Skip to content

Navigation Menu

Appearance settings

View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Search code, repositories, users, issues, pull requests...

Search

Clear

Search syntax tips

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches

Use saved searches to filter your results more quickly

Name

Query

To see all available qualifiers, see our documentation.

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

eelpie / grid Public

forked from guardian/grid

Notifications You must be signed in to change notification settings
Fork 0
Star 1

Code
Pull requests 6
Actions
Projects
Security and quality
Insights

Additional navigation options

Code
Pull requests
Actions
Projects
Security and quality
Insights

Multi tenant#12

Draft

tonytw1 wants to merge 229 commits intocontainerisedeelpie/grid:containerisedfrom

multi-tenanteelpie/grid:multi-tenantCopy head branch name to clipboard

Conversation Commits229 (229)Checks Files changed

Draft

Multi tenant#12
tonytw1 wants to merge 229 commits intocontainerisedfrom
multi-tenant

Commits

Commits on Apr 6, 2026

Nerf the thrall migration thread; very noisy.
tonytw1
committed
Delete SyncChecker; not needed yet
tonytw1
committed
Delete Scripts; not needed yet and difficult.
tonytw1
committed
Delete GoodToGoCheck; not instance specific.
tonytw1
committed
Introduce an Instance model class and a way to infer it from a request.
tonytw1
committed
!!!!!!!!!!!!!!!!! Start of multi tenant - Redefine Service.apiUrl to be a function of instance. Work through the usages.
tonytw1
committed
Catch all .rootUri usages in s strings in media-api. Media API will probably render contextual links now.
tonytw1
committed
KahunaController will need to evaluate the service URLs to pass to the client on the fly.
tonytw1
committed
imgproxy is vhost based.
tonytw1
committed
cropper and metadata-editor are vhost based.
tonytw1
committed
loader, projection, usages, collections and leases move to vhost urls.
tonytw1
committed
auth, kahuna and thrall move to vhost url. Stops at extends Panda. We are going to replace Panda though.
tonytw1
committed
Switch service names to instance aware instance.domain vhost names.
tonytw1
committed
Marking TODO corsFilter and securityHeadersFilter will need to be reworked to have per request / instance config.
tonytw1
committed
Reinstate security headers using an instance specific config.
tonytw1
committed
Implement instance specific CORS filter.
tonytw1
committed
Reinstate CSRF filter with needed the CORS filter to single bypass on same origin.
tonytw1
committed
Initial instance awareness. Prepare upload records a request specific instance field in the upload status table.
tonytw1
committed
Message instance field moves upfrom ImageUpdate to all ExternalThrallMessage messages.
tonytw1
committed
Media API's ElasticSearch class accepts instances inputs into current index alias functions.
tonytw1
committed
Media API's Elastic responses are probably instance specific.
tonytw1
committed
Step back to service to service calls via the full public URLs so that instance is preserved.
tonytw1
committed
Introduce a typed Instance and pass it around implicitly.
tonytw1
committed
Kahuna auth uri in main.view are correct.
tonytw1
committed
Patch instance url s"" usages with toString.
tonytw1
committed
URIs take a full Instance rather than Request; use more implicits so minimise the diff with main.
tonytw1
committed
Crop paths are prefixed with instance id like originals and thumbs.
tonytw1
committed
Collections store instance aware using Dynamo composite keys on id + instance.
tonytw1
committed
Instance aware all collections end points.
tonytw1
committed
ImageCollectionsStore is instance aware.
tonytw1
committed
Add Instance aware dynamnodb
tonytw1
committed
Instance aware all collections can scan all by querying on the instance partition key
tonytw1
committed
Instance aware all scanForId is instances aware.
tonytw1
committed
batchGet query is instance aware.
tonytw1
committed
InstanceAwareDynamoDB getV2, booleanGetV2 and setGetV2 methods.
tonytw1
committed
InstanceAwareDynamoDB asJsObject strips instance key.
tonytw1
committed
InstanceAwareDynamoDB - use InstanceKey every where.
tonytw1
committed
InstanceAwareDynamoDB removeKeyV2.
tonytw1
committed
InstanceAwareDynamoDB booleanSetOrRemoveV2.
tonytw1
committed
InstanceAwareDynamoDB setAddV2setAddV2 and setDeleteV2.
tonytw1
committed
InstanceAwareDynamoDB jsonAddV2.
tonytw1
committed
InstanceAwareDynamoDB deleteItem no instance regression.
tonytw1
committed
InstanceAwareDynamoDB deleteItemV2 and stringSetV2.
tonytw1
committed
InstanceAwareDynamoDB deleting v1 methods.
tonytw1
committed
InstanceAwareDynamoDB deleteItem unused.
tonytw1
committed
InstanceAwareDynamoDB deleteItemV2 is instance aware.
tonytw1
committed
InstanceAwareDynamoDB removing unused v1 methods.
tonytw1
committed
InstanceAwareDynamoDB removing unused v1 methods.
tonytw1
committed
InstanceAwareDynamoDB purge v1 methods.
tonytw1
committed
InstanceAwareDynamoDB scanByIdV2
tonytw1
committed
InstanceAwareDynamoDB batchGetV2
tonytw1
committed
Meta data edits and syndication dynamo calls move to instance aware.
tonytw1
committed
No v1 client.
tonytw1
committed
EditsController imports.
tonytw1
committed
Move Leases to id + instance composite key; Scanomo had to be by past; seems to expect all keys to be actual fields of the object.
tonytw1
committed
LeaseStoreSpec is instance aware.
tonytw1
committed
Upload status table reads are instance aware.
tonytw1
committed
Patch up soft deletes table best we can given that Scanmomo doesn't support composite keys on batch and there is no longer any error feedback now BatchWriteItemResult is missing
tonytw1
committed
Just stick instance in soft delete images; not that public facing.
tonytw1
committed
Begin integrating the auth provider Kinde.
tonytw1
committed
Logout by clearing play session.
tonytw1
committed
Redirect out of auth.
tonytw1
committed
/logout link needs a slash in this setup.
tonytw1
committed
Use seperate cookie (not Play session) so it be copied for internal calls.
tonytw1
committed
Flush cookie.
tonytw1
committed
Logout from Kinde on logout.
tonytw1
committed
Auth can run at the root of the domain to auth all instances.
tonytw1
committed
Default exit to /
tonytw1
committed
auth cookie not been seen on subdomains without an explicit domain set!?
tonytw1
committed
Redirect logout back to home page.
tonytw1
committed
/auth/session needs to be on the same host cause CORS.
tonytw1
committed
Capture loggedin user cookie for use with onBehalfOf like Panda.
tonytw1
committed
/auth/session needs to be on the same host cause CORS.
tonytw1
committed
Fix share URL is double //
tonytw1
committed
Sign Kinde logged in user cookies.
tonytw1
committed
Capture all Kinde user details.
tonytw1
committed
Resolved TODO; random session backed state for Kinde oauth dance.
tonytw1
committed
Auth decorates authed user cookie with their instances on oauth callback.
tonytw1
committed
Auth provider decorates Principal with allowed instances. Definition of authed becomes 'Are you authenticated and a member of this instance?'
tonytw1
committed
Use domainRoot is the as the config hook to remove hard coded griddev references.
tonytw1
committed
Inline Await and timeout on Kinde request.
tonytw1
committed
Allow InnerServicePrincipal to access all instances.
tonytw1
committed
Setup for non instance principals instances lookup.
tonytw1
committed
Auth calls back to landing service for users instances instead of reading directly from Dynamo.
tonytw1
committed
Quiet logging.
tonytw1
committed
Clean up; useless future.
tonytw1
committed
Introduce CreateInstanceMessage so that thrall can respond to an on demand create index request.
tonytw1
committed
CreateInstance is added to ExternalThrallMessage and passes through the MessageTranslator.
tonytw1
committed
Thrall create instance calls collections to create the root Home collection.
tonytw1
committed
Test does not been an ElasticSearch base.
tonytw1
committed
Logging around new instance root collection setup.
tonytw1
committed
Marking TODO - Usages not instance aware.
tonytw1
committed
Sign cropper assets URLs.
tonytw1
committed
Delete crops is instance aware.
tonytw1
committed
Need to fws instance aware update notifications from usage API.
tonytw1
committed
Spike; progating instance throught the RX? channels for simple Usage API end points.
tonytw1
committed
WIP pushing instance down to Usages table for instance aware queries.
tonytw1
committed
Setting up from instance specific usage table.
tonytw1
committed
Prefix usage groping with instance slash to make filterable by instance.
tonytw1
committed
UsageTable - missing instance awareness.
tonytw1
committed
UsageRecord persists an instance field so that it can be used as the partition key for the by media_id index.
tonytw1
committed
UsageTableTest instance aware tests.
tonytw1
committed
UsageTableTest implicits.
tonytw1
committed
Thrall polls for list of current instances; setting up for collection of usage data.
tonytw1
committed
Thrall counts total ES images foreach instance.
tonytw1
committed
Thrall knows image count and total file size for instances.
tonytw1
committed
Thrall announces instance usage onto an SQS queue for instances to pick up.
tonytw1
committed
Thralls call back to instances endpoint is conf.
tonytw1
committed
My instances endpoint for auth moves to config.
tonytw1
committed
Thrall can ensure index on start up to help rebuild Elastic.
tonytw1
committed
Push instance all the way down to fileKeyFromId to catch all usages.
tonytw1
committed
Instance specific Reaper
tonytw1
committed
Reaper can run without logging to bucket.
tonytw1
committed
Clean up; logging.
tonytw1
committed
Clean up; extract method.
tonytw1
committed
Renable image-deleted messages.
tonytw1
committed
Restore image-deleted messages and make instance specific.
tonytw1
committed
Marking TODO; no image-deleted notification after hard reap?
tonytw1
committed
Ingest images from instance specific top level folders in the ingest bucket.
tonytw1
committed
fileKeyFromId uses implicit Instance for smaller diff.
tonytw1
committed
optimisedPngKeyFromId uses implicit Instance for smaller diff.
tonytw1
committed
Log principal for blocked request.
tonytw1
committed
Enable API key access to ownered instances. Request owner instances by GET parameter rather than auth cookie so that API auth can work as well.
tonytw1
committed
Remove deprecated TODO
tonytw1
committed
Clean up.
tonytw1
committed
Instance usage message adds softDeletedCount field.
tonytw1
committed
Logging.
tonytw1
committed
Refactor; extract instance message sender.
tonytw1
committed
Instance usage JSON writes.
tonytw1
committed
Setting up to send instance message after setup has completed; SQS is probably going to need a type field to multiplex this.
tonytw1
committed
Multiplex instance related messages.
tonytw1
committed
Reaper query build logging.
tonytw1
committed
Reaper controller logging.
tonytw1
committed
KeyStore seperates API keys by instance folder.
tonytw1
committed
CSRF filter still problematic.
tonytw1
committed
Marking TODO.
tonytw1
committed
Log /management/healthcheck as debug.
tonytw1
committed
Private.
tonytw1
committed
Update TODO.
tonytw1
committed
Disable Guardian email parsing of CSV file in bucket usage updates.
tonytw1
committed
Refactor; QuotaStore in it's own file to make it more visible.
tonytw1
committed
usage/quotas needs a / prefix.
tonytw1
committed
Imports
tonytw1
committed
We only need Environment credentials; may speed up first hit.
tonytw1
committed
Kanhuna CSP origin.full and origin.images are believed to be redundant; imgproxy is on the same host as the UI.
tonytw1
committed
Resolve TODO. auth and kahuna are on the same hostname as everyother service.
tonytw1
committed
Thrall exposes a /config end point so that reaping and hard delete config can be surfaced to users.
tonytw1
committed
Hard delete can delete any image which is in the soft deleted state; regardless of reapable or not.
tonytw1
committed
Thrall exposes a /config end point so that reaping and hard delete config can be surfaced to users.
tonytw1
committed
Logging.
tonytw1
committed
Log delete folder number of files found.
tonytw1
committed
Logging.
tonytw1
committed
Disable set missing description to upload filename.
tonytw1
committed
Revert "Disable set missing description to upload filename."
tonytw1
committed
Log quota store fetch.
tonytw1
committed
Log quota store fetch.
tonytw1
committed
Spike - no op quota + usage join.
tonytw1
committed
Quota count on the right.
tonytw1
committed
Billing. Setup a new actor to capture usage events.
tonytw1
committed
Move usage events to common lib for reuse.
tonytw1
committed
Usage event for download original.
tonytw1
committed
Usage event SQS sending.
tonytw1
committed
Usage event includes date.
tonytw1
committed
Emit api key used event on api auth.
tonytw1
committed
Thrall config end point exposes maybeUploadLimitInBytes for UI.
tonytw1
committed
MB = 1024 * 1024.
tonytw1
committed
Remove source.secureURL from image response.
tonytw1
committed
Set isFeedUpload field on uploaded and ingested images.
tonytw1
committed
isFeedUpload moves to UploadInfo.
tonytw1
committed
Crops sign source.file to recreate secureUrl.
tonytw1
committed
Correct image if for ingest events.
tonytw1
committed
Clean up; auth instance call simplied.
tonytw1
committed
Spike; machine auth has non user endpoint.
tonytw1
committed
Api keys have instances attribute; can be checked without an attached Kinde user.
tonytw1
committed
Log levels.
tonytw1
committed
api key usage is recorded by key name.
tonytw1
committed
Remove persistence.identifier config option.
tonytw1
committed
Debug - log updateStatus
tonytw1
committed
Debug - prepared to queue request fails.
tonytw1
committed
Usage event for user auth.
tonytw1
committed
Status.toString does not match the persisted format of the Dynamo tables.
tonytw1
committed
Debug - problem with uploadStatusTableWithCondition
tonytw1
committed
Fix Prepare -> Queued conditional update by burning table and redefining the StatusType enum format as the name string.
tonytw1
committed
Ingest image presigned uploads need to be into the instance folders.
tonytw1
committed
Disable publishChangedSyndicationRightsForPhotoshoot
tonytw1
committed
Usage event for prepare upload.
tonytw1
committed
Usage events; would like to capture user or api key inline.
tonytw1
committed
Usage events; would like to capture user or api key inline.
tonytw1
committed
Usage events; api / user recorded for prepare upload.
tonytw1
committed
Usage events; api / user recorded for download image.
tonytw1
committed
Move instances to common lib.
tonytw1
committed
Move instances to common lib.
tonytw1
committed
Thrall emits image delete events.
tonytw1
committed
Preview reapable query by removing the time window when selected as is:reapable in the UI.
tonytw1
committed
ReapableEligibility checks for isFeedUpload.
tonytw1
committed
Logging.
tonytw1
committed
Log image upload duration.
tonytw1
committed
ReapableEligibility checks for isFeedUpload.
tonytw1
committed
ReapableEligibility checks for isFeedUpload.
tonytw1
committed
Log mime type.
tonytw1
committed
Feed ingest file uploader is last folder in path.
tonytw1
committed
Feed ingest file uploader is folder after feeds.
tonytw1
committed
Feed ingest file uploader is folder after feeds.
tonytw1
committed
Generalise text for Chargable usage rights description.
tonytw1
committed
Log S3 bulk deletes.
tonytw1
committed
Log total reapable images.
tonytw1
committed
private
tonytw1
committed
Thrall kinesis appName is explicitly set rather than defaulting to the streamName.
tonytw1
committed
Thrall kinesis appName is explicitly set rather than defaulting to the streamName.
tonytw1
committed
Log stream name for Kinesis put.
tonytw1
committed
Log initial offset.
tonytw1
committed
Mulitple KCL streams cannot share the same checkpointing table!
tonytw1
committed
Log levels; reaper bucket not configured.
tonytw1
committed
Increase polling interval for unused /notification to 10 minutes.
tonytw1
committed
Generalise text for Chargable usage rights description.
tonytw1
committed
Generalise owned by. Screen grab description uses generalised text.
tonytw1
committed
Generalise owned by. Remove org-owned: prefix on image thumbnail mouse overs.
tonytw1
committed
Generalise owned filter names.
tonytw1
committed
Generalise owned by - is suggestion names.
tonytw1
committed
Generalise the sensitive content explainer.
tonytw1
committed
Instances is more testable if injected rather than mixed in.
tonytw1
committed
Setting up for instance aware migration. Push down the hard-coded dummy instances in the migration sender's constructor.
tonytw1
committed
Migration source and status have list of instances.
tonytw1
committed
[multi-tenant] Refactor; group getMyInstances into Instances trait.
tonytw1
committed
[multi-tenant] Do not quietly recover from instances call failures. Needs to be a full visible error.
tonytw1
committed
[multi-tenant] Download export link is instance aware
tonytw1
committed
SyndicationController uses getV2 instead of jsonGet.
tonytw1
committed
Marking TODO
tonytw1
committed
Remove TODO this is fine.
tonytw1
committed

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.