Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/spinnaker/fiat
Spinnaker auth service
https://github.com/spinnaker/fiat
hacktoberfest
Last synced: about 23 hours ago
JSON representation
Spinnaker auth service
- Host: GitHub
- URL: https://github.com/spinnaker/fiat
- Owner: spinnaker
- License: apache-2.0
- Created: 2016-06-14T16:44:56.000Z (over 8 years ago)
- Default Branch: master
- Last Pushed: 2024-11-28T08:26:08.000Z (24 days ago)
- Last Synced: 2024-12-07T18:04:24.403Z (15 days ago)
- Topics: hacktoberfest
- Language: Java
- Homepage:
- Size: 1.96 MB
- Stars: 68
- Watchers: 43
- Forks: 591
- Open Issues: 7
-
Metadata Files:
- Readme: README.md
- License: LICENSE.txt
- Codeowners: CODEOWNERS
- Authors: AUTHORS
Awesome Lists containing this project
README
Spinnaker Auth Service
----------------------
[](https://travis-ci.org/spinnaker/fiat)
```
____ _ ____ __ ___ _ ______ _
/ __/(_)__ __ / _// /_ / _ | ___ _ ___ _ (_)___ /_ __/____ ___ _ _ __ (_)___
/ _/ / / \ \ / _/ / / __/ / __ |/ _ `// _ `// // _ \ _ / / / __// _ `/| |/ // /(_-<
/_/ /_/ /_\_\ /___/ \__/ /_/ |_|\_, / \_,_//_//_//_/( ) /_/ /_/ \_,_/ |___//_//___/
/___/ |/
```
Fiat is the authorization server for the Spinnaker system.
It exposes a RESTful interface for querying the access permissions for a particular user. It currently supports three kinds of resources:
* Accounts
* Applications
* Service Accounts
---
### Accounts
Accounts are setup within Clouddriver and queried by Fiat for its configured `requiredGroupMembership` restrictions.
### Applications
Applications are the combination of config metadata pulled from Front50 and server group names (e.g., application-stack-details). Application permissions sit beside application configuration in S3/Google Cloud Storage.
### Service Accounts
Fiat Service Accounts are groups that act as a user during automated triggers (say, from a GitHub push or Jenkins build). Authorization is built in by making the service account a member of a group specified in `requiredGroupMembership`.
---
### User Role/Authorization Providers
Currently supported user role providers are:
* Google Groups (through a Google Apps for Work organization)
* GitHub Teams
* LDAP
* File based role provider
* SAML Groups
---
### Modular builds
By default, Fiat is built with all authorization providers included. To build only a subset of
providers, use the `includeProviders` flag:
```
./gradlew -PincludeProviders=google-groups,ldap clean build
```
You can view the list of all providers in `gradle.properties`.
### Debugging
To start the JVM in debug mode, set the Java system property `DEBUG=true`:
```
./gradlew -DDEBUG=true
```
The JVM will then listen for a debugger to be attached on port 7103. The JVM will _not_ wait for the debugger
to be attached before starting Fiat; the relevant JVM arguments can be seen and modified as needed in `build.gradle`.