Feature/gateway services

src/authz/actions/filterByServiceNS.js

@@ -0,0 +1,10 @@
+const filterByServiceNS = (context, value) => {
+  const namespace = context['user']['namespace'];
+  if (process.env.RULE_DEBUG) {
+    console.log('Action: Filter By Service NS' + namespace);
+  }
+
+  return { service: { namespace: namespace } };
+};
+
+module.exports = filterByServiceNS;

src/authz/enforcement.ts

@@ -59,6 +59,7 @@ const actions: any = {
   filterBySelf: require('./actions/filterBySelf'),
   filterByRequestor: filterByRequestor,
   filterByPackageNS: require('./actions/filterByPackageNS'),
+  filterByServiceNS: require('./actions/filterByServiceNS'),
   filterByProductNSOrActiveEnvironment: require('./actions/filterByProductNSOrActiveEnvironment'),
   filterByTemporaryIdentity: require('./actions/filterByTemporaryIdentity'),
   filterByUserNS: require('./actions/filterByUserNS'),

src/authz/graphql-whitelist/httplocalhost3000admingraphiql-232878.gql

@@ -0,0 +1,15 @@
+
+  query GetMetrics($service: String!, $days: [String!]) {
+    allMetrics(
+      sortBy: day_ASC
+      where: {query: "kong_http_requests_hourly_service", day_in: $days, service: {name_contains: $service}}
+    ) {
+      query
+      day
+      metric
+      values
+      service {
+        name
+      }
+    }
+  }

src/authz/graphql-whitelist/httplocalhost3000admingraphiql-32ae3f.gql

@@ -0,0 +1,12 @@
+
+  query GetFilterConsumers($namespace: String!) {
+    allProductsByNamespace(where: {namespace: $namespace}) {
+      name
+      id
+      environments {
+        id
+        name
+      }
+    }
+    allConsumerScopesAndRoles
+  }

src/authz/graphql-whitelist/httplocalhost3000admingraphiql-418f05.gql

@@ -0,0 +1,41 @@
+
+  query GetServices($days: [String!]) {
+    allGatewayServicesByNamespace(first: 200) {
+      id
+      name
+      updatedAt
+      environment {
+        id
+        name
+        active
+        flow
+        product {
+          id
+          name
+          organization {
+            title
+          }
+          organizationUnit {
+            title
+          }
+        }
+      }
+      routes {
+        id
+        name
+      }
+      plugins {
+        id
+        name
+      }
+    }
+    allMetrics(
+      sortBy: day_ASC
+      where: { query: "kong_http_requests_hourly_namespace", day_in: $days }
+    ) {
+      query
+      day
+      metric
+      values
+    }
+  }

src/authz/graphql-whitelist/httplocalhost3000admingraphiql-447aac.gql

@@ -0,0 +1,37 @@
+
+  query GetGatewayService($id: ID!) {
+    GatewayService(where: { id: $id }) {
+      id
+      name
+      namespace
+      tags
+      host
+      environment {
+        id
+        name
+        active
+        flow
+        product {
+          name
+          organization {
+            title
+          }
+          organizationUnit {
+            title
+          }
+        }
+      }
+      plugins {
+        id
+        name
+      }
+      routes {
+        id
+        name
+        hosts
+        paths
+        methods
+      }
+      updatedAt
+    }
+  }

src/authz/graphql-whitelist/httplocalhost3000admingraphiql-6bbb90.gql

@@ -0,0 +1,37 @@
+
+  query GetGatewayService($id: ID!) {
+    GatewayService(where: {id: $id}) {
+      id
+      name
+      namespace
+      tags
+      host
+      environment {
+        id
+        name
+        active
+        flow
+        product {
+          name
+          organization {
+            title
+          }
+          organizationUnit {
+            title
+          }
+        }
+      }
+      plugins {
+        id
+        name
+      }
+      routes {
+        id
+        name
+        hosts
+        paths
+        methods
+      }
+      updatedAt
+    }
+  }

src/authz/graphql-whitelist/httplocalhost3000admingraphiql-e02805.gql

@@ -0,0 +1,17 @@
+
+  query GetGatewayServiceFilters($namespace: String!) {
+    allGatewayPluginsByNamespace {
+      id
+      name
+    }
+
+    allProductsByNamespace(where: { namespace: $namespace }) {
+      name
+      id
+      environments {
+        id
+        name
+      }
+    }
+    allConsumerScopesAndRoles
+  }

src/authz/graphql-whitelist/httplocalhost4180managerconsumers-92a948.gql

@@ -1,7 +1,5 @@
 
   query GetFilterConsumers($namespace: String!) {
-    allConsumerScopesAndRoles
-
     allProductsByNamespace(where: { namespace: $namespace }) {
       name
       id
@@ -10,4 +8,5 @@
         name
       }
     }
+    allConsumerScopesAndRoles
   }

src/authz/graphql-whitelist/httplocalhost4180managerservices-009886.gql

@@ -0,0 +1,41 @@
+
+  query GetServices($days: [String!]) {
+    allGatewayServicesByNamespace(first: 200) {
+      id
+      name
+      updatedAt
+      environment {
+        id
+        name
+        active
+        flow
+        product {
+          id
+          name
+          organization {
+            title
+          }
+          organizationUnit {
+            title
+          }
+        }
+      }
+      routes {
+        id
+        name
+      }
+      plugins {
+        id
+        name
+      }
+    }
+    allGatewayServiceMetricsByNamespace(
+      orderBy: "day_ASC"
+      where: { query: "kong_http_requests_hourly_namespace", day_in: $days }
+    ) {
+      query
+      day
+      metric
+      values
+    }
+  }

src/authz/graphql-whitelist/httplocalhost4180managerservices-423efa.gql

@@ -0,0 +1,19 @@
+
+  query GetMetrics($service: String!, $days: [String!]) {
+    allGatewayServiceMetricsByNamespace(
+      orderBy: "day_ASC"
+      where: {
+        query: "kong_http_requests_hourly_service"
+        day_in: $days
+        service: { name_contains: $service }
+      }
+    ) {
+      query
+      day
+      metric
+      values
+      service {
+        name
+      }
+    }
+  }

src/authz/matrix.csv

@@ -198,6 +198,8 @@ Portal User,,regenerateCredentials,,,,,,,portal-user,,,allow,filterByAppOwner
 Portal User,,myApplications,,,,,,,portal-user,,,allow,filterByOwner
 API Owner Role Rules,,allGatewayServicesByNamespace,,,,,,,,,"api-owner,provider-user",allow,filterByUserNS
 API Owner Role Rules,,allGatewayRoutesByNamespace,,,,,,,,,"api-owner,provider-user",allow,filterByUserNS
+API Owner Role Rules,,allGatewayPluginsByNamespace,,,,,,,,,"api-owner,provider-user",allow,filterByUserNS
+API Owner Role Rules,,allGatewayServiceMetricsByNamespace,,,,,,,,,"api-owner,provider-user",allow,filterByServiceNS
 API Owner Role Rules,,allProductsByNamespace,,,,,,,,,"api-owner,provider-user",allow,filterByUserNS
 API Owner Role Rules,,allNamespaceServiceAccounts,,,,,,,,,"api-owner,provider-user",allow,filterByUserNS
 API Owner Role Rules,,allCredentialIssuersByNamespace,,,,,,,,,"api-owner,provider-user",allow,filterByUserNS

src/lists/extensions/AliasedQueries.ts

@@ -27,6 +27,16 @@ module.exports = {
           list: 'GatewayRoute',
           type: SchemaType.ListQuery,
         },
+        {
+          gqlName: 'allGatewayPluginsByNamespace',
+          list: 'GatewayPlugin',
+          type: SchemaType.ListQuery,
+        },
+        {
+          gqlName: 'allGatewayServiceMetricsByNamespace',
+          list: 'Metric',
+          type: SchemaType.ListQuery,
+        },
         {
           gqlName: 'allContentsByNamespace',
           list: 'Content',

src/mocks/handlers.js

@@ -42,6 +42,12 @@ import {
   createServiceAccountHandler,
   getAllServiceAccountsHandler,
 } from './resolvers/service-accounts';
+import {
+  allServicesHandler,
+  getMetricsHandler,
+  getGatewayServiceHandler,
+  getGatewayServiceFilterHandler,
+} from './resolvers/services';
 
 // Namespaces
 const allNamespaces = [
@@ -125,8 +131,13 @@ export const handlers = [
   keystone.query('MyApplications', allApplicationsHandler),
   keystone.mutation('AddApplication', createApplicationHandler),
   keystone.mutation('RemoveApplication', removeApplicationHandler),
+  // Services
+  keystone.query('GetServices', allServicesHandler),
+  keystone.query('GetMetrics', getMetricsHandler),
   // Service accounts
   keystone.query('GetAllServiceAccounts', getAllServiceAccountsHandler),
+  keystone.query('GetGatewayService', getGatewayServiceHandler),
+  keystone.query('GetGatewayServiceFilters', getGatewayServiceFilterHandler),
   keystone.mutation('CreateServiceAccount', createServiceAccountHandler),
   // Namespace Access
   keystone.query('GetUserPermissions', getUserPermissionsHandler),