• Stars
    star
    137
  • Rank 266,121 (Top 6 %)
  • Language
    Go
  • License
    Apache License 2.0
  • Created over 3 years ago
  • Updated 5 months ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Guardian is universal data access management tool with automated access workflows and security controls across data stores, analytical systems, and cloud products.

Guardian

test workflow release workflow Coverage Status License Version

Guardian is a tool for extensible and universal data access with automated access workflows and security controls across data stores, analytical systems, and cloud products.

Key Features

  • Provider management: Support various providers (currently only BigQuery, more coming up!) and multiple instances for each provider type
  • Resource management: Resources from a provider are managed in Guardian's database. There is also an API to update resource's metadata to add additional information.
  • Appeal-based access: Users are expected to create an appeal for accessing data from registered providers. The appeal will get reviewed by the configured approvers before it gives the access to the user.
  • Configurable approval flow: Approval flow configures what are needed for an appeal to get approved and who are eligible to approve/reject. It can be configured and linked to a provider so that every appeal created to their resources will follow the procedure in order to get approved.
  • External identity managers: This gives the flexibility to use any third-party identity manager. User properties.

Documentation

Explore the following resoruces to get started with Guardian:

  • Guides provides guidance on usage.
  • Concepts describes all important Guardian concepts including system architecture.
  • Reference contains details about configurations and other aspects of Guardian.
  • Contribute contains resources for anyone who wants to contribute to Guardian.

Installation

Install Guardian on macOS, Windows, Linux, OpenBSD, FreeBSD, and on any machine.
Refer this for installations and configurations

Binary (Cross-platform)

Download the appropriate version for your platform from releases page. Once downloaded, the binary can be run from anywhere. You donโ€™t need to install it into a global location. This works well for shared hosts and other systems where you donโ€™t have a privileged account. Ideally, you should install it somewhere in your PATH for easy use. /usr/local/bin is the most probable location.

macOS

guardian is available via a Homebrew Tap, and as downloadable binary from the releases page:

brew install raystack/tap/guardian

To upgrade to the latest version:

brew upgrade guardian

Linux

guardian is available as downloadable binaries from the releases page. Download the .deb or .rpm from the releases page and install with sudo dpkg -i and sudo rpm -i respectively.

Windows

guardian is available via scoop, and as a downloadable binary from the releases page:

scoop bucket add guardian https://github.com/raystack/scoop-bucket.git

To upgrade to the latest version:

scoop update guardian

Docker

We provide ready to use Docker container images. To pull the latest image:

docker pull raystack/guardian:latest

To pull a specific version:

docker pull raystack/guardian:v0.8.0

Usage

Guardian is purely API-driven. It is very easy to get started with Guardian. It provides CLI, HTTP and GRPC APIs for simpler developer experience.

CLI

Guardian CLI is fully featured and simple to use, even for those who have very limited experience working from the command line. Run guardian --help to see list of all available commands and instructions to use.

List of commands

guardian --help

Print command reference

guardian reference

API

Guardian provides a fully-featured GRPC and HTTP API to interact with Guardian server. Both APIs adheres to a set of standards that are rigidly followed. Please refer to proton for GRPC API definitions.

Contribute

Development of Guardian happens in the open on GitHub, and we are grateful to the community for contributing bugfixes and improvements. Read our contributing guide to learn about our development process, how to propose bugfixes and improvements, and how to build and test your changes to Guardian.

To help you get your feet wet and get you familiar with our contribution process, we have a list of good first issues that contain bugs which have a relatively limited scope. This is a great place to get started.

This project exists thanks to all the contributors.

License

Guardian is Apache 2.0 licensed.

More Repositories

1

optimus

Optimus is an easy-to-use, reliable, and performant workflow orchestrator for data transformation, data modeling, pipelines, and data quality management.
Go
742
star
2

firehose

Firehose is an extensible, no-code, and cloud-native service to load real-time streaming data from Kafka to data stores, data lakes, and analytical storage systems.
Java
319
star
3

dagger

Dagger is an easy-to-use, configuration over code, cloud-native framework built on top of Apache Flink for stateful processing of real-time streaming data.
Java
261
star
4

frontier

Frontier is an all-in-one user management platform that provides identity, access and billing management to help organizations secure their systems and data. (Open source alternative to Clerk)
Go
252
star
5

stencil

Stencil is a schema registry that provides schema management and validation dynamically, efficiently, and reliably to ensure data compatibility across applications.
Go
221
star
6

raccoon

Raccoon is a high-throughput, low-latency service to collect events in real-time from your web, mobile apps, and services using multiple network protocols.
Go
192
star
7

meteor

Meteor is an easy-to-use, plugin-driven metadata collection framework to extract data from different sources and sink to any data catalog.
Go
181
star
8

siren

Siren provides an easy-to-use universal alert, notification, channels management framework for the entire observability infrastructure.
Go
77
star
9

compass

Compass is an enterprise data catalog that makes it easy to find, understand, and govern data.
Go
63
star
10

apsara

Apsara is an open-source re-usable UI components built using Radix UI and CSS modules to power Raystack projects.
TypeScript
56
star
11

proton

This repository is home to the original protobuf interface definitions which are used throughout the Raystack ecosystem.
54
star
12

cosmos

Cosmos is an operational analytics server to build custom apps with embedded analytics that deliver data experiences as unique as your business.
TypeScript
46
star
13

charts

This repository is home to the original helm charts for products throughout the open data platform ecosystem.
Smarty
41
star
14

transformers

This repository is home to the Optimus data transformation plugins for various data processing needs.
Python
35
star
15

homebrew-tap

This repository is home to the original homebrew taps for products throughout the Raystack ecosystem.
Ruby
31
star
16

platform

ODPF is the next-gen collaborative and distributed data platform to power data-driven workflows.
30
star
17

entropy

Entropy is a framework to safely and predictably create, change, and improve modern cloud applications and infrastructure using familiar languages, tools, and engineering practices.
Go
19
star
18

handbook

Handbook is the central repository for how we build products within ODPF community.
CSS
14
star
19

salt

Salt is a collection of libraries and tools used in the Raystack ecosystem to improve the experience of developing projects with Go.
Go
13
star
20

depot

Depot contains various common sink implementations and publishes them as a library. This library will be used in firehose, daggers or any other application which wants to send data to destinations.
Java
9
star
21

predator

Go
3
star
22

dex

Data Experience
Go
3
star
23

frontier-go

Go
2
star
24

frontier-python

Python
2
star
25

.github

This repository contains the community health files for the @raystack organization
1
star
26

chronicle

TypeScript
1
star
27

scoop-bucket

This repository is home to the original scoop buckets for products throughout the Open DataOps platform ecosystem.
1
star