Skip to content

feat(authz): add authorization mode setting (off/dryRun/enforce) - #13212

Open
sk593 wants to merge 11 commits into
mainfrom
sk593-authz-modes-foundation
Open

sk593 wants to merge 11 commits into
mainfrom
sk593-authz-modes-foundation

fix(authz): remove free-text denial reasons

2c78669
Select commit
Loading
Failed to load commit list.
DCO-2 / DCO succeeded Oct 16, 2026 in 0s

Check passed!

All commits are signed off, the check passed.

Summary


Sha Message Pass or fail reason
🟢 084d8f3 test(authz): add tests for authorization mode sett... Valid sign-off found
🟢 e7a4e84 feat(authz): add authorization mode setting (off/d... Valid sign-off found
🟢 1276f1a test(authz): cover fail-closed mode, empty codes, ... Valid sign-off found
🟢 dcfe10c fix(authz): fail closed on unknown mode and omit o... Valid sign-off found
🟢 03e68d7 test(chart): require authz config checksum annotat... Valid sign-off found
🟢 acdd2ce fix(chart): restart services when the authorizatio... Valid sign-off found
🟢 5c34401 docs(authz): note that enforce mode does not block... Valid sign-off found
🟢 c9a11d8 test(authz): cover missing global.rbac and enforce... Valid sign-off found
🟢 a277d8d fix(authz): log denials in enforce mode Valid sign-off found
🟢 92129b4 test(authz): require denial logs without free-text... Valid sign-off found
🟢 2c78669 fix(authz): remove free-text denial reasons Valid sign-off found