Skip to content

Feature/sprint 01 security foundation#1

Merged
fenar merged 4 commits intomainfrom
feature/sprint-01-security-foundation
Dec 29, 2025
Merged

Feature/sprint 01 security foundation#1
fenar merged 4 commits intomainfrom
feature/sprint-01-security-foundation

Conversation

@fenar
Copy link
Contributor

@fenar fenar commented Dec 29, 2025

No description provided.

fenar and others added 4 commits December 29, 2025 12:52
ISSUE-010: Add OAuth 2.0 authentication middleware
ISSUE-011: Add RBAC authorization service
ISSUE-015: Add WebSocket authentication

Changes:
- Add OAuth middleware for JWT validation via OpenShift
- Add RBAC service with role/permission mapping
- Add WebSocket authentication before connection acceptance
- Integrate authentication middleware with FastAPI app
- Add comprehensive tests for all security components

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
ISSUE-002: Add Kubernetes Secrets credential storage
ISSUE-003: Add credential validation service
ISSUE-004: Add cluster component discovery

Changes:
- Add CredentialStore with AES-256-GCM encryption
- Add CredentialValidator for real cluster API validation
- Add DiscoveryService for Prometheus/Loki/Tempo/GPU detection
- Update ClusterCredentials model with token/basic auth support
- Update AuthType enum with TOKEN, BASIC, CERTIFICATE types
- Add comprehensive tests for all new services

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
ISSUE-012: Add authenticated Prometheus/Thanos client

Changes:
- Add PrometheusClient with Bearer, Basic, and mTLS auth support
- Add QueryCache for Redis-based query result caching
- Add MetricsCollector service for multi-cluster metric queries
- Support concurrent cluster queries with result aggregation
- Add health check endpoint for Prometheus availability

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
…ox testing

- Add cryptography and kubernetes dependencies to cluster-registry
- Add python-jose dependency to realtime-streaming for JWT auth
- Update prometheus_collector to skip TLS verification in dev mode
- Use pod's service account token for Prometheus auth in dev mode

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@fenar fenar merged commit 9084f87 into main Dec 29, 2025
0 of 3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant