Skip to content

feat(end-to-end-security): add superset OPA#407

Merged
sweb merged 5 commits into
mainfrom
feat/e2e-superset-opa
Jul 10, 2026
Merged

feat(end-to-end-security): add superset OPA#407
sweb merged 5 commits into
mainfrom
feat/e2e-superset-opa

Conversation

@sweb

@sweb sweb commented Jun 5, 2026

Copy link
Copy Markdown
Member

This extends the demo to use OPA also for Superset. The result is that you can add a new user in Keycloak, add it to a group and upon login, the user will have access to the datasets / charts / dashboards of that group.

This requires a new / adjusted dump - e.g. we shouldn't need Gamma_extended anymore as this is now handled by rego rules.

@sweb
sweb force-pushed the feat/e2e-superset-opa branch 2 times, most recently from 406b26d to 6564a81 Compare July 6, 2026 09:39
@sweb
sweb force-pushed the feat/e2e-superset-opa branch from 6564a81 to fe8881a Compare July 6, 2026 11:17
@sweb
sweb marked this pull request as ready for review July 6, 2026 11:49
@sweb
sweb force-pushed the feat/e2e-superset-opa branch from 354ab4a to b607bdd Compare July 6, 2026 11:52
@sbernauer sbernauer moved this to Development: Waiting for Review in Stackable Engineering Jul 6, 2026
Comment thread stacks/end-to-end-security/keycloak-realm-config.yaml
Comment thread stacks/end-to-end-security/postgres_superset_dump.sql
NickLarsenNZ
NickLarsenNZ previously approved these changes Jul 6, 2026

@NickLarsenNZ NickLarsenNZ left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@NickLarsenNZ NickLarsenNZ moved this from Development: Waiting for Review to Development: In Review in Stackable Engineering Jul 6, 2026
sbernauer
sbernauer previously approved these changes Jul 6, 2026

@sbernauer sbernauer left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM as well

Comment thread stacks/end-to-end-security/keycloak-realm-config.yaml Outdated
@sweb
sweb dismissed stale reviews from sbernauer and NickLarsenNZ via b4bd598 July 10, 2026 08:04
@NickLarsenNZ
NickLarsenNZ self-requested a review July 10, 2026 08:54

@NickLarsenNZ NickLarsenNZ left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@sweb
sweb merged commit 5b4167c into main Jul 10, 2026
2 checks passed
@sweb
sweb deleted the feat/e2e-superset-opa branch July 10, 2026 09:05
@sweb
sweb restored the feat/e2e-superset-opa branch July 10, 2026 09:05
@sweb
sweb deleted the feat/e2e-superset-opa branch July 10, 2026 09:05
@Techassi Techassi moved this from Development: In Review to Development: Done in Stackable Engineering Jul 14, 2026
@lfrancke lfrancke moved this from Development: Done to Done in Stackable Engineering Jul 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

Development

Successfully merging this pull request may close these issues.

5 participants