Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding Azure integration protobuf messages and gRPC methods #48628

Merged
merged 22 commits into from
Dec 2, 2024

Conversation

mvbrock
Copy link
Contributor

@mvbrock mvbrock commented Nov 7, 2024

Part of of https://github.com/gravitational/access-graph/issues/640 to provide visibility of Azure resource in the Access Graph, and originating from the Azure integration POC branch master...mvbrock/azure-integration-poc. This PR creates the protobuf messages and gRPC methods to transmit Azure resources from the Discovery service to the Access Graph, per https://github.com/gravitational/access-graph/issues/1312.

@github-actions github-actions bot requested review from kimlisa and Tener November 7, 2024 20:23
@mvbrock mvbrock added the no-changelog Indicates that a PR does not require a changelog entry label Nov 7, 2024
proto/accessgraph/v1alpha/azure.proto Outdated Show resolved Hide resolved
proto/accessgraph/v1alpha/azure.proto Outdated Show resolved Hide resolved
api/proto/teleport/legacy/types/types.proto Outdated Show resolved Hide resolved
api/proto/teleport/legacy/types/types.proto Outdated Show resolved Hide resolved
proto/accessgraph/v1alpha/azure.proto Outdated Show resolved Hide resolved
proto/accessgraph/v1alpha/azure.proto Show resolved Hide resolved
proto/accessgraph/v1alpha/azure.proto Outdated Show resolved Hide resolved
proto/accessgraph/v1alpha/azure.proto Outdated Show resolved Hide resolved
proto/accessgraph/v1alpha/azure.proto Outdated Show resolved Hide resolved
@mvbrock mvbrock requested review from tigrato and ryanclark November 8, 2024 16:54
@mvbrock mvbrock marked this pull request as draft November 13, 2024 16:55
@mvbrock mvbrock marked this pull request as ready for review November 13, 2024 20:22
@mvbrock mvbrock force-pushed the mvbrock/azure-integration-grpc branch from ba0b726 to fe10587 Compare November 13, 2024 20:30
@mvbrock
Copy link
Contributor Author

mvbrock commented Nov 13, 2024

@tigrato I added a few more items to the proto spec:

  • identities to AzurePrincipals`, which contains sign-in identities that can be used to sign into the account (reference)
  • condition to AzureRoleAssignment, which specifies resource conditions on the role assignment (reference)
  • role_name to AzureRoleDefinition, which contains the role name as separate from the role definition name (reference)
  • data_actions and not_data_actions to AzureRBACPermission, to include permissions on data within a specific resources (reference)

@mvbrock mvbrock force-pushed the mvbrock/azure-integration-grpc branch 2 times, most recently from 6c2c286 to 7d10b7c Compare November 14, 2024 19:52
@mvbrock mvbrock force-pushed the mvbrock/azure-integration-grpc branch from 7d10b7c to 61e626b Compare November 18, 2024 20:38
Copy link
Contributor

@tigrato tigrato left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me once the comments are addressed

proto/accessgraph/v1alpha/access_graph_service.proto Outdated Show resolved Hide resolved
proto/accessgraph/v1alpha/azure.proto Show resolved Hide resolved
string subscription_id = 2;
google.protobuf.Timestamp last_sync_time = 3;
string display_name = 4;
repeated string member_of = 5;
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

what's this member of? are they groups, policies?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

proto/accessgraph/v1alpha/azure.proto Show resolved Hide resolved
proto/accessgraph/v1alpha/azure.proto Show resolved Hide resolved
@mvbrock mvbrock requested a review from tigrato November 27, 2024 19:44
@rosstimothy rosstimothy removed their request for review November 27, 2024 20:12
api/proto/teleport/legacy/types/types.proto Outdated Show resolved Hide resolved
proto/accessgraph/v1alpha/access_graph_service.proto Outdated Show resolved Hide resolved
@mvbrock mvbrock added this pull request to the merge queue Dec 2, 2024
Merged via the queue into master with commit 4b55d7b Dec 2, 2024
42 checks passed
@mvbrock mvbrock deleted the mvbrock/azure-integration-grpc branch December 2, 2024 18:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
no-changelog Indicates that a PR does not require a changelog entry size/md
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants