publish manifest for todo

.github/workflows/ci.yaml

@@ -25,14 +25,14 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - 
+      -
         uses: actions/checkout@v3
-      - 
+      -
         name: Setup Go
         uses: actions/setup-go@v4
         with:
           go-version: ${{ env.GO_VERSION }}
-      - 
+      -
         name: Setup caching
         uses: actions/cache@v3
         with:
@@ -42,26 +42,26 @@ jobs:
           key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
           restore-keys: |
             ${{ runner.os }}-go-
-      - 
+      -
         name: Build
         run: |
           go build -o ./bin/topaz ./cmd/topaz/
           go build -o ./bin/topazd ./cmd/topazd/
-      - 
+      -
         name: Lint
         uses: golangci/golangci-lint-action@v3
         with:
           version: v1.52.2
-      - 
+      -
         name: Test Setup
         uses: autero1/[email protected]
         with:
           gotestsum_version: 1.10.0
-      - 
+      -
         name: Test
         run: |
           gotestsum --format short-verbose -- -count=1 -v -timeout=240s -coverprofile=cover.out -coverpkg=./... ./...
-      - 
+      -
         name: Upload code coverage
         uses: shogo82148/actions-goveralls@v1
         continue-on-error: true
@@ -73,7 +73,7 @@ jobs:
     # always push when ref is a tag
     if: github.event_name == 'push' && ( github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/heads/release-') || startsWith(github.ref, 'refs/heads/dev-') || startsWith(github.ref, 'refs/tags/v') )
     steps:
-      - 
+      -
         name: Read Configuration
         uses: hashicorp/[email protected]
         id: vault
@@ -85,16 +85,16 @@ jobs:
             kv/data/github  "USERNAME"            | DOCKER_USERNAME;
             kv/data/github  "DOCKER_PUSH_TOKEN"   | DOCKER_PASSWORD;
             kv/data/github  "READ_WRITE_TOKEN"    | READ_WRITE_TOKEN;
-      - 
+      -
         uses: actions/checkout@v3
         with:
           fetch-depth: 0
-      - 
+      -
         name: Setup Go
         uses: actions/setup-go@v4
         with:
           go-version: ${{ env.GO_VERSION }}
-      - 
+      -
         name: Setup caching
         uses: actions/cache@v3
         with:
@@ -106,15 +106,15 @@ jobs:
             ${{ runner.os }}-go-
       -
         name: Setup QEMU
-        uses: docker/setup-qemu-action@v2          
-      - 
+        uses: docker/setup-qemu-action@v2
+      -
         name: Login to GitHub Packages Docker Registry
         uses: docker/login-action@v2
         with:
           registry: https://ghcr.io
           username: ${{ env.DOCKER_USERNAME }}
           password: ${{ env.DOCKER_PASSWORD }}
-      - 
+      -
         name: Docker SSH Setup
         run: |
           mkdir -p $HOME/.ssh
@@ -125,35 +125,35 @@ jobs:
           git config --global user.name "Aserto Bot"
           eval `ssh-agent`
           ssh-add $HOME/.ssh/id_rsa
-      - 
+      -
         name: Wait for tests to succeed
         uses: fountainhead/[email protected]
         id: wait-for-tests
         with:
           token: ${{ env.READ_WRITE_TOKEN }}
           checkName: test
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
-      - 
+      -
         name: Stop if tests fail
         if: steps.wait-for-tests.outputs.conclusion != 'success'
         run: exit 1
-      - 
+      -
         name: Push image to GitHub Container Registry
         uses: goreleaser/goreleaser-action@v4
         with:
           distribution: goreleaser
-          version: v1.18.2
+          version: v1.20.0
           args: release --clean --snapshot
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}        
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   release:
     needs: [test, push]
     runs-on: ubuntu-latest
     # Only release when ref is a tag
     if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
     steps:
-      - 
+      -
         name: Read Configuration
         uses: hashicorp/[email protected]
         id: vault
@@ -167,16 +167,16 @@ jobs:
             kv/data/github  "READ_WRITE_TOKEN"                        | READ_WRITE_TOKEN;
             kv/data/github  "ASERTO_TAP"                              | ASERTO_TAP;
             kv/data/gcp     "SERVICE_ACCOUNT_GITHUB_ACTIONS_RELEASE"  | SERVICE_ACCOUNT_GITHUB_ACTIONS_RELEASE;
-      - 
+      -
         uses: actions/checkout@v3
         with:
           fetch-depth: 0
-      - 
+      -
         name: Setup Go
         uses: actions/setup-go@v4
         with:
           go-version: ${{ env.GO_VERSION }}
-      - 
+      -
         name: Setup caching
         uses: actions/cache@v3
         with:
@@ -188,8 +188,8 @@ jobs:
             ${{ runner.os }}-go-
       -
         name: Setup QEMU
-        uses: docker/setup-qemu-action@v2          
-      - 
+        uses: docker/setup-qemu-action@v2
+      -
         name: Login to GitHub Packages Docker Registry
         uses: docker/login-action@v2
         with:
@@ -215,7 +215,7 @@ jobs:
         name: Write Version Info
         run: |
           git describe --tags > VERSION.txt
-      - 
+      -
         name: Release
         uses: goreleaser/goreleaser-action@v4
         env:
@@ -224,9 +224,22 @@ jobs:
           GOOGLE_APPLICATION_CREDENTIALS: /tmp/gs.json
         with:
           distribution: goreleaser
-          version: v1.18.2
+          version: v1.20.0
           args: release --clean
-
+
+      - name: Archive deployment examples
+        run: |
+          cd assets/sidecar-deployment && zip topaz_deployment_examples.zip *.yaml
+
+      - name: Upload deployment examples
+        uses: svenstaro/upload-release-action@v2
+        with:
+          repo_token: ${{ secrets.GITHUB_TOKEN }}
+          file: assets/sidecar-deployment
+          asset_name: topaz_deployment_examples.zip
+          tag: ${{ github.ref }}
+          overwrite: false
+
   msi:
     needs: release
     runs-on: windows-latest

.goreleaser.yml

@@ -59,7 +59,6 @@ builds:
 archives:
   # https://goreleaser.com/customization/archive/
   - format: zip
-    rlcp: true
     builds:
     - topaz
     - topazd
@@ -68,7 +67,7 @@ archives:
       - README.md
     name_template: >-
       topaz_{{ .Os }}_{{- if eq .Arch "amd64" }}x86_64{{- else }}{{ .Arch }}{{ end }}
-    
+
 checksum:
   # https://goreleaser.com/customization/checksum/
   name_template: "checksums.txt"
@@ -119,7 +118,7 @@ brews:
   -
     name: topaz
 
-    tap:
+    repository:
       owner: "{{ .Env.ORG }}"
       name: homebrew-tap
       token: "{{ .Env.ASERTO_TAP }}"
@@ -163,7 +162,7 @@ dockers:
       - "--label=org.opencontainers.image.source=https://github.com/{{ .Env.ORG }}/{{ .Env.REPO }}"
       - "--label=org.opencontainers.image.description=Topaz Authorizer"
       - "--label=org.opencontainers.image.licenses=Apache-2.0"
-  
+
   - use: buildx
     goos: linux
     goarch: arm64

Depfile

@@ -8,13 +8,13 @@ go:
     version: "v0.5.0"
   goreleaser:
     importPath: github.com/goreleaser/goreleaser
-    version: "v1.18.2"
+    version: "v1.20.0"
   gotestsum:
     importPath: "gotest.tools/gotestsum"
-    version: "v1.10.0"
+    version: "v1.10.1"
   golangci-lint:
     importPath: "github.com/golangci/golangci-lint/cmd/golangci-lint"
-    version: "v1.52.2"
+    version: "v1.53.3"
   goimports:
     importPath: "golang.org/x/tools/cmd/goimports"
     version: "latest"

assets/citadel-objects.json

@@ -121,7 +121,8 @@
       "properties": {
         "email": "[email protected]",
         "picture": "https://github.com/aserto-demo/contoso-ad-sample/raw/main/UserImages/Rick%20Sanchez.jpg",
-        "status": "USER_STATUS_ACTIVE"
+        "status": "USER_STATUS_ACTIVE",
+        "roles": ["admin", "evil_genius"]
       }
     },
     {
@@ -131,7 +132,8 @@
       "properties": {
         "email": "[email protected]",
         "picture": "https://github.com/aserto-demo/contoso-ad-sample/raw/main/UserImages/Morty%20Smith.jpg",
-        "status": "USER_STATUS_ACTIVE"
+        "status": "USER_STATUS_ACTIVE",
+        "roles": ["editor"]
       }
     },
     {
@@ -141,7 +143,8 @@
       "properties": {
         "email": "[email protected]",
         "picture": "https://github.com/aserto-demo/contoso-ad-sample/raw/main/UserImages/Summer%20Smith.jpg",
-        "status": "USER_STATUS_ACTIVE"
+        "status": "USER_STATUS_ACTIVE",
+        "roles": ["editor"]
       }
     },
     {
@@ -151,7 +154,8 @@
       "properties": {
         "email": "[email protected]",
         "picture": "https://github.com/aserto-demo/contoso-ad-sample/raw/main/UserImages/Beth%20Smith.jpg",
-        "status": "USER_STATUS_ACTIVE"
+        "status": "USER_STATUS_ACTIVE",
+        "roles": ["viewer"]
       }
     },
     {
@@ -161,7 +165,8 @@
       "properties": {
         "email": "[email protected]",
         "picture": "https://github.com/aserto-demo/contoso-ad-sample/raw/main/UserImages/Jerry%20Smith.jpg",
-        "status": "USER_STATUS_ACTIVE"
+        "status": "USER_STATUS_ACTIVE",
+        "roles": ["viewer"]
       }
     }
   ]

assets/citadel-relations.json

@@ -165,6 +165,50 @@
         "key": "editor"
       }
     },
+    {
+      "subject": {
+        "type": "user",
+        "key": "[email protected]"
+      },
+      "relation": "manager",
+      "object": {
+        "type": "user",
+        "key": "[email protected]"
+      }
+    },
+    {
+      "subject": {
+        "type": "user",
+        "key": "[email protected]"
+      },
+      "relation": "manager",
+      "object": {
+        "type": "user",
+        "key": "[email protected]"
+      }
+    },
+    {
+      "subject": {
+        "type": "user",
+        "key": "[email protected]"
+      },
+      "relation": "manager",
+      "object": {
+        "type": "user",
+        "key": "[email protected]"
+      }
+    },
+    {
+      "subject": {
+        "type": "user",
+        "key": "[email protected]"
+      },
+      "relation": "manager",
+      "object": {
+        "type": "user",
+        "key": "[email protected]"
+      }
+    },
     {
       "subject": {
         "type": "user",

assets/manifest-todo.yaml

@@ -0,0 +1,28 @@
+# yaml-language-server: $schema=https://www.topaz.sh/schema/manifest.json
+---
+### filename: manifest-v2.yaml ###
+### description: migrated v2 seed model as v3 manifest ###
+
+### model
+model:
+  version: 3
+
+### object type definitions
+types:
+  ### display_name: User ###
+  user:
+    relations:
+      ### display_name: user:manager ###
+      manager: user
+
+  ### display_name: Group ###
+  group:
+    relations:
+      ### display_name: group:member ###
+      member: user | group#member
+
+  ### display_name: Identity ###
+  identity:
+    relations:
+      ### display_name: identity:identifier ###
+      identifier: user