Repository navigation
feat: implement Phase 4 multi-CSP breadth expansion (GCS, Azure, Federated Identity) - #193
Merged
Merged
Conversation
…rated Identity) - GCS Pilot: added GCP auth, OpenAPI model, storage provider, Castagnoli CRC32c/MD5 checksums, and compatibility tests - Azure Expansion: implemented Queue Storage and Table Storage providers with XML/OData JSON responses and SQLite stores - Azure Cosmos DB: added SQLite-backed DocumentDB REST API for databases, collections, and documents with partition key routing - Federated Identity: added local OIDC issuer (RS256 JWT, discovery, JWKS), Azure AD/GCP STS token exchanges, and STS AssumeRoleWithWebIdentity integration - Protocol Router: updated single-port (4747) sniffing logic to seamlessly distinguish Azure Blob, Queue, Table, Cosmos DB, and Identity endpoints - Documentation & Fidelity: regenerated manifests, updated roadmap, coverage, and service guides
github-actions
Bot
added
documentation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
…e test failures - golangci-lint: wrap rows.Close() in defer func with blank assignment in azuretable and cosmosdb stores - golangci-lint: omit redundant type int from expSec in identity provider - packaging: move identity service from internal/services/iam to dedicated internal/services/identity package - imports: update cmd/devcloud/imports.go via scripts/generate-imports.sh to include identity - exclusions: add Phase 4 non-AWS services to exclusions.json under noBoto3Client and update coverage.md figure to 427
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
This PR implements Phase 4 ("Breadth expansion") of the DevCloud roadmap:
Google Cloud Storage (GCS) Pilot:
internal/auth/gcp_auth.go)api/models/gcp-storage.json) with path routing for bucket/object operations ({object+})test/compatibility/test_gcp_storage.py)Azure Storage Expansion (Queue & Table Storage):
azurequeue): XML response rendering, PutMessage, PeekMessages, GetMessages, DeleteMessage, ClearMessages, GetQueueMetadataazuretable): OData JSON (application/json;odata=minimalmetadata), table CRUD, and entity CRUD operationstest/compatibility/test_azure_queue.pyandtest/compatibility/test_azure_table.pyAzure Cosmos DB NoSQL REST API:
cosmosdb): database CRUD, collection CRUD, and document CRUD with partition key routingtest/compatibility/test_azure_cosmos.pyFederated Identity Playground:
internal/services/iam/oidc_issuer.go) with/.well-known/openid-configuration,/jwks.json, and/tokenminting signed RS256 JWTs/common/oauth2/v2.0/token)/v1/sts/token)sts:AssumeRoleWithWebIdentity): validated against minting issuer and claims extractiontest/compatibility/test_federated_identity.pySingle-Port Sniffing & Routing Updates:
internal/gateway/protocol.goto seamlessly disambiguateblob,azurequeue,azuretable,cosmosdb, andidentitywithout collisionsDocumentation & Manifests Synchronization:
docs/roadmap.md,docs/coverage.md,docs/architecture.md,README.md, anddocs/fidelity-manifest.mddocs/services/gcp.mdanddocs/services/federated-identity.mdVerification
go test ./internal/auth ./internal/gateway ./internal/config ./internal/services/...(All passed)pytest test/compatibility/test_{azure_blob,azure_queue,azure_table,azure_cosmos,gcp_storage,federated_identity}.py(14/14 passed)pytest test/compatibility/test_{iam_sts,s3,sqs,dynamodb}.py(86/86 passed)go test ./cmd/devcloud(Passed with manifest consistency gates)