Skip to content

Add enable_jit_role_sync config#10478

Merged
lucasmrod merged 1 commit intomainfrom
8411-add-enable_jit_role_sync-config
Mar 14, 2023
Merged

Add enable_jit_role_sync config#10478
lucasmrod merged 1 commit intomainfrom
8411-add-enable_jit_role_sync-config

Conversation

@lucasmrod
Copy link
Copy Markdown
Member

#8411

We decided to only update roles for existing accounts if enabled by a new setting (disabled by default) sso_settings.enable_jit_role_sync.

  • [ ] Changes file added for user-visible changes in changes/ or orbit/changes/.
    See Changes files for more information.
  • [ ] Documented any API changes (docs/Using-Fleet/REST-API.md or docs/Contributing/API-for-contributors.md)
  • [ ] Documented any permissions changes
  • [ ] Input data is properly validated, SELECT * is avoided, SQL injection is prevented (using placeholders for values in statements)
  • [ ] Added support on fleet's osquery simulator cmd/osquery-perf for new osquery data ingestion features.
  • Added/updated tests
  • Manual QA for all new/changed functionality
    • For Orbit and Fleet Desktop changes:
      • [ ] Manual QA must be performed in the three main OSs, macOS, Windows and Linux.
      • [ ] Auto-update manual QA, from released version of component to new version (see tools/tuf/test).

@lucasmrod lucasmrod requested review from a team and ksatter as code owners March 14, 2023 19:48
@lucasmrod lucasmrod requested a review from lukeheath March 14, 2023 19:48
Comment thread orbit/pkg/update/nudge.go

if cfg.NudgeConfig == nil {
log.Info().Msg("empty nudge config, removing nudge as target")
log.Debug().Msg("empty nudge config, removing nudge as target")
Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@roperzh Let me know if this is a-ok, it's a bit noisy as INFO. If this is needed I can revert.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thank you!

@lucasmrod lucasmrod changed the title Add enable_jit_role_sync config Add enable_jit_role_sync config Mar 14, 2023
@lucasmrod lucasmrod merged commit 6d918d1 into main Mar 14, 2023
@lucasmrod lucasmrod deleted the 8411-add-enable_jit_role_sync-config branch March 14, 2023 20:17
lucasmrod added a commit that referenced this pull request Mar 15, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants