Repository navigation
feat: web UI, LDAP sign-in, topology and host search - #246
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Everything for 0.34.0 except the version bump. Details are in the CHANGELOG's Unreleased section and the linked docs.
Added
server.ui.assets_dir): the image builds unified-ui v0.1.0 in (UI_REFindocker/Dockerfile) and the bundled config turns it on. Unknown API paths stay a JSON 404, and/metricsis the Metrics page only for a browser asking for HTML.docs/ui.md.server.ui.ldap), with access rules mapping groups or users to admin or restricted scopes. Failed attempts are throttled and every failure takes the same time. LDAP without any API key refuses to start or to reload.docs/ldap-login.md.?next=on login.server.ui.homesets where a login with nonextlands (/with a UI). Logout passesnexton to the login page.GET /api/v1/topology: the federation map, asking peers recursively with per-depth timeouts. Restricted keys see each peer's version only.GET /api/v1/hosts/search: find a host across sources and views from the cache./auth(who is signed in, CSRF token),/settings,/credentials,/endpoints/{id}/counts. Process metrics (CPU from/proc/self/stat, open files, uptime).Changed
/serves it instead of redirecting to Swagger.Fixed
/app/projectsis now owned by the unprivileged user (it failed withPermission denied, 0.33.0 included).session_ttl_secondsis listed as restart-only.Checks run locally:
cargo fmt --check,cargo clippy --all-targets -- -D warnings,cargo test(770 passed),cargo deny check,cargo audit, and the image built and run (UI pages, assets,/metricsnegotiation, API 404).