mirror of
https://github.com/paralus/paralus.git
synced 2026-02-14 17:49:51 +00:00
c66bdc25cd
* restructure rcloud-base as a single base controller * updated master.rest * moved sentry from internal to pkg as it is used by relay * removing unused rpc and it's dependencies * Fix usermgmt tests * Don't redefine variables in rest file Co-authored-by: Abin Simon <abin.simon@rafay.co>
412 lines
9.3 KiB
ReStructuredText
412 lines
9.3 KiB
ReStructuredText
:host = http://localhost:11000
|
|
:partner = finman
|
|
:org = finmanorg
|
|
:project = myproject
|
|
:description = this is my first project
|
|
:opts.urlScope_user = user/b2e4162c-60df-4fd7-b8fd-8fd3e4d6e533
|
|
:opts.urlScope_org = organization/0d95d65f-3ce9-4340-ac05-77f71084d0a6
|
|
:orgid = 0d95d65f-3ce9-4340-ac05-77f71084d0a6
|
|
:accountid = b2e4162c-60df-4fd7-b8fd-8fd3e4d6e533
|
|
opts.urlScope_cluster = cluster/eff85770-1a9e-42bc-824b-d0ff5a0f792c
|
|
:cluster = testcluster
|
|
:location = coimbatore-hq
|
|
:city = coimbatore
|
|
:state = tamilnadu
|
|
:country = India
|
|
:group = group-name
|
|
:role = role-name
|
|
:user = user.name@provider.com
|
|
:namespace = 7
|
|
|
|
|
|
## Project
|
|
|
|
# Create Project
|
|
POST :host/auth/v3/partner/:partner/organization/:organization/project
|
|
Content-Type: application/yaml
|
|
|
|
metadata:
|
|
partner: :partner
|
|
organization: :org
|
|
name: :project
|
|
spec:
|
|
default: true
|
|
|
|
# Get all projects
|
|
GET :host/auth/v3/partner/:partner/organization/:organization/projects
|
|
Content-Type: application/yaml
|
|
|
|
# Get single project
|
|
GET :host/auth/v3/partner/:partner/organization/:organization/project/:project
|
|
Content-Type: application/yaml
|
|
|
|
# Update project info
|
|
PUT :host/auth/v3/partner/:partner/organization/:organization/project/:project
|
|
Content-Type: application/yaml
|
|
|
|
metadata:
|
|
partner: :partner
|
|
organization: :org
|
|
name: :project
|
|
description: :description
|
|
spec:
|
|
default: true
|
|
|
|
# Delete single project
|
|
DELETE :host/auth/v3/partner/:partner/organization/:organization/project/:project
|
|
|
|
|
|
## Kubeconfig setting
|
|
|
|
# Publish kubeconfig setting
|
|
PUT :host/v2/sentry/kubeconfig/:opts.urlScope_user/setting
|
|
Content-Type: application/yaml
|
|
|
|
opts:
|
|
organization: :orgid
|
|
account: :accountid
|
|
validitySeconds: 5000
|
|
enableSessionCheck: true
|
|
enablePrivateRelay: true
|
|
enforceOrgAdminSecretAccess: true
|
|
disableWebKubectl: false
|
|
disableCLIKubectl: false
|
|
|
|
# Get kubeconfig setting
|
|
GET :host/v2/sentry/kubeconfig/:opts.urlScope_user/setting
|
|
|
|
# Publish kubeconfig setting
|
|
PUT :host/v2/sentry/kubeconfig/:opts.urlScope_org/setting
|
|
Content-Type: application/yaml
|
|
|
|
opts:
|
|
organization: :orgid
|
|
validitySeconds: 5000
|
|
enableSessionCheck: true
|
|
enablePrivateRelay: true
|
|
enforceOrgAdminSecretAccess: true
|
|
disableWebKubectl: false
|
|
disableCLIKubectl: false
|
|
|
|
# Get kubeconfig setting
|
|
GET :host/v2/sentry/kubeconfig/:opts.urlScope_org/setting
|
|
|
|
# Get kubeconfig for cluster system session
|
|
GET :host/v2/sentry/kubeconfig/clustersystemsession?systemUser=true&opts.Organization=cc02bd83-89d8-4c76-a7dc-06854f93e21d
|
|
|
|
# Get kubeconfig for cluster web session
|
|
GET :host/v2/sentry/kubeconfig/clusterwebsession?opts.account=b2e4162c-60df-4fd7-b8fd-8fd3e4d6e533&opts.organization=0d95d65f-3ce9-4340-ac05-77f71084d0a6&opts.partner=1aa87c65-f7a2-41c6-9d74-5fc27969836c&opts.username=nirav.parikh@finman.tech
|
|
|
|
# Get kubeconfig for user
|
|
GET :host/v2/sentry/kubeconfig/user?opts.selector=&opts.account=c6974c2e-ef14-41bd-a5d5-4297cfe1dd4a&opts.organization=928b87f5-a4e8-4c97-8c91-0d431d7e1b82&opts.partner=a02cdb9f-a84f-49a1-b483-e7722d519cb8
|
|
|
|
# Revoke kubeconfig for user
|
|
POST :host/v2/sentry/kubeconfig/revoke
|
|
Content-Type: application/yaml
|
|
|
|
opts:
|
|
organization: cc02bd83-89d8-4c76-a7dc-06854f93e21d
|
|
account: c6974c2e-ef14-41bd-a5d5-4297cfe1dd4a
|
|
partner: a02cdb9f-a84f-49a1-b483-e7722d519cb8
|
|
|
|
# Kubeconfig get cluster settings
|
|
GET :host/v2/sentry/kubectl/:opts.urlScope_cluster/settings?opts.organization=cc02bd83-89d8-4c76-a7dc-06854f93e21d
|
|
|
|
# Publish kubectl settings
|
|
PUT :host/v2/sentry/kubectl/:opts.urlScope_cluster/settings
|
|
Content-Type: application/yaml
|
|
|
|
opts:
|
|
organization: cc02bd83-89d8-4c76-a7dc-06854f93e21d
|
|
disableWebKubectl: true
|
|
disableCLIKubectl: true
|
|
|
|
# Get User Authorization
|
|
GET :host/v2/sentry/authorization/user?userCN=a=b2e4162c-60df-4fd7-b8fd-8fd3e4d6e533/o=0d95d65f-3ce9-4340-ac05-77f71084d0a6/p=dec2483b-41b6-482f-b885-8d0edc39f76e/u=nirav.parikh@finman.tech&clusterID=28f0862f-a3e0-462d-9dae-88b9bb7f283c&certIssueSeconds=36000
|
|
|
|
## Location
|
|
|
|
# Create Location
|
|
POST :host/v3/partner/:partner/location
|
|
Content-Type: application/yaml
|
|
|
|
metadata:
|
|
name: :location
|
|
partner: :partner
|
|
spec:
|
|
city: :city
|
|
state: :state
|
|
country: :country
|
|
countryCode: IN
|
|
stateCode: TN
|
|
|
|
# Get all location
|
|
GET :host/v3/partner/:partner/location
|
|
Content-Type: application/yaml
|
|
|
|
# Get single location
|
|
GET :host/v3/partner/:partner/location/:location
|
|
Content-Type: application/yaml
|
|
|
|
# Update location info
|
|
PUT :host/v3/partner/:partner/location/:location
|
|
Content-Type: application/yaml
|
|
|
|
metadata:
|
|
name: :location
|
|
partner: :partner
|
|
spec:
|
|
city: :city
|
|
state: :state
|
|
country: :country
|
|
countryCode: IN
|
|
stateCode: TN
|
|
locale: IN
|
|
|
|
# Delete single location
|
|
DELETE :host/v3/partner/:partner/location/:location
|
|
|
|
## Cluster
|
|
|
|
# Create Cluster
|
|
POST :host/infra/v3/project/:project/cluster
|
|
Content-Type: application/yaml
|
|
|
|
metadata:
|
|
name: :cluster
|
|
partner: :partner
|
|
organization: :organization
|
|
project: :project
|
|
spec:
|
|
clusterType: imported
|
|
params:
|
|
environmentProvider: ''
|
|
kubernetesProvider: OTHER
|
|
provisionEnvironment: ONPREM
|
|
provisionPackageType: ''
|
|
provisionType: IMPORT
|
|
state: CONFIG
|
|
|
|
# Get all clusters
|
|
GET :host/infra/v3/project/:project/cluster
|
|
Content-Type: application/yaml
|
|
|
|
# Get single cluster
|
|
GET :host/infra/v3/project/:project/cluster/:cluster
|
|
Content-Type: application/yaml
|
|
|
|
# Update cluster info
|
|
PUT :host/infra/v3/project/:project/cluster/:cluster
|
|
Content-Type: application/yaml
|
|
|
|
apiVersion: infra.k8smgmt.io/v3
|
|
kind: Cluster
|
|
metadata:
|
|
name: :cluster
|
|
description: this is a test cluster
|
|
labels:
|
|
rafay.dev/clusterLocation: coimbatore-hq
|
|
rafay.dev/clusterName: testcluster
|
|
rafay.dev/clusterType: imported
|
|
project: myproject
|
|
organization: finmanorg
|
|
partner: finman
|
|
spec:
|
|
clusterType: imported
|
|
metro:
|
|
name: :location
|
|
city: :city
|
|
state: :state
|
|
country: :country
|
|
overrideSelector: rafay.dev/overrideCluster=dummycluster
|
|
proxyConfig:
|
|
httpProxy: http:localhost:8080/proxy
|
|
|
|
# Delete single cluster
|
|
DELETE :host/infra/v3/project/:project/cluster/:cluster
|
|
|
|
## Users
|
|
|
|
# Create user
|
|
POST :host/auth/v3/users
|
|
Content-Type: application/yaml
|
|
|
|
metadata:
|
|
partner: :partner
|
|
organization: :org
|
|
name: :user
|
|
spec:
|
|
firstName: John
|
|
lastName: Doe
|
|
|
|
# Create user with roles
|
|
POST :host/auth/v3/users
|
|
Content-Type: application/yaml
|
|
|
|
metadata:
|
|
partner: :partner
|
|
organization: :org
|
|
name: :user
|
|
spec:
|
|
firstName: John
|
|
lastName: Doe
|
|
projectNamespaceRoles:
|
|
- role: NAMESPACE_ADMIN
|
|
namespace: :namespace
|
|
project: :project
|
|
|
|
# Get all users
|
|
GET :host/auth/v3/users
|
|
Content-Type: application/yaml
|
|
|
|
# Get single user
|
|
GET :host/auth/v3/user/:user
|
|
Content-Type: application/yaml
|
|
|
|
# Update user info
|
|
PUT :host/auth/v3/user/:user
|
|
Content-Type: application/yaml
|
|
|
|
metadata:
|
|
partner: :partner
|
|
organization: :org
|
|
name: :user
|
|
spec:
|
|
firstName: John
|
|
lastName: Cena
|
|
projectNamespaceRoles:
|
|
- role: ADMIN
|
|
|
|
# Delete single user
|
|
DELETE :host/auth/v3/user/:user
|
|
|
|
|
|
## Groups
|
|
|
|
# Create group
|
|
POST :host/auth/v3/partner/:partner/organization/:org/groups
|
|
Content-Type: application/yaml
|
|
|
|
metadata:
|
|
name: :group
|
|
description: My first description
|
|
partner: :partner
|
|
organization: :org
|
|
spec:
|
|
type: simple
|
|
users:
|
|
- :user
|
|
projectNamespaceRoles:
|
|
- role: NAMESPACE_ADMIN
|
|
namespace: :namespace
|
|
project: :project
|
|
|
|
# Create group no namespace and project
|
|
POST :host/auth/v3/partner/:partner/organization/:org/groups
|
|
Content-Type: application/yaml
|
|
|
|
metadata:
|
|
name: :group
|
|
description: My first description
|
|
partner: :partner
|
|
organization: :org
|
|
spec:
|
|
type: simple
|
|
users:
|
|
- :user
|
|
projectNamespaceRoles:
|
|
- role: CLUSTER_ADMIN
|
|
|
|
# Update group to no namespace
|
|
PUT :host/auth/v3/partner/:partner/organization/:org/group/:group
|
|
Content-Type: application/yaml
|
|
|
|
metadata:
|
|
name: :group
|
|
description: My first description
|
|
partner: :partner
|
|
organization: :org
|
|
spec:
|
|
type: simple
|
|
users:
|
|
- :user
|
|
projectNamespaceRoles:
|
|
- role: ADMIN
|
|
|
|
|
|
# Get all groups
|
|
GET :host/auth/v3/partner/:partner/organization/:org/groups
|
|
Content-Type: application/yaml
|
|
|
|
# Get a group
|
|
GET :host/auth/v3/partner/:partner/organization/:org/group/:group
|
|
Content-Type: application/yaml
|
|
|
|
# Delete a group
|
|
DELETE :host/auth/v3/partner/:partner/organization/:org/group/:group
|
|
Content-Type: application/yaml
|
|
|
|
## Roles
|
|
|
|
# Create empty role
|
|
POST :host/auth/v3/partner/:partner/organization/:org/roles
|
|
Content-Type: application/yaml
|
|
|
|
metadata:
|
|
name: :role
|
|
description: My first role
|
|
partner: :partner
|
|
organization: :org
|
|
spec:
|
|
isGlobal: true
|
|
scope: cluster
|
|
|
|
# Create role
|
|
POST :host/auth/v3/partner/:partner/organization/:org/roles
|
|
Content-Type: application/yaml
|
|
|
|
metadata:
|
|
name: :role
|
|
description: My first role
|
|
partner: :partner
|
|
organization: :org
|
|
spec:
|
|
isGlobal: true
|
|
scope: cluster
|
|
rolepermissions:
|
|
- account.read
|
|
- ops_star.all
|
|
|
|
# Update role
|
|
PUT :host/auth/v3/partner/:partner/organization/:org/role/:role
|
|
Content-Type: application/yaml
|
|
|
|
metadata:
|
|
name: :role
|
|
description: My first role
|
|
partner: :partner
|
|
organization: :org
|
|
spec:
|
|
isGlobal: true
|
|
scope: cluster
|
|
rolepermissions:
|
|
- account.read
|
|
|
|
# Get all roles
|
|
GET :host/auth/v3/partner/:partner/organization/:org/roles
|
|
Content-Type: application/yaml
|
|
|
|
# Get a role
|
|
GET :host/auth/v3/partner/:partner/organization/:org/role/:role
|
|
Content-Type: application/yaml
|
|
|
|
# Delete a role
|
|
DELETE :host/auth/v3/partner/:partner/organization/:org/role/:role
|
|
Content-Type: application/yaml
|
|
|
|
|
|
## Rolepermission
|
|
|
|
# Get all rolepermissions
|
|
GET :host/auth/v3/rolepermissions
|
|
Content-Type: application/yaml |