cheshire/hscloud
1
0
Fork 0
forked from hswaw/hscloud
Code Pull requests Activity
hscloud/hswaw/capacifier/README.md
radex 3ca8454555 hswaw/capacifier: migrate deployment away from mirko 
Change-Id: Ic15945ae0489cfc3026f4cb11123b8e6b575d471
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1688
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-10-09 21:22:55 +00:00

658 B
Raw Permalink Blame History

capacifier

rewrite-in-go of code.hackerspace.pl/tomek/capacifier.

This is one of the oldest API services at the Warsaw hackerspace, and exists solely to provide a generic 'is X a member of Y' functionality. It's generally deprecated (instead OIDC should be used as much as possible), but it's so entrenched into our infra that it's difficult to fully kill.

While the previous implementation had a whole bespoke rule expression language, this implementation is stupidly simple, with all rules hardcoded.

Running

Get the password for the capacifier service account from prod.

Then:

    bazel run //hswaw/capacifier -- --ldap_bind_pw xxx