Skip to main content
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [keti-dev] How to deploy standalone keti without using bash command
- For validating a JWT, you can use UAA's APIs or something like https://github.com/predix/spring-jwt-validation-filter for local validation.  I am assuming you will use Keti for policies which apply other rules beyond the static permissions present in the token.
- Yes, Keti has REST APIs for policy updates. (see https://github.com/eclipse/keti/blob/master/service/src/main/java/org/eclipse/keti/acs/service/policy/admin/PolicyManagementController.java .  The project has swagger annotations, but no documentation has been published base on them.)  Also, there is no UI based tool for editing polcies yet.

Hope that helps

On Tue, Jul 16, 2019 at 9:24 PM Arun Gupta <guptaarun11@xxxxxxxxx> wrote:
Thanks for your quick response Sanjeev. 

 In our application We have spring boot REST micro services, cloudfoundry UAA and the react UI. We want to use/integrate Keti ACS with cloudfoundry UAA to our application for ABAC.

As per architecture, we would like to implement  below workflow.  

1. User logs into the system using cloudfoundry UAA and get the token.
2. Send this token to Keti ACS for evaluation. 
3. If action is "PERMIT", then allow the user to access the web application or else show the appropriate message.

Also is there any tool or API which we can integrate with our system to create/update/delete policies. Kindly suggest.



Kind  Regards,
Arun

On Wed, Jul 17, 2019 at 5:14 AM Sanjeev Chopra <sanjeevxchopra@xxxxxxxxx> wrote:
Sure Arun - please post what you need here.

On Tue, Jul 16, 2019 at 11:57 AM Arun Gupta <guptaarun11@xxxxxxxxx> wrote:
Hey Guys, I managed to run ACS and UAA locally. Could you kindly provide me some help to integrate ACS with spring boot application?

Regards,
Arun

On Sun, May 19, 2019 at 10:13 PM Sanjeev Chopra <sanjeevxchopra@xxxxxxxxx> wrote:
If you are trying to step through Keti code, I suggest you start UAA as usual on command line. Then start Keti from your IDE - for environment settings needed, please refer to the appropriate start-acs* script in the service folder.

Step 2 in your email is for starting UAA, so it doesnt change - btw I think you reversed the source/destination of the copy in your email by mistake? 

On Wed, May 15, 2019 at 8:05 AM Arun Gupta <guptaarun11@xxxxxxxxx> wrote:

I would like to deploy/run keti as a standalone java/spring application. What are the things I have to do to achieve this? I am using keti with cloudfoundry uaa 

  1. 1. I used configured below environment variables from intellij

  2. copied uaa.yml from cloudfoundry uaa to ./acs-integration-tests/uaa/config/uaa.yml location
  3. follow  https://github.com/eclipse/keti/blob/master/docs/keti-demo.org to setup and integration with uaa.  Where to place uaa,.yml file?    

PORT_OFFSET=0;UAA_LOCAL_PORT=8080;ACS_LOCAL_PORT=8181;ZAC_LOCAL_PORT=8888;ACS_URL=http://localhost:${ACS_LOCAL_PORT};ZAC_URL=http://localhost:${ZAC_LOCAL_PORT};ACS_TESTING_UAA=http://localhost:${UAA_LOCAL_PORT}/uaa;ENCRYPTION_KEY=1234567890123456;ZAC_UAA_URL=http://localhost:${UAA_LOCAL_PORT}/uaa;ACS_UAA_URL=http://localhost:${UAA_LOCAL_PORT}/uaa;SPRING_PROFILES_ACTIVE=envDbConfig,public,simple-cache;DB_DRIVER_CLASS_NAME=org.postgresql.Driver;DB_URL=jdbc:postgresql:acs;DB_USERNAME=postgres;DB_PASSWORD=postgres

image.png


_______________________________________________
keti-dev mailing list
keti-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://www.eclipse.org/mailman/listinfo/keti-dev
_______________________________________________
keti-dev mailing list
keti-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://www.eclipse.org/mailman/listinfo/keti-dev
_______________________________________________
keti-dev mailing list
keti-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://www.eclipse.org/mailman/listinfo/keti-dev
_______________________________________________
keti-dev mailing list
keti-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://www.eclipse.org/mailman/listinfo/keti-dev
_______________________________________________
keti-dev mailing list
keti-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://www.eclipse.org/mailman/listinfo/keti-dev

Back to the top