sless

Files

T

History

Naeel b23ae40975 security(iot): MQTT ACL isolation via EMQX HTTP authorization

Each IoT device can only pub/sub to its own topics: {namespace}/{deviceId}/#
Any attempt to access foreign topics → EMQX denies and disconnects.

Changes:
- internal/api/handler: add MQTTAcl handler (POST /internal/mqtt/acl)
- internal/api/router: register /internal/mqtt/acl route
- deployments/k8s/emqx.yaml: add HTTP authorization backend, no_match=deny
- Operator v0.1.52 deployed

Tested: own topic ALLOWED, foreign topic → authorization_permission_denied + disconnect

2026-04-04 17:51:51 +03:00

emqx-ws-ingress.yaml

feat(iot): MQTT over WebSocket workaround via nginx-ingress

2026-04-04 14:06:17 +03:00

emqx.yaml

security(iot): MQTT ACL isolation via EMQX HTTP authorization

2026-04-04 17:51:51 +03:00

event-dispatcher.yaml

feat: event-trigger (Вариант A) — TriggerTypeEvent, event-dispatcher, reconcileEvent

2026-03-19 13:44:35 +03:00

funcs-service.yaml

fix(source): add /services/{name}/source endpoint; fix 404 for service code view in funcs-console