* feat: Decide upstream based on user's unix group membership
If a username is not defined, groupname is parsed. Check if the
user is part of that group and route them to the associated host
defined in the config file for the yaml plugin
* style: fix formatting with gofmt
* feat: Look up user groups only when groupname defined in yaml config
* fix: inefficient assignment because of unused var
* feat: fallback to next rule on group lookup failure
Instead of failing on group lookup errors, the matcher now skips the
groupname rule and proceeds to the next, eventually failing through to
the catchall rule.
* feat: test cases for group based routing in yaml plugin
* Revert "feat: fallback to next rule on group lookup failure"
This reverts commit 622ee9f1eb3157d04f57c068179bb74de8db3a1f.
Handles the error returned by getUserGroups instead of ignoring it,
to prevent potential runtime issues when user lookup fail
* feat: Check if a user is known to the system before group lookup
This will let the rule matching logic skip to the next pipe in the yaml
config when a user is not found on the system.
Note the variable name change from user to username to avoid ambiguity
dur to name collision with os/user package.
* feat: Avoid redundant user lookup
* feat: Improve error handling for user and group lookup failures
* feat: Use appropriate test user name for group routing
* Refactor plugin.proto and pluginbase.go to add support for metadata in connection context
* go fmt
* move test plugin out
* Refactor Dockerfile to build test plugin in e2e/testplugin directory
* mv testplugin -> testgrpcplugin
* add test for connection metadata
* enable logging to stdout
* Refactor Dockerfile to build test plugin in e2e/testplugin directory
* introduce plugin skel to reuse code
* Refactor code to use libplugin.NewSkelPlugin for plugin/kubernetes/main.go
Add YAML Plugin skel.go for plugin/yaml
* Fix code scanning alert no. 6: Incorrect conversion between integer types
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
* fix gpt
* fjx password handling in SkelPlugin and skelpipeToWrapper
* go fmt
* Refactor Docker plugin to use skelpipe wrapper
* Refactor skel.go to use container username instead of client username
* revert yaml test order
* fix public and password mess up
* Refactor working dir to use skel
* revert deleted file
* Refactor skel.go to remove unused code and simplify MatchConn function
* Refactor skel.go to read userKnownHosts file in KnownHosts function
* remove workingdirbykey from goreleaser
* Refactor workingdir.go to use libplugin.SplitHostPortForSSH for parsing host and port
* Refactor skel.go to remove unused code and simplify MatchConn function
* merge doc into workingdir
---------
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
* add coverage for go proxy
* Refactor CLI flag name for allowed proxy addresses
* Refactor YAML schema to support multiple authorized keys and known hosts
* add testcases
* Refactor YAML schema to support multiple authorized keys and known hosts
* go fmt
* go fmt
* Add PipeCreateErrorCallback to handle pipe creation errors
* Add test for FailtobanPipeCreateFail
* Fix missing newline at end of file in pluginbase.go
