sless

Files

T

Naeel b23ae40975 security(iot): MQTT ACL isolation via EMQX HTTP authorization

Each IoT device can only pub/sub to its own topics: {namespace}/{deviceId}/#
Any attempt to access foreign topics → EMQX denies and disconnects.

Changes:
- internal/api/handler: add MQTTAcl handler (POST /internal/mqtt/acl)
- internal/api/router: register /internal/mqtt/acl route
- deployments/k8s/emqx.yaml: add HTTP authorization backend, no_match=deny
- Operator v0.1.52 deployed

Tested: own topic ALLOWED, foreign topic → authorization_permission_denied + disconnect

2026-04-04 17:51:51 +03:00

.gitkeep

feat: operator-sdk scaffold with Function and Trigger CRDs

2026-03-07 08:16:39 +04:00

functions.go

feat(v0.1.58): ImageExists cache hit, timing analysis, in-cluster registry plan

2026-03-23 06:22:25 +03:00

handler.go

refactor: SoC — EnsureNamespace в namespace.go, маршрут /ensure, client.EnsureNamespace, fix secrets в .gitignore

2026-03-11 08:37:33 +04:00

invocations.go

docs: clarify separate providers decision; fix invocations 501 stub