Files
lab_ai/.fission/access-rules.yaml

399 lines
13 KiB
YAML
Raw Permalink Normal View History

2026-01-26 11:55:42 +00:00
# - id: 'ai-work-create'
# description: 'This description'
# upstream:
# preserve_host: true
# url: 'http://router.fission.svc.cluster.local:80'
# strip_path: 'v1/'
# match:
# url: 'https://api.geohub.vn/v1/ailbl/admin/tags'
# methods:
# - POST
# authenticators:
# - handler: cookie_session
# authorizer:
# handler: remote_json
# config:
# remote: 'http://keto-service.ory-stack.svc.cluster.local:4466/relation-tuples/check'
# payload: >-
# {"namespace":"user_group_access","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::create","relation":"access"}
# mutators:
# - handler: header
# - id: 'ai-work-view'
# description: 'This description'
# upstream:
# preserve_host: true
# url: 'http://router.fission.svc.cluster.local:80'
# strip_path: 'v1/'
# match:
# url: 'https://api.geohub.vn/v1/ailbl/admin/tags'
# methods:
# - GET
# authenticators:
# - handler: cookie_session
# authorizer:
# handler: remote_json
# config:
# remote: 'http://keto-service.ory-stack.svc.cluster.local:4466/relation-tuples/check'
# payload: >-
# {"namespace":"user_group_access","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::view","relation":"access"}
# mutators:
# - handler: header
# - id: 'ai-work-update'
# description: 'This description'
# upstream:
# preserve_host: true
# url: 'http://router.fission.svc.cluster.local:80'
# strip_path: 'v1/'
# match:
# url: 'https://api.geohub.vn/v1/ailbl/admin/tags/<[0-9a-fA-F\-]{36}>'
# methods:
# - PUT
# authenticators:
# - handler: cookie_session
# authorizer:
# handler: remote_json
# config:
# remote: 'http://keto-service.ory-stack.svc.cluster.local:4466/relation-tuples/check'
# payload: >-
# {"namespace":"user_group_access","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::update","relation":"access"}
# mutators:
# - handler: header
# - id: 'ai-work-delete'
# description: 'This description'
# upstream:
# preserve_host: true
# url: 'http://router.fission.svc.cluster.local:80'
# strip_path: 'v1/'
# match:
# url: 'https://api.geohub.vn/v1/ailbl/admin/tags/<[0-9a-fA-F\-]{36}>'
# methods:
# - DELETE
# authenticators:
# - handler: cookie_session
# authorizer:
# handler: remote_json
# config:
# remote: 'http://keto-service.ory-stack.svc.cluster.local:4466/relation-tuples/check'
# payload: >-
# {"namespace":"user_group_access","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::delete","relation":"access"}
# mutators:
# - handler: header
# - id: 'ai-work-ref-create'
# description: 'This description'
# upstream:
# preserve_host: true
# url: 'http://router.fission.svc.cluster.local:80'
# strip_path: 'v1/'
# match:
# url: 'https://api.geohub.vn/v1/ailbl/admin/tags/<[0-9a-fA-F\-]{36}>/refs'
# methods:
# - POST
# authenticators:
# - handler: cookie_session
# authorizer:
# handler: remote_json
# config:
# remote: 'http://keto-service.ory-stack.svc.cluster.local:4466/relation-tuples/check'
# payload: >-
# {"namespace":"user_group_access","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::ref::create","relation":"access"}
# mutators:
# - handler: header
# - id: 'ai-work-ref-view'
# description: 'This description'
# upstream:
# preserve_host: true
# url: 'http://router.fission.svc.cluster.local:80'
# strip_path: 'v1/'
# match:
# url: 'https://api.geohub.vn/v1/ailbl/admin/tags/<[0-9a-fA-F\-]{36}>/refs'
# methods:
# - GET
# authenticators:
# - handler: cookie_session
# authorizer:
# handler: remote_json
# config:
# remote: 'http://keto-service.ory-stack.svc.cluster.local:4466/relation-tuples/check'
# payload: >-
# {"namespace":"user_group_access","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::ref::view","relation":"access"}
# mutators:
# - handler: header
# - id: 'ai-work-ref-delete'
# description: 'This description'
# upstream:
# preserve_host: true
# url: 'http://router.fission.svc.cluster.local:80'
# strip_path: 'v1/'
# match:
# url: 'https://api.geohub.vn/v1/ailbl/admin/tags/<[0-9a-fA-F\-]{36}>/refs/<[0-9a-fA-F\-]{36}>'
# methods:
# - DELETE
# authenticators:
# - handler: cookie_session
# authorizer:
# handler: remote_json
# config:
# remote: 'http://keto-service.ory-stack.svc.cluster.local:4466/relation-tuples/check'
# payload: >-
# {"namespace":"user_group_access","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::ref::delete","relation":"access"}
# mutators:
# - handler: header
# - id: 'ai-work-owner-create'
# description: 'This description'
# upstream:
# preserve_host: true
# url: 'http://router.fission.svc.cluster.local:80'
# strip_path: 'v1/'
# match:
# url: 'https://api.geohub.vn/v1/ailbl/users/tags'
# methods:
# - POST
# authenticators:
# - handler: cookie_session
# authorizer:
# handler: remote_json
# config:
# remote: 'http://keto-service.ory-stack.svc.cluster.local:4466/relation-tuples/check'
# payload: >-
# {"namespace":"user_group_access","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::owner::create","relation":"access"}
# mutators:
# - handler: header
# - id: 'ai-work-owner-view'
# description: 'This description'
# upstream:
# preserve_host: true
# url: 'http://router.fission.svc.cluster.local:80'
# strip_path: 'v1/'
# match:
# url: 'https://api.geohub.vn/v1/ailbl/users/tags'
# methods:
# - GET
# authenticators:
# - handler: cookie_session
# authorizer:
# handler: remote_json
# config:
# remote: 'http://keto-service.ory-stack.svc.cluster.local:4466/relation-tuples/check'
# payload: >-
# {"namespace":"user_group_access","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::owner::view","relation":"access"}
# mutators:
# - handler: header
# - id: 'ai-work-owner-update'
# description: 'This description'
# upstream:
# preserve_host: true
# url: 'http://router.fission.svc.cluster.local:80'
# strip_path: 'v1/'
# match:
# url: 'https://api.geohub.vn/v1/ailbl/users/tags/<[0-9a-fA-F\-]{36}>'
# methods:
# - PUT
# authenticators:
# - handler: cookie_session
# authorizer:
# handler: remote_json
# config:
# remote: 'http://keto-service.ory-stack.svc.cluster.local:4466/relation-tuples/check'
# payload: >-
# {"namespace":"user_group_access","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::owner::update","relation":"access"}
# mutators:
# - handler: header
# - id: 'ai-work-owner-delete'
# description: 'This description'
# upstream:
# preserve_host: true
# url: 'http://router.fission.svc.cluster.local:80'
# strip_path: 'v1/'
# match:
# url: 'https://api.geohub.vn/v1/ailbl/users/tags/<[0-9a-fA-F\-]{36}>'
# methods:
# - DELETE
# authenticators:
# - handler: cookie_session
# authorizer:
# handler: remote_json
# config:
# remote: 'http://keto-service.ory-stack.svc.cluster.local:4466/relation-tuples/check'
# payload: >-
# {"namespace":"user_group_access","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::owner::delete","relation":"access"}
# mutators:
# - handler: header
# - id: 'ai-work-ref-owner-create'
# description: 'This description'
# upstream:
# preserve_host: true
# url: 'http://router.fission.svc.cluster.local:80'
# strip_path: 'v1/'
# match:
# url: 'https://api.geohub.vn/v1/ailbl/users/tags/<[0-9a-fA-F\-]{36}>/refs'
# methods:
# - POST
# authenticators:
# - handler: cookie_session
# authorizer:
# handler: remote_json
# config:
# remote: 'http://keto-service.ory-stack.svc.cluster.local:4466/relation-tuples/check'
# payload: >-
# {"namespace":"user_group_access","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::ref::owner::create","relation":"access"}
# mutators:
# - handler: header
# - id: 'ai-work-ref-owner-view'
# description: 'This description'
# upstream:
# preserve_host: true
# url: 'http://router.fission.svc.cluster.local:80'
# strip_path: 'v1/'
# match:
# url: 'https://api.geohub.vn/v1/ailbl/users/tags/<[0-9a-fA-F\-]{36}>/refs'
# methods:
# - GET
# authenticators:
# - handler: cookie_session
# authorizer:
# handler: remote_json
# config:
# remote: 'http://keto-service.ory-stack.svc.cluster.local:4466/relation-tuples/check'
# payload: >-
# {"namespace":"user_group_access","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::ref::owner::view","relation":"access"}
# mutators:
# - handler: header
# - id: 'ai-work-ref-owner-delete'
# description: 'This description'
# upstream:
# preserve_host: true
# url: 'http://router.fission.svc.cluster.local:80'
# strip_path: 'v1/'
# match:
# url: 'https://api.geohub.vn/v1/ailbl/users/tags/<[0-9a-fA-F\-]{36}>/refs/<[0-9a-fA-F\-]{36}>'
# methods:
# - DELETE
# authenticators:
# - handler: cookie_session
# authorizer:
# handler: remote_json
# config:
# remote: 'http://keto-service.ory-stack.svc.cluster.local:4466/relation-tuples/check'
# payload: >-
# {"namespace":"user_group_access","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::ref::owner::delete","relation":"access"}
# mutators:
# - handler: header
# - id: 'ai-work-ref-owner-create-bulk'
# description: 'This description'
# upstream:
# preserve_host: true
# url: 'http://router.fission.svc.cluster.local:80'
# strip_path: 'v1/'
# match:
# url: 'https://api.geohub.vn/v1/ailbl/users/tags/ref-bulk'
# methods:
# - POST
# authenticators:
# - handler: cookie_session
# authorizer:
# handler: remote_json
# config:
# remote: 'http://keto-service.ory-stack.svc.cluster.local:4466/relation-tuples/check'
# payload: >-
# {"namespace":"user_group_access","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::ref::owner::create::bulk","relation":"access"}
# mutators:
# - handler: header
# - id: 'ai-work-ref-create-bulk'
# description: 'This description'
# upstream:
# preserve_host: true
# url: 'http://router.fission.svc.cluster.local:80'
# strip_path: 'v1/'
# match:
# url: 'https://api.geohub.vn/v1/ailbl/admin/tags/ref-bulk'
# methods:
# - POST
# authenticators:
# - handler: cookie_session
# authorizer:
# handler: remote_json
# config:
# remote: 'http://keto-service.ory-stack.svc.cluster.local:4466/relation-tuples/check'
# payload: >-
# {"namespace":"user_group_access","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::ref::create::bulk","relation":"access"}
# mutators:
# - handler: header
# - id: 'ai-work-ref-owner-view-bulk'
# description: 'This description'
# upstream:
# preserve_host: true
# url: 'http://router.fission.svc.cluster.local:80'
# strip_path: 'v1/'
# match:
# url: 'https://api.geohub.vn/v1/ailbl/users/tags/refs'
# methods:
# - GET
# authenticators:
# - handler: cookie_session
# authorizer:
# handler: remote_json
# config:
# remote: 'http://keto-service.ory-stack.svc.cluster.local:4466/relation-tuples/check'
# payload: >-
# {"namespace":"user_group_access","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::ref::owner::view::bulk","relation":"access"}
# mutators:
# - handler: header
# - id: 'ai-work-owner-create-default'
# description: 'This description'
# upstream:
# preserve_host: true
# url: 'http://router.fission.svc.cluster.local:80'
# strip_path: 'v1/'
# match:
# url: 'https://api.geohub.vn/v1/ailbl/tags/users/defaults/instantiate'
# methods:
# - POST
# authenticators:
# - handler: cookie_session
# authorizer:
# handler: remote_json
# config:
# remote: 'http://keto-service.ory-stack.svc.cluster.local:4466/relation-tuples/check'
# payload: >-
# {"namespace":"user_group_access","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::owner::create::default","relation":"access"}
# mutators:
# - handler: header
# - id: 'ai-work-owner-view-kind-ticket'
# description: 'This description'
# upstream:
# preserve_host: true
# url: 'http://router.fission.svc.cluster.local:80'
# strip_path: 'v1/'
# match:
# url: 'https://api.geohub.vn/v1/ailbl/tags/users/tags-ticket'
# methods:
# - GET
# authenticators:
# - handler: cookie_session
# authorizer:
# handler: remote_json
# config:
# remote: 'http://keto-service.ory-stack.svc.cluster.local:4466/relation-tuples/check'
# payload: >-
# {"namespace":"user_group_access","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::owner::view::kind-ticket","relation":"access"}
# mutators:
# - handler: header