This is an automated email from the ASF dual-hosted git repository.
pinal-shah pushed a change to branch ATLAS-4796_u
in repository https://gitbox.apache.org/repos/asf/atlas.git
from e31ea8dffd ATLAS-4796: Add OpenSearch integration tests and CI
add 520a225acf ATLAS-5400: Fix PUT response when blocking from empty
blocked list (#749)
add ec7dc21d49 ATLAS-5427: atlas-rest Docker image fails to start on Java
8 base: unrecognized --add-opens JVM options (#780)
add eb0f1ee602 ATLAS-5421 : Prevent /api/atlas/admin/importfile from
reading arbitrary server files and enumerating filesystem paths (#783)
add 37059a4657 ATLAS-5428: add iceberg rest catalog model (#782)
add 238f7e9a88 ATLAS-5430: Add SPIFFE header authentication for
service-to-service calls. (#786)
add d04a008d71 ATLAS-5431 Support Header based authentication /
SPIFFE-aware header pre-auth for Atlas rest-notification service. (#787)
add b5faeef419 ATLAS-5432: Fix Enunciate JDK 8 build failure (#788)
add ae1de8f33e Temp-commit to increase CI timeout from 180 to 480
minutes(to be reverted) (#789)
add f0d1d2f582 Revert "Temp-commit to increase CI timeout from 180 to 480
minutes(to be reverted) (#789)" (#792)
add e56cd02894 ATLAS-5425:Implement getEntitiesWithTagChanges for RDBMS
audit repository (#791)
add f9e482f697 ATLAS-5388: Add topic-scoped authorization for REST
notification POST. (#753)
add 8b3f674e0f ATLAS-5432:ATLAS-5425: changes to make fail-fast:false
(#794)
add b34aa847d2 Merge branch 'master' into ATLAS-4796_u
No new revisions were added by this update.
Summary of changes:
.github/workflows/ci.yml | 1 +
addons/models/7000-Iceberg/7010-iceberg_model.json | 391 +++++++++++++++++++++
.../atlas/authorize/AtlasAuthorizationUtils.java | 36 ++
.../atlas/authorize/AtlasAuthorizeConstants.java | 11 +-
.../apache/atlas/authorize/AtlasAuthorizer.java | 4 +
.../atlas/authorize/AtlasNoneAuthorizer.java | 5 +
...sRequest.java => AtlasNotificationRequest.java} | 23 +-
.../org/apache/atlas/authorize/AtlasPrivilege.java | 2 +-
.../authorize/simple/AtlasSimpleAuthorizer.java | 53 +++
.../authorize/simple/AtlasSimpleAuthzPolicy.java | 66 +++-
.../main/resources/atlas-simple-authz-policy.json | 18 +-
.../AtlasAuthorizationUtilsNotificationTest.java | 58 +++
.../simple/AtlasSimpleAuthorizerTest.java | 60 ++++
.../test/resources/atlas-simple-authz-policy.json | 16 +
.../java/org/apache/atlas/utils/SpiffeIdUtil.java | 145 ++++++++
.../org/apache/atlas/utils/SpiffeIdUtilTest.java | 105 ++++++
dev-support/atlas-docker/README.md | 50 ++-
.../atlas/postgres/atlas-application.properties | 7 +
.../atlas-docker/docker-compose.atlas-rest.yml | 1 -
distro/src/conf/atlas-application.properties | 10 +-
distro/src/conf/atlas-simple-authz-policy.json | 18 +-
docs/src/documents/Import-Export/ImportAPI.md | 2 +-
.../documents/Import-Export/ImportAPIOptions.md | 12 +-
.../audit/rdbms/dao/DbEntityAuditDao.java | 14 +
.../resources/META-INF/janus-jpa_named_queries.xml | 8 +
release-log.txt | 5 +
.../audit/rdbms/RdbmsBasedAuditRepository.java | 15 +-
.../apache/atlas/repository/graph/GraphHelper.java | 12 +-
.../repository/store/graph/v1/DeleteHandlerV1.java | 18 +-
.../store/graph/v2/AtlasRelationshipStoreV2.java | 2 +-
.../repository/audit/AuditRepositoryTestBase.java | 58 +++
.../impexp/ImportFilePathValidatorTest.java | 9 +
.../ClassificationPropagationWithTasksTest.java | 79 ++++-
.../rest/web/rest/NotificationREST.java | 4 +-
.../rest/web/security/AtlasSecurityConfig.java | 18 +-
.../common}/filters/AtlasAuthenticationToken.java | 2 +-
.../common}/filters/AtlasHeaderPreAuthFilter.java | 56 ++-
.../common/security/AtlasSecurityConfig.java | 8 +-
webapp/pom.xml | 24 ++
.../atlas/web/security/AtlasSecurityConfig.java | 2 +-
.../web/filters/AtlasHeaderPreAuthFilterTest.java | 104 ++++++
.../web/security/AtlasSecurityConfigTest.java | 2 +-
42 files changed, 1445 insertions(+), 89 deletions(-)
create mode 100644 addons/models/7000-Iceberg/7010-iceberg_model.json
copy
graphdb/api/src/main/java/org/apache/atlas/repository/graphdb/AtlasSchemaViolationException.java
=>
authorization/src/main/java/org/apache/atlas/authorize/AtlasAuthorizeConstants.java
(79%)
copy
authorization/src/main/java/org/apache/atlas/authorize/{AtlasAdminAccessRequest.java
=> AtlasNotificationRequest.java} (53%)
create mode 100644
authorization/src/test/java/org/apache/atlas/authorize/AtlasAuthorizationUtilsNotificationTest.java
create mode 100644
common/src/main/java/org/apache/atlas/utils/SpiffeIdUtil.java
create mode 100644
common/src/test/java/org/apache/atlas/utils/SpiffeIdUtilTest.java
rename {webapp/src/main/java/org/apache/atlas/web =>
server-common/src/main/java/org/apache/atlas/server/common}/filters/AtlasAuthenticationToken.java
(97%)
rename {webapp/src/main/java/org/apache/atlas/web =>
server-common/src/main/java/org/apache/atlas/server/common}/filters/AtlasHeaderPreAuthFilter.java
(73%)
