Merge remote-tracking branch 'upstream/main' into v1-meeting-relations

Author: emsearcy

charts/lfx-platform/Chart.lock

@@ -4,7 +4,7 @@ dependencies:
   version: 36.2.0
 - name: openfga
   repository: https://openfga.github.io/helm-charts
-  version: 0.2.45
+  version: 0.2.48
 - name: heimdall
   repository: oci://ghcr.io/dadrus/heimdall/chart
   version: 0.15.8
@@ -19,7 +19,7 @@ dependencies:
   version: 0.25.2
 - name: authelia
   repository: https://charts.authelia.com
-  version: 0.10.47
+  version: 0.10.49
 - name: nack
   repository: https://nats-io.github.io/k8s/helm/charts/
   version: 0.29.2
@@ -40,21 +40,21 @@ dependencies:
   version: 0.4.6
 - name: lfx-v2-fga-sync
   repository: oci://ghcr.io/linuxfoundation/lfx-v2-fga-sync/chart
-  version: 0.2.3
+  version: 0.2.4
 - name: lfx-v2-access-check
   repository: oci://ghcr.io/linuxfoundation/lfx-v2-access-check/chart
   version: 0.2.4
 - name: lfx-v2-indexer-service
   repository: oci://ghcr.io/linuxfoundation/lfx-v2-indexer-service/chart
-  version: 0.4.4
+  version: 0.4.6
 - name: lfx-v2-committee-service
   repository: oci://ghcr.io/linuxfoundation/lfx-v2-committee-service/chart
-  version: 0.1.1
+  version: 0.2.8
 - name: lfx-v2-meeting-service
   repository: oci://ghcr.io/linuxfoundation/lfx-v2-meeting-service/chart
-  version: 0.4.22
+  version: 0.5.3
 - name: lfx-v2-auth-service
   repository: oci://ghcr.io/linuxfoundation/lfx-v2-auth-service/chart
   version: 0.3.1
-digest: sha256:826e893ac5111814617eb48508244991688637cc2959172194e948e8c0115c14
-generated: "2025-10-30T09:49:49.901167-03:00"
+digest: sha256:00f26f090425a7653c371e5343e5b5f6fd36bab5b589ca468a032caf86f52dc8
+generated: "2025-11-10T17:28:34.819094-08:00"

charts/lfx-platform/Chart.yaml

@@ -5,7 +5,7 @@ apiVersion: v2
 name: lfx-platform
 description: LFX Platform v2 Helm chart
 type: application
-version: 0.3.6
+version: 0.3.8
 icon: https://github.com/linuxfoundation/lfx-v2-helm/raw/main/img/lfx-logo-color.svg
 dependencies:
   - name: traefik
@@ -54,31 +54,31 @@ dependencies:
     condition: trustManagerEnabled
   - name: lfx-v2-query-service
     repository: oci://ghcr.io/linuxfoundation/lfx-v2-query-service/chart
-    version: ~0.4.6
+    version: ~0.4.7
     condition: lfx-v2-query-service.enabled
   - name: lfx-v2-project-service
     repository: oci://ghcr.io/linuxfoundation/lfx-v2-project-service/chart
-    version: ~0.4.3
+    version: ~0.4.6
     condition: lfx-v2-project-service.enabled
   - name: lfx-v2-fga-sync
     repository: oci://ghcr.io/linuxfoundation/lfx-v2-fga-sync/chart
-    version: ~0.2.3
+    version: ~0.2.4
     condition: lfx-v2-fga-sync.enabled
   - name: lfx-v2-access-check
     repository: oci://ghcr.io/linuxfoundation/lfx-v2-access-check/chart
-    version: ~0.2.3
+    version: ~0.2.4
     condition: lfx-v2-access-check.enabled
   - name: lfx-v2-indexer-service
     repository: oci://ghcr.io/linuxfoundation/lfx-v2-indexer-service/chart
-    version: ~0.4.4
+    version: ~0.4.6
     condition: lfx-v2-indexer-service.enabled
   - name: lfx-v2-committee-service
     repository: oci://ghcr.io/linuxfoundation/lfx-v2-committee-service/chart
-    version: ~0.1.0
+    version: ~0.2.8
     condition: lfx-v2-committee-service.enabled
   - name: lfx-v2-meeting-service
     repository: oci://ghcr.io/linuxfoundation/lfx-v2-meeting-service/chart
-    version: ~0.4.0
+    version: ~0.5.3
     condition: lfx-v2-meeting-service.enabled
   - name: lfx-v2-auth-service
     repository: oci://ghcr.io/linuxfoundation/lfx-v2-auth-service/chart

charts/lfx-platform/templates/openfga/model.yaml

@@ -21,7 +21,7 @@ spec:
     - version:
         major: 6
         minor: 0
-        patch: 1
+        patch: 0
       authorizationModel: |
         model
           schema 1.1
@@ -98,7 +98,16 @@ spec:
             # only certain privileged users can view it.
             define viewer: [user:*] or participant or organizer or auditor
 
-          type past_meeting
+        # The meeting_attachment type identifies an attachment of a meeting.
+        type meeting_attachment
+          relations
+            define meeting: [meeting]
+            define writer: organizer from meeting
+            define auditor: writer or auditor from meeting
+            define participant: participant from meeting
+            define viewer: [user:*] or participant or writer or auditor
+
+        type past_meeting
           relations
             define project: [project]
             define committee: [committee]
@@ -122,12 +131,21 @@ spec:
             # only certain privileged users can view it.
             define viewer: [user:*] or attendee or invitee or organizer or auditor
 
-          # The past_meeting_recording type identifies a recording of a past meeting.
-          # Access to a recording is limited to one of the following groups:
-          # - Only meeting hosts
-          # - Only meeting participants
-          # - Public (anyone)
-          type past_meeting_recording
+        # The past_meeting_attachment type identifies an attachment of a past meeting.
+        type past_meeting_attachment
+          relations
+            define past_meeting: [past_meeting]
+            define writer: organizer from past_meeting
+            define auditor: writer or auditor from past_meeting
+            define participant: host from past_meeting or invitee from past_meeting or attendee from past_meeting
+            define viewer: [user:*] or participant or writer or auditor
+
+        # The past_meeting_recording type identifies a recording of a past meeting.
+        # Access to a recording is limited to one of the following groups:
+        # - Only meeting hosts
+        # - Only meeting participants
+        # - Public (anyone)
+        type past_meeting_recording
           relations
             define past_meeting: [past_meeting]
             define writer: organizer from past_meeting
@@ -145,12 +163,12 @@ spec:
             # to view the recording.
             define viewer: [user, user:*] or writer or auditor
 
-          # The past_meeting_transcript type identifies a transcript of a past meeting.
-          # Access to a transcript is limited to one of the following groups:
-          # - Only meeting hosts
-          # - Only meeting participants
-          # - Public (anyone)
-          type past_meeting_transcript
+        # The past_meeting_transcript type identifies a transcript of a past meeting.
+        # Access to a transcript is limited to one of the following groups:
+        # - Only meeting hosts
+        # - Only meeting participants
+        # - Public (anyone)
+        type past_meeting_transcript
           relations
             define past_meeting: [past_meeting]
             define writer: organizer from past_meeting
@@ -168,12 +186,12 @@ spec:
             # to view the transcript.
             define viewer: [user, user:*] or writer or auditor
 
-          # The past_meeting_summary type identifies a summary of a past meeting.
-          # Access to a summary is limited to one of the following groups:
-          # - Only meeting hosts
-          # - Only meeting participants
-          # - Public (anyone)
-          type past_meeting_summary
+        # The past_meeting_summary type identifies a summary of a past meeting.
+        # Access to a summary is limited to one of the following groups:
+        # - Only meeting hosts
+        # - Only meeting participants
+        # - Public (anyone)
+        type past_meeting_summary
           relations
             define past_meeting: [past_meeting]
             define writer: organizer from past_meeting