Skip to content

Enable vault token#1585

Merged
madhav165 merged 1 commit intomainfrom
enable_vault
Dec 12, 2025
Merged

Enable vault token#1585
madhav165 merged 1 commit intomainfrom
enable_vault

Conversation

@ChrisPC-39
Copy link
Copy Markdown
Collaborator

Enable vault plugin in plugins/config.yaml

Signed-off-by: Chris PC <chrispc@li-4dc2bf4c-325d-11b2-a85c-b68e8b1fc307.ibm.com>
Copy link
Copy Markdown
Collaborator

@madhav165 madhav165 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Minor change to enable vault plugin

@madhav165 madhav165 merged commit 4437ded into main Dec 12, 2025
52 checks passed
@madhav165 madhav165 deleted the enable_vault branch December 12, 2025 11:34
crivetimihai added a commit that referenced this pull request Dec 12, 2025
* mTLS support

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* feat: added mTLS support to plugin mcp servers.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: added streamable http support to runtime_mtls.py

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: updated plugin server runtime.py to support mTLS. removed chuck-mcp-runtime

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: switched chuk-mcp-runtime with mcp python sdk to support mTLS.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: updated llmguard and opa plugins to install the mcp official sdk.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* feat: added health check to plugin server runtimes.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: added health check for mtls plugin server

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: removed chuk-mcp-runtime, replaced with official mcp library.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: runtime tests.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* feat: initial revision of configurable plugin builds.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* docs: added mtls plugin documentation.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: linting issues.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: install templates with cli, fix error messages.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: mtls and stdio test cases.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: remove commented code.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* docs: and examples

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: docstring issues

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* tests: added unit tests and more commenting.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* tests: add tests. Fix doc tests.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: change to make python the default.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: bandit issue.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: updated key length to 4096

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: utility function for verifying certificates.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: added utility class for ssl certificate verification.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* test: added certificate validation tests.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* feat: added support for cert-manager in k8s.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* tests: skipped tls doctest.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* test: fix doctests.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: added example cert-manager issuer file.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* docs: updated mtls documentation to point to plugins mtls documentation.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: forgot to add deploy-k8s-cert-manager.yaml

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* feat: add registry pushing support. clean up pydantics.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: fixes to support Openshift, and support enabling plugins in k8s.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* feat: added openshift route file for installing route to mcpgateway admin site.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* chore: fix vulture issues

Signed-off-by: Frederico Araujo <frederico.araujo@ibm.com>

* chore: fix yamlint issues

Signed-off-by: Frederico Araujo <frederico.araujo@ibm.com>

* test: add unit tests

Signed-off-by: Frederico Araujo <frederico.araujo@ibm.com>

* chore: doctests coverage

Signed-off-by: Frederico Araujo <frederico.araujo@ibm.com>

* tests: add doctests

Signed-off-by: Frederico Araujo <frederico.araujo@ibm.com>

* docs: simplified docs and added an example configuration at the top.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: doctest issue.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* docs: added more doctests.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* docs: added more doctests.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* docs: omit builder classes from doctest coverage analysis.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* Roadmap update

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* lint: fix flake8 issues.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* Minor fix to OAuth token expiry logic (#1579)

* minor fix to oauth token expiry logic

Signed-off-by: Madhav Kandukuri <madhav165@gmail.com>

* Fix tests in test_prompt_service
Signed-off-by: Madhav Kandukuri <madhav165@gmail.com>

* Fix doctest
Signed-off-by: Madhav Kandukuri <madhav165@gmail.com>

* Fix failing test
Signed-off-by: Madhav Kandukuri <madhav165@gmail.com>

---------

Signed-off-by: Madhav Kandukuri <madhav165@gmail.com>

* fix uuid migration for postgresql (#1584)

Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>

* Enabling HTTPS with Encrypted SSL Keys via Passphrase Support (#1578)

* added ssl key manager

Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>

* update gunicorn config to support ssl cert passphrase

Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>

* update dockercompose with passphrase varaible

Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>

* targets supporitng certs with passphrase

Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>

* check passphrase

Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>

* fix location

Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>

* update test cases

Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>

* Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>

* linting

Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>

---------

Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>

* added test resource functionality (#1575)

* added test resource functionality

removed content part from edit & view screens of resource

updated message displayed on UI when edit/view/test buttons are clicked for inactive resource

Signed-off-by: Satya <tsp.0713@gmail.com>

* updated ResourceTemplate id datatype to str

updated isActive for resource in admin.js based out of enable

allaignment correction made code for sse connection under transport.py

Signed-off-by: Satya <tsp.0713@gmail.com>

* fixing tests

Signed-off-by: Satya <tsp.0713@gmail.com>

* rebase, conflicts resolved

Signed-off-by: Satya <tsp.0713@gmail.com>

---------

Signed-off-by: Satya <tsp.0713@gmail.com>

* Fix in toolops tab UI code to call admin tools endpoint to get list of tools. (#1573)

* fixed page refresh issue when added mcp server from server list page.

* Minor update to toolops read me

---------

Co-authored-by: Neelamadhav Gantayat <neelamadhav@in.ibm.com>

* Correlation ID for Unified Request Tracking (#1443)

* Add correlation ID system for unified request tracking

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* replace undefined bearer_scheme with security

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* lint & test fixes

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* fixes for lint

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* pylint fixes

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* test fixes

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* Bandit fixes

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* fix for test

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* addiitonal changes for UI & middleware

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* fix bug

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* dropdown mismatch fix

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* fixes for UI

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* UI fixes for adding user details

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* admin ui fixes

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* flake8 fixes

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* test fixes

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* lint fixes

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* fix for doctest

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* auth issue fixes

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* update for failing tests

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* flake8 fixes

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* flake8 issue

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* prevent SQLite rollback error on validation failures

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* false positive issues

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* fix lint issue

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* update alembic file

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* updated alembic revision

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* changes in table schema

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* gateway service fixes

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* updated tests

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* fix doctest coverage

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* fix: resolve rebase conflicts and fix test issues for correlation ID PR

- Fix Alembic migration to chain after main branch head (356a2d4eed6f)
- Fix is_active/enabled attribute access in services (server, prompt, resource, export)
- Update export_service to use getattr with fallback for backwards compatibility
- Add db.refresh before return in tool_service.register_tool to handle
  session expiry after audit/logging commits
- Add SessionLocal patches in conftest.py for audit_trail_service and log_aggregator
- Update test assertions for expected db.refresh call count
- Apply isort import ordering fixes across service files

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* Linting

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* fix: ensure cross-database compatibility for migrations and update tag fuzz test

- Use sa.false() instead of string literals for Boolean server_defaults
  in migration (SQLite uses 0/1, not "false"/"true")
- Use sa.text("'{}'") for JSON server_defaults to ensure proper quoting
- Update fuzz test to expect dict tags format {id, label} instead of strings

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

---------

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>
Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
Co-authored-by: Mihai Criveti <crivetimihai@gmail.com>

* Enable vault token (#1585)

Signed-off-by: Chris PC <chrispc@li-4dc2bf4c-325d-11b2-a85c-b68e8b1fc307.ibm.com>
Co-authored-by: Chris PC <chrispc@li-4dc2bf4c-325d-11b2-a85c-b68e8b1fc307.ibm.com>

* [Security Feature]: RBAC Plugin using Cedar (#1499)

* Prompt and tool hooks implementation for cedar plugin

Signed-off-by: Shriti Priya <shritip@ibm.com>

* Adding hook implementation and test cases for resource hooks

Signed-off-by: Shriti Priya <shritip@ibm.com>

* test cases for all hooks in cedar and custom_dsl policy langauge modes

Signed-off-by: Shriti Priya <shritip@ibm.com>

* Adding documentation in code

Signed-off-by: Shriti Priya <shritip@ibm.com>

* Files for external server

Signed-off-by: Shriti Priya <shritip@ibm.com>

* Adding documentation

Signed-off-by: Shriti Priya <shritip@ibm.com>

* Documentation update

Signed-off-by: Shriti Priya <shritip@ibm.com>

* update documentation

Signed-off-by: Shriti Priya <shritip@ibm.com>

* Updating documentation

Signed-off-by: Shriti Priya <shritip@ibm.com>

* Adding env variables for transport and host in env.template

Signed-off-by: Shriti Priya <shritip@ibm.com>

* Solving yaml lint issues

Signed-off-by: Shriti Priya <shritip@ibm.com>

* reverting changes in opa

Signed-off-by: Shriti Priya <shritip@ibm.com>

* fixing pylint and flake8 issues

Signed-off-by: Shriti Priya <shritip@ibm.com>

* fixing flake8 issues

Signed-off-by: Shriti Priya <shritip@ibm.com>

* fixing lint issues

Signed-off-by: Shriti Priya <shritip@ibm.com>

* manifest update and flake8 issues resolved

Signed-off-by: Shriti Priya <shritip@ibm.com>

* init in test update

Signed-off-by: Shriti Priya <shritip@ibm.com>

* Adding new line

Signed-off-by: Shriti Priya <shritip@ibm.com>

* documentation update and error handling

Signed-off-by: Shriti Priya <shritip@ibm.com>

* fixing lint issues

Signed-off-by: Shriti Priya <shritip@ibm.com>

* fixing flake8 issues

Signed-off-by: Shriti Priya <shritip@ibm.com>

* fix(cedar-plugin): improve code quality and formatting

- Fix import order (move urllib.parse to standard library section)
- Replace unnecessary elif after return with if statements
- Apply black and isort formatting to plugin and tests

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* Linting

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

---------

Signed-off-by: Shriti Priya <shritip@ibm.com>
Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
Co-authored-by: Mihai Criveti <crivetimihai@gmail.com>

* fix: add nosec comments for subprocess calls in builder module

Add bandit nosec comments to suppress B404, B603, and B607 warnings
for legitimate subprocess calls in the deployment builder module.
These subprocess calls are used for git operations and container/
kubernetes commands which are necessary for the deployment tool.

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* Rebase and lint

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

---------

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
Signed-off-by: Teryl Taylor <terylt@ibm.com>
Signed-off-by: Frederico Araujo <frederico.araujo@ibm.com>
Signed-off-by: Madhav Kandukuri <madhav165@gmail.com>
Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>
Signed-off-by: Satya <tsp.0713@gmail.com>
Signed-off-by: Shoumi <shoumimukherjee@gmail.com>
Signed-off-by: Chris PC <chrispc@li-4dc2bf4c-325d-11b2-a85c-b68e8b1fc307.ibm.com>
Signed-off-by: Shriti Priya <shritip@ibm.com>
Co-authored-by: Mihai Criveti <crivetimihai@gmail.com>
Co-authored-by: Teryl Taylor <terylt@ibm.com>
Co-authored-by: Frederico Araujo <frederico.araujo@ibm.com>
Co-authored-by: Madhav Kandukuri <madhav165@users.noreply.github.com>
Co-authored-by: Keval Mahajan <65884586+kevalmahajan@users.noreply.github.com>
Co-authored-by: Satya <tsp.0713@gmail.com>
Co-authored-by: Jay Bandlamudi <jay_bandlamudi@in.ibm.com>
Co-authored-by: Neelamadhav Gantayat <neelamadhav@in.ibm.com>
Co-authored-by: Shoumi M <55126549+shoummu1@users.noreply.github.com>
Co-authored-by: ChrisPC-39 <60066382+ChrisPC-39@users.noreply.github.com>
Co-authored-by: Chris PC <chrispc@li-4dc2bf4c-325d-11b2-a85c-b68e8b1fc307.ibm.com>
Co-authored-by: Shriti Priya <shritip@ibm.com>
kcostell06 pushed a commit to kcostell06/mcp-context-forge that referenced this pull request Feb 24, 2026
Signed-off-by: Chris PC <chrispc@li-4dc2bf4c-325d-11b2-a85c-b68e8b1fc307.ibm.com>
Co-authored-by: Chris PC <chrispc@li-4dc2bf4c-325d-11b2-a85c-b68e8b1fc307.ibm.com>
kcostell06 pushed a commit to kcostell06/mcp-context-forge that referenced this pull request Feb 24, 2026
…1207)

* mTLS support

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* feat: added mTLS support to plugin mcp servers.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: added streamable http support to runtime_mtls.py

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: updated plugin server runtime.py to support mTLS. removed chuck-mcp-runtime

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: switched chuk-mcp-runtime with mcp python sdk to support mTLS.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: updated llmguard and opa plugins to install the mcp official sdk.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* feat: added health check to plugin server runtimes.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: added health check for mtls plugin server

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: removed chuk-mcp-runtime, replaced with official mcp library.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: runtime tests.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* feat: initial revision of configurable plugin builds.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* docs: added mtls plugin documentation.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: linting issues.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: install templates with cli, fix error messages.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: mtls and stdio test cases.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: remove commented code.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* docs: and examples

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: docstring issues

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* tests: added unit tests and more commenting.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* tests: add tests. Fix doc tests.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: change to make python the default.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: bandit issue.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: updated key length to 4096

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: utility function for verifying certificates.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: added utility class for ssl certificate verification.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* test: added certificate validation tests.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* feat: added support for cert-manager in k8s.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* tests: skipped tls doctest.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* test: fix doctests.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: added example cert-manager issuer file.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* docs: updated mtls documentation to point to plugins mtls documentation.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: forgot to add deploy-k8s-cert-manager.yaml

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* feat: add registry pushing support. clean up pydantics.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: fixes to support Openshift, and support enabling plugins in k8s.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* feat: added openshift route file for installing route to mcpgateway admin site.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* chore: fix vulture issues

Signed-off-by: Frederico Araujo <frederico.araujo@ibm.com>

* chore: fix yamlint issues

Signed-off-by: Frederico Araujo <frederico.araujo@ibm.com>

* test: add unit tests

Signed-off-by: Frederico Araujo <frederico.araujo@ibm.com>

* chore: doctests coverage

Signed-off-by: Frederico Araujo <frederico.araujo@ibm.com>

* tests: add doctests

Signed-off-by: Frederico Araujo <frederico.araujo@ibm.com>

* docs: simplified docs and added an example configuration at the top.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* fix: doctest issue.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* docs: added more doctests.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* docs: added more doctests.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* docs: omit builder classes from doctest coverage analysis.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* Roadmap update

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* lint: fix flake8 issues.

Signed-off-by: Teryl Taylor <terylt@ibm.com>

* Minor fix to OAuth token expiry logic (IBM#1579)

* minor fix to oauth token expiry logic

Signed-off-by: Madhav Kandukuri <madhav165@gmail.com>

* Fix tests in test_prompt_service
Signed-off-by: Madhav Kandukuri <madhav165@gmail.com>

* Fix doctest
Signed-off-by: Madhav Kandukuri <madhav165@gmail.com>

* Fix failing test
Signed-off-by: Madhav Kandukuri <madhav165@gmail.com>

---------

Signed-off-by: Madhav Kandukuri <madhav165@gmail.com>

* fix uuid migration for postgresql (IBM#1584)

Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>

* Enabling HTTPS with Encrypted SSL Keys via Passphrase Support (IBM#1578)

* added ssl key manager

Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>

* update gunicorn config to support ssl cert passphrase

Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>

* update dockercompose with passphrase varaible

Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>

* targets supporitng certs with passphrase

Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>

* check passphrase

Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>

* fix location

Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>

* update test cases

Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>

* Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>

* linting

Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>

---------

Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>

* added test resource functionality (IBM#1575)

* added test resource functionality

removed content part from edit & view screens of resource

updated message displayed on UI when edit/view/test buttons are clicked for inactive resource

Signed-off-by: Satya <tsp.0713@gmail.com>

* updated ResourceTemplate id datatype to str

updated isActive for resource in admin.js based out of enable

allaignment correction made code for sse connection under transport.py

Signed-off-by: Satya <tsp.0713@gmail.com>

* fixing tests

Signed-off-by: Satya <tsp.0713@gmail.com>

* rebase, conflicts resolved

Signed-off-by: Satya <tsp.0713@gmail.com>

---------

Signed-off-by: Satya <tsp.0713@gmail.com>

* Fix in toolops tab UI code to call admin tools endpoint to get list of tools. (IBM#1573)

* fixed page refresh issue when added mcp server from server list page.

* Minor update to toolops read me

---------

Co-authored-by: Neelamadhav Gantayat <neelamadhav@in.ibm.com>

* Correlation ID for Unified Request Tracking (IBM#1443)

* Add correlation ID system for unified request tracking

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* replace undefined bearer_scheme with security

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* lint & test fixes

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* fixes for lint

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* pylint fixes

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* test fixes

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* Bandit fixes

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* fix for test

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* addiitonal changes for UI & middleware

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* fix bug

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* dropdown mismatch fix

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* fixes for UI

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* UI fixes for adding user details

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* admin ui fixes

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* flake8 fixes

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* test fixes

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* lint fixes

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* fix for doctest

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* auth issue fixes

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* update for failing tests

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* flake8 fixes

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* flake8 issue

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* prevent SQLite rollback error on validation failures

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* false positive issues

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* fix lint issue

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* update alembic file

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* updated alembic revision

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* changes in table schema

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* gateway service fixes

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* updated tests

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* fix doctest coverage

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>

* fix: resolve rebase conflicts and fix test issues for correlation ID PR

- Fix Alembic migration to chain after main branch head (356a2d4eed6f)
- Fix is_active/enabled attribute access in services (server, prompt, resource, export)
- Update export_service to use getattr with fallback for backwards compatibility
- Add db.refresh before return in tool_service.register_tool to handle
  session expiry after audit/logging commits
- Add SessionLocal patches in conftest.py for audit_trail_service and log_aggregator
- Update test assertions for expected db.refresh call count
- Apply isort import ordering fixes across service files

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* Linting

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* fix: ensure cross-database compatibility for migrations and update tag fuzz test

- Use sa.false() instead of string literals for Boolean server_defaults
  in migration (SQLite uses 0/1, not "false"/"true")
- Use sa.text("'{}'") for JSON server_defaults to ensure proper quoting
- Update fuzz test to expect dict tags format {id, label} instead of strings

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

---------

Signed-off-by: Shoumi <shoumimukherjee@gmail.com>
Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
Co-authored-by: Mihai Criveti <crivetimihai@gmail.com>

* Enable vault token (IBM#1585)

Signed-off-by: Chris PC <chrispc@li-4dc2bf4c-325d-11b2-a85c-b68e8b1fc307.ibm.com>
Co-authored-by: Chris PC <chrispc@li-4dc2bf4c-325d-11b2-a85c-b68e8b1fc307.ibm.com>

* [Security Feature]: RBAC Plugin using Cedar (IBM#1499)

* Prompt and tool hooks implementation for cedar plugin

Signed-off-by: Shriti Priya <shritip@ibm.com>

* Adding hook implementation and test cases for resource hooks

Signed-off-by: Shriti Priya <shritip@ibm.com>

* test cases for all hooks in cedar and custom_dsl policy langauge modes

Signed-off-by: Shriti Priya <shritip@ibm.com>

* Adding documentation in code

Signed-off-by: Shriti Priya <shritip@ibm.com>

* Files for external server

Signed-off-by: Shriti Priya <shritip@ibm.com>

* Adding documentation

Signed-off-by: Shriti Priya <shritip@ibm.com>

* Documentation update

Signed-off-by: Shriti Priya <shritip@ibm.com>

* update documentation

Signed-off-by: Shriti Priya <shritip@ibm.com>

* Updating documentation

Signed-off-by: Shriti Priya <shritip@ibm.com>

* Adding env variables for transport and host in env.template

Signed-off-by: Shriti Priya <shritip@ibm.com>

* Solving yaml lint issues

Signed-off-by: Shriti Priya <shritip@ibm.com>

* reverting changes in opa

Signed-off-by: Shriti Priya <shritip@ibm.com>

* fixing pylint and flake8 issues

Signed-off-by: Shriti Priya <shritip@ibm.com>

* fixing flake8 issues

Signed-off-by: Shriti Priya <shritip@ibm.com>

* fixing lint issues

Signed-off-by: Shriti Priya <shritip@ibm.com>

* manifest update and flake8 issues resolved

Signed-off-by: Shriti Priya <shritip@ibm.com>

* init in test update

Signed-off-by: Shriti Priya <shritip@ibm.com>

* Adding new line

Signed-off-by: Shriti Priya <shritip@ibm.com>

* documentation update and error handling

Signed-off-by: Shriti Priya <shritip@ibm.com>

* fixing lint issues

Signed-off-by: Shriti Priya <shritip@ibm.com>

* fixing flake8 issues

Signed-off-by: Shriti Priya <shritip@ibm.com>

* fix(cedar-plugin): improve code quality and formatting

- Fix import order (move urllib.parse to standard library section)
- Replace unnecessary elif after return with if statements
- Apply black and isort formatting to plugin and tests

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* Linting

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

---------

Signed-off-by: Shriti Priya <shritip@ibm.com>
Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
Co-authored-by: Mihai Criveti <crivetimihai@gmail.com>

* fix: add nosec comments for subprocess calls in builder module

Add bandit nosec comments to suppress B404, B603, and B607 warnings
for legitimate subprocess calls in the deployment builder module.
These subprocess calls are used for git operations and container/
kubernetes commands which are necessary for the deployment tool.

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* Rebase and lint

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

---------

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
Signed-off-by: Teryl Taylor <terylt@ibm.com>
Signed-off-by: Frederico Araujo <frederico.araujo@ibm.com>
Signed-off-by: Madhav Kandukuri <madhav165@gmail.com>
Signed-off-by: Keval Mahajan <mahajankeval23@gmail.com>
Signed-off-by: Satya <tsp.0713@gmail.com>
Signed-off-by: Shoumi <shoumimukherjee@gmail.com>
Signed-off-by: Chris PC <chrispc@li-4dc2bf4c-325d-11b2-a85c-b68e8b1fc307.ibm.com>
Signed-off-by: Shriti Priya <shritip@ibm.com>
Co-authored-by: Mihai Criveti <crivetimihai@gmail.com>
Co-authored-by: Teryl Taylor <terylt@ibm.com>
Co-authored-by: Frederico Araujo <frederico.araujo@ibm.com>
Co-authored-by: Madhav Kandukuri <madhav165@users.noreply.github.com>
Co-authored-by: Keval Mahajan <65884586+kevalmahajan@users.noreply.github.com>
Co-authored-by: Satya <tsp.0713@gmail.com>
Co-authored-by: Jay Bandlamudi <jay_bandlamudi@in.ibm.com>
Co-authored-by: Neelamadhav Gantayat <neelamadhav@in.ibm.com>
Co-authored-by: Shoumi M <55126549+shoummu1@users.noreply.github.com>
Co-authored-by: ChrisPC-39 <60066382+ChrisPC-39@users.noreply.github.com>
Co-authored-by: Chris PC <chrispc@li-4dc2bf4c-325d-11b2-a85c-b68e8b1fc307.ibm.com>
Co-authored-by: Shriti Priya <shritip@ibm.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants