106 lines
3.1 KiB
JavaScript
106 lines
3.1 KiB
JavaScript
/**
|
|
* Copyright (c) HashiCorp, Inc.
|
|
* SPDX-License-Identifier: MPL-2.0
|
|
*/
|
|
|
|
import { set, get } from '@ember/object';
|
|
import { inject as service } from '@ember/service';
|
|
import RepositoryService from 'consul-ui/services/repository';
|
|
import { PRIMARY_KEY } from 'consul-ui/models/intention';
|
|
import dataSource from 'consul-ui/decorators/data-source';
|
|
|
|
const modelName = 'intention';
|
|
export default class IntentionRepository extends RepositoryService {
|
|
@service('env') env;
|
|
managedByCRDs = false;
|
|
|
|
getModelName() {
|
|
return modelName;
|
|
}
|
|
|
|
getPrimaryKey() {
|
|
return PRIMARY_KEY;
|
|
}
|
|
|
|
create(obj) {
|
|
delete obj.Namespace;
|
|
return super.create({
|
|
Action: 'allow',
|
|
...obj,
|
|
});
|
|
}
|
|
|
|
isManagedByCRDs() {
|
|
if (!this.managedByCRDs) {
|
|
this.managedByCRDs = this.store
|
|
.peekAll(this.getModelName())
|
|
.toArray()
|
|
.some((item) => item.IsManagedByCRD);
|
|
}
|
|
return this.managedByCRDs;
|
|
}
|
|
|
|
// legacy intentions are strange that in order to read/write you need access
|
|
// to either/or the destination or source
|
|
async authorizeBySlug(cb, access, params) {
|
|
const [, source, , destination] = params.id.split(':');
|
|
const ability = this.permissions.abilityFor(this.getModelName());
|
|
params.resources = ability
|
|
.generateForSegment(source)
|
|
.concat(ability.generateForSegment(destination));
|
|
return this.authorizeByPermissions(cb, access, params);
|
|
}
|
|
|
|
async persist(obj) {
|
|
const res = await super.persist(...arguments);
|
|
// if Action is set it means we are an l4 type intention
|
|
// we don't delete these at a UI level incase the user
|
|
// would like to switch backwards and forwards between
|
|
// allow/deny/l7 in the forms, but once its been saved
|
|
// to the backend we then delete them
|
|
if (get(res, 'Action.length')) {
|
|
set(res, 'Permissions', []);
|
|
}
|
|
return res;
|
|
}
|
|
|
|
@dataSource('/:partition/:ns/:dc/intentions')
|
|
async findAll() {
|
|
return super.findAll(...arguments);
|
|
}
|
|
|
|
@dataSource('/:partition/:ns/:dc/intention/:id')
|
|
async findBySlug(params) {
|
|
let item;
|
|
if (params.id === '') {
|
|
const defaultNspace = this.env.var('CONSUL_NSPACES_ENABLED') ? '*' : 'default';
|
|
const defaultPartition = 'default';
|
|
item = await this.create({
|
|
SourceNS: params.nspace || defaultNspace,
|
|
DestinationNS: params.nspace || defaultNspace,
|
|
SourcePartition: params.partition || defaultPartition,
|
|
DestinationPartition: params.partition || defaultPartition,
|
|
Datacenter: params.dc,
|
|
Partition: params.partition,
|
|
});
|
|
} else {
|
|
item = super.findBySlug(...arguments);
|
|
}
|
|
return item;
|
|
}
|
|
|
|
@dataSource('/:partition/:ns/:dc/intentions/for-service/:id')
|
|
async findByService(params, configuration = {}) {
|
|
const query = {
|
|
dc: params.dc,
|
|
nspace: params.nspace,
|
|
filter: `SourceName == "${params.id}" or DestinationName == "${params.id}" or SourceName == "*" or DestinationName == "*"`,
|
|
};
|
|
if (typeof configuration.cursor !== 'undefined') {
|
|
query.index = configuration.cursor;
|
|
query.uri = configuration.uri;
|
|
}
|
|
return this.store.query(this.getModelName(), query);
|
|
}
|
|
}
|