FirstCommit_Avatar

2025-11-18 12:40:34 +07:00
commit a1ecdd502d
37 changed files with 2706 additions and 0 deletions
--- a/.fission/access-rules.yaml
+++ b/.fission/access-rules.yaml
@@ -0,0 +1,146 @@
+- id: 'ailbl-tag-create'
+  description: 'This description'
+  upstream:
+    preserve_host: true
+    url: 'http://router.fission.svc.cluster.local:80'
+    strip_path: 'v1/'
+  match:
+    url: 'https://api.geohub.vn/v1/ailbl/admin/tags'
+    methods:
+    - POST
+  authenticators:
+  - handler: cookie_session
+  authorizer:
+    handler: remote_json
+    config:
+      remote: 'http://keto-service.ory-staging.svc.cluster.local:4466/relation-tuples/check'
+      payload: >-
+        {"namespace":"AilblAcp","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::create","relation":"access"}
+  mutators:
+  - handler: header
+
+- id: 'ailbl-tag-view'
+  description: 'This description'
+  upstream:
+    preserve_host: true
+    url: 'http://router.fission.svc.cluster.local:80'
+    strip_path: 'v1/'
+  match:
+    url: 'https://api.geohub.vn/v1/ailbl/admin/tags'
+    methods:
+    - GET
+  authenticators:
+  - handler: cookie_session
+  authorizer:
+    handler: remote_json
+    config:
+      remote: 'http://keto-service.ory-staging.svc.cluster.local:4466/relation-tuples/check'
+      payload: >-
+        {"namespace":"AilblAcp","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::view","relation":"access"}
+  mutators:
+  - handler: header
+
+- id: 'ailbl-tag-update'
+  description: 'This description'
+  upstream:
+    preserve_host: true
+    url: 'http://router.fission.svc.cluster.local:80'
+    strip_path: 'v1/'
+  match:
+    url: 'https://api.geohub.vn/v1/ailbl/admin/tags/<[0-9a-fA-F\-]{36}>'
+    methods:
+    - PUT
+  authenticators:
+  - handler: cookie_session
+  authorizer:
+    handler: remote_json
+    config:
+      remote: 'http://keto-service.ory-staging.svc.cluster.local:4466/relation-tuples/check'
+      payload: >-
+        {"namespace":"AilblAcp","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::update","relation":"access"}
+  mutators:
+  - handler: header
+
+- id: 'ailbl-tag-delete'
+  description: 'This description'
+  upstream:
+    preserve_host: true
+    url: 'http://router.fission.svc.cluster.local:80'
+    strip_path: 'v1/'
+  match:
+    url: 'https://api.geohub.vn/v1/ailbl/admin/tags/<[0-9a-fA-F\-]{36}>'
+    methods:
+    - DELETE
+  authenticators:
+  - handler: cookie_session
+  authorizer:
+    handler: remote_json
+    config:
+      remote: 'http://keto-service.ory-staging.svc.cluster.local:4466/relation-tuples/check'
+      payload: >-
+        {"namespace":"AilblAcp","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::delete","relation":"access"}
+  mutators:
+  - handler: header
+
+- id: 'ailbl-tag-ref-create'
+  description: 'This description'
+  upstream:
+    preserve_host: true
+    url: 'http://router.fission.svc.cluster.local:80'
+    strip_path: 'v1/'
+  match:
+    url: 'https://api.geohub.vn/v1/ailbl/admin/tags/<[0-9a-fA-F\-]{36}>/refs'
+    methods:
+    - POST
+  authenticators:
+  - handler: cookie_session
+  authorizer:
+    handler: remote_json
+    config:
+      remote: 'http://keto-service.ory-staging.svc.cluster.local:4466/relation-tuples/check'
+      payload: >-
+        {"namespace":"AilblAcp","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::ref::create","relation":"access"}
+  mutators:
+  - handler: header
+
+- id: 'ailbl-tag-ref-view'
+  description: 'This description'
+  upstream:
+    preserve_host: true
+    url: 'http://router.fission.svc.cluster.local:80'
+    strip_path: 'v1/'
+  match:
+    url: 'https://api.geohub.vn/v1/ailbl/admin/tags/<[0-9a-fA-F\-]{36}>/refs'
+    methods:
+    - GET
+  authenticators:
+  - handler: cookie_session
+  authorizer:
+    handler: remote_json
+    config:
+      remote: 'http://keto-service.ory-staging.svc.cluster.local:4466/relation-tuples/check'
+      payload: >-
+        {"namespace":"AilblAcp","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::ref::view","relation":"access"}
+  mutators:
+  - handler: header
+
+- id: 'ailbl-tag-ref-delete'
+  description: 'This description'
+  upstream:
+    preserve_host: true
+    url: 'http://router.fission.svc.cluster.local:80'
+    strip_path: 'v1/'
+  match:
+    url: 'https://api.geohub.vn/v1/ailbl/admin/tags/<[0-9a-fA-F\-]{36}>/refs/<[0-9a-fA-F\-]{36}>'
+    methods:
+    - DELETE
+  authenticators:
+  - handler: cookie_session
+  authorizer:
+    handler: remote_json
+    config:
+      remote: 'http://keto-service.ory-staging.svc.cluster.local:4466/relation-tuples/check'
+      payload: >-
+        {"namespace":"AilblAcp","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::ref::delete","relation":"access"}
+  mutators:
+  - handler: header