selection with the rest of the Hawkular components.
>From now on, Inventory no longer depends on Keycloak for authentication
and
instead is using JAAS. Any authenticated user is allowed to do anything by
default.
The tenant is no longer deduced from the authenticated user but is selected
using the Hawkular-Tenant header (which is therefore required in every
request
to inventory).
This moves inventory more into a role of a "backend service" which
delegates
more granular authentication and authorization to the application layer
above
inventory.
That said, the authorization logic has been factored out and made pluggable
and a mechanism to check per-entity CRUD privileges is still in place. We
just
swapped the default implementation for a "permissive" one and changed the
way
we figure out the tenant.
Apart from this big change, the following enhancements and fixes have been
included in the release:
* all internal properties, stored as "__foo" in the backend, are now
available
for filtering as "foo".
* SwitchElementType filter has been "promoted" to the API so that it is
usable
by the API clients.
* Hawkular Commons dependency has been updated to 0.7.2.Final
In 0.17.0.Final we will introduce a new REST API and will deprecate the
current one (most probably by moving it to /hawkular/inventory/deprecated).
This work is well underway but unfortunately didn't make it for
0.16.0.Final.
Huge thanks go out to Peter Palaga who did all the security related
changes in
this release and Jirka Kremser who provided the generic mapping of internal
properties.
--
Lukas Krejci
_______________________________________________
hawkular-dev mailing list
hawkular-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/hawkular-dev
--
Thomas Segismont
JBoss ON Engineering Team
4:59 a.m.
Nice !
On Tue, May 24, 2016 at 10:56 AM, Thomas Segismont <tsegismo(a)redhat.com>
wrote:
Congratulations guys!
2016-05-24 10:55 GMT+02:00 Lukas Krejci <lkrejci(a)redhat.com>:
> Hi all,
>
> I'm happy to announce the release of Hawkular Inventory 0.16.0.Final.
>
> The most important change in this release is the alignment of
> authorization
> and tenant selection with the rest of the Hawkular components.
>
> >From now on, Inventory no longer depends on Keycloak for authentication
> and
> instead is using JAAS. Any authenticated user is allowed to do anything by
> default.
>
> The tenant is no longer deduced from the authenticated user but is
> selected
> using the Hawkular-Tenant header (which is therefore required in every
> request
> to inventory).
>
> This moves inventory more into a role of a "backend service" which
> delegates
> more granular authentication and authorization to the application layer
> above
> inventory.
>
> That said, the authorization logic has been factored out and made
> pluggable
> and a mechanism to check per-entity CRUD privileges is still in place. We
> just
> swapped the default implementation for a "permissive" one and changed the
> way
> we figure out the tenant.
>
> Apart from this big change, the following enhancements and fixes have been
> included in the release:
>
> * all internal properties, stored as "__foo" in the backend, are now
> available
> for filtering as "foo".
> * SwitchElementType filter has been "promoted" to the API so that it is
> usable
> by the API clients.
> * Hawkular Commons dependency has been updated to 0.7.2.Final
>
> In 0.17.0.Final we will introduce a new REST API and will deprecate the
> current one (most probably by moving it to
> /hawkular/inventory/deprecated).
> This work is well underway but unfortunately didn't make it for
> 0.16.0.Final.
>
> Huge thanks go out to Peter Palaga who did all the security related
> changes in
> this release and Jirka Kremser who provided the generic mapping of
> internal
> properties.
>
> --
> Lukas Krejci
> _______________________________________________
> hawkular-dev mailing list
> hawkular-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/hawkular-dev
>
--
Thomas Segismont
JBoss ON Engineering Team
_______________________________________________
hawkular-dev mailing list
hawkular-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/hawkular-dev
5:09 a.m.
On 24 May 2016, at 10:55, Lukas Krejci wrote:
I'm happy to announce the release of Hawkular Inventory 0.16.0.Final.
Congrats
In 0.17.0.Final we will introduce a new REST API and will deprecate
the
current one (most probably by moving it to /hawkular/inventory/deprecated).
This way you break all existing clients !
You may either move the new api to a new prefix
Or use content negotiation where the new api gets a content of e.g.
application/hawkular-inventory+json;v2
A request without that content type gets the old endpoints and
semantics.
A request with that content type in the request will access the
new endpoints (which may be separate or overlay the old ones)
with potentially new data formats.
This way clients can upgrade as they want
2891
days inactive
2891
days old
3 comments
4 participants
participants (4)
-
Heiko W.Rupp -
Lukas Krejci -
Thomas Heute -
Thomas Segismont