Update permissions (22244890) · Commits · MEC - Multi-access Edge Computing / ETSI MEC Sandbox Frontend

config/.meepctl-repocfg.yaml

+146 −121

Original line number	Diff line number	Diff line
		@@ -30,17 +30,17 @@ repo:
		# user supplied resources
		user:
		# user supplied frontend UI located @ .meep/user/frontend
		frontend: false
		frontend: true
		# user supplied platform swagger UI located @ .meep/user/swagger
		# user supplied sandbox swagger UI located @ .meep/user/sandbox-swagger
		swagger: false
		swagger: true

		# platform ingress configuration
		ingress:
		# host name
		host: mec-platform.etsi.org
		# enable https only (redirect http requests to https port)
		https-only: false
		https-only: true
		# bind to host ports (true) or node ports (false)
		host-ports: true
		# http port number
		@@ -67,27 +67,27 @@ repo:
		# GitHub OAuth provider config
		github:
		# enable GitHub OAuth
		enabled: false
		enabled: true
		# authorization url
		auth-url: https://github.com/login/oauth/authorize
		# access token url
		token-url: https://github.com/login/oauth/access_token
		# OAuth redirect URI
		redirect-uri: https://mec-platform.etsi.org/auth/v1/authorize
		redirect-uri: https://mec-platform.etsi.org/platform-ctrl/v1/authorize
		# OAuth k8s secret (data: client-id, secret)
		secret: meep-oauth-github
		# GitLab OAuth provider config
		gitlab:
		# enable GitLab OAuth
		enabled: false
		enabled: true
		# authorization url
		auth-url: https://gitlab.com/oauth/authorize
		auth-url: https://forge.etsi.org/rep/oauth/authorize
		# access token url
		token-url: https://gitlab.com/oauth/token
		token-url: https://forge.etsi.org/rep/oauth/token
		# OAuth redirect URI
		redirect-uri: https://mec-platform.etsi.org/auth/v1/authorize
		redirect-uri: https://mec-platform.etsi.org/platform-ctrl/v1/authorize
		# GitLab api url
		# api-url: https://gitlab.com
		api-url: https://forge.etsi.org/rep/api/v4
		# OAuth k8s secret (data: client-id, secret)
		secret: meep-oauth-gitlab

		@@ -96,9 +96,9 @@ repo:
		# Influx configuration
		influx:
		# enable influx data backups
		enabled: false
		enabled: true
		# object store url
		url: my-object-store-fqdn
		url: https://metrics.mec-platform.etsi.org/
		# object store configuration secret
		secret: meep-influx-objstore-config
		# Number of days to retain daily data backups
		@@ -108,13 +108,13 @@ repo:
		# external labels added to prometheus metrics
		external-labels:
		# deployment region (geographic or logical)
		region: idcc
		region: etsi
		# function being monitored
		monitor: advantedge
		# prometheus environment (dev\|prod)
		promenv: prod
		# unique deployment identifier
		replica: platform-ip
		replica: 172.29.10.52
		# Thanos long-term storage
		thanos:
		# enable Thanos
		@@ -167,7 +167,7 @@ repo:
		# Influx configuration
		influx:
		# enable influx garbage collection
		enabled: false
		enabled: true
		# list of databases that must not be removed
		exceptions:
		# - my_db_to_keep
		@@ -179,14 +179,8 @@ repo:

		# Default monitoring dashboards
		dashboards:
		network-metrics-point-to-point: dashboards/network-metrics-point-to-point.json
		network-metrics-aggregation: dashboards/network-metrics-aggregation.json
		wireless-metrics-point-to-point: dashboards/wireless-metrics-point-to-point.json
		wireless-metrics-aggregation: dashboards/wireless-metrics-aggregation.json
		http-single-log: dashboards/http-log-byId.json
		http-logs-aggregation: dashboards/http-loggers.json
		mec-sandbox: dashboards/mec-sandbox.json
		platform-advantedge: dashboards/platform-advantedge.json
		# platform-advantedge: dashboards/platform-advantedge-thanos.json
		platform-k8s: dashboards/platform-k8s.json
		runtime-environment-node: dashboards/runtime-environment-node.json
		runtime-environment-k8s-cluster: dashboards/runtime-environment-k8s-cluster.json
		@@ -237,7 +231,7 @@ repo:
		# location of entry script
		'entrypoint.sh': go-apps/meep-auth-svc/entrypoint.sh
		# location of REST API permissions file
		'permissions.yaml': config/permissions-open.yaml
		'permissions.yaml': config/permissions.yaml
		meep-ingress-certs:
		# enable meepctl build
		build: false
		@@ -275,7 +269,7 @@ repo:
		lint: true
		# list of dependencies pods to monitor
		dependency-pods:
		# - meep-cert-manager
		- meep-cert-manager
		- meep-couchdb
		- meep-docker-registry
		- meep-grafana
		@@ -296,18 +290,18 @@ repo:
		# list of sandbox pods to monitor
		sandbox-pods:
		- meep-gis-engine
		- meep-loc-serv
		# - meep-loc-serv
		- meep-metrics-engine
		- meep-mg-manager
		- meep-rnis
		- meep-dai
		- meep-tm
		- meep-wais
		- meep-ams
		# - meep-mg-manager
		# - meep-rnis
		# - meep-dai
		# - meep-tm
		# - meep-wais
		# - meep-ams
		- meep-sandbox-ctrl
		- meep-tc-engine
		- meep-app-enablement
		- meep-vis
		# - meep-tc-engine
		# - meep-app-enablement
		# - meep-vis
		# location of API specifications
		api:
		- name: 'AdvantEDGE Monitoring Engine REST API'
		@@ -372,7 +366,7 @@ repo:
		lint: true
		# location of API specifications
		api:
		- name: 'AdvantEDGE HTTP REST API'
		- name: 'AdvantEDGE Platform Controller REST API'
		file: go-apps/meep-sandbox-api/api/swagger.yaml
		# location of user supplied API specifications
		user-api:
		@@ -381,9 +375,9 @@ repo:
		# location of entry script
		'entrypoint.sh': go-apps/meep-sandbox-api/entrypoint.sh
		# location of Swagger UI
		swagger: js-apps/meep-swagger-ui
		#swagger: js-apps/meep-swagger-ui
		# location of AdvantEDGE frontend
		frontend: bin/meep-frontend
		#frontend: bin/meep-frontend
		meep-virt-engine:
		# location of source code
		src: go-apps/meep-virt-engine
		@@ -413,7 +407,7 @@ repo:
		meep-metrics-engine: charts/meep-metrics-engine
		meep-mg-manager: charts/meep-mg-manager
		meep-rnis: charts/meep-rnis
		meep-dai: charts/meep-dai
		# meep-dai: charts/meep-dai
		meep-tm: charts/meep-tm
		meep-wais: charts/meep-wais
		meep-ams: charts/meep-ams
		@@ -425,18 +419,18 @@ repo:
		# list of sandbox specific pods
		sandbox-pods:
		- meep-gis-engine
		- meep-loc-serv
		# - meep-loc-serv
		- meep-metrics-engine
		- meep-mg-manager
		- meep-rnis
		- meep-dai
		- meep-tm
		- meep-wais
		- meep-ams
		# - meep-mg-manager
		# - meep-rnis
		# - meep-dai
		# - meep-tm
		# - meep-wais
		# - meep-ams
		- meep-sandbox-ctrl
		- meep-tc-engine
		- meep-app-enablement
		- meep-vis
		# - meep-tc-engine
		# - meep-app-enablement
		# - meep-vis
		meep-webhook:
		# location of source code
		src: go-apps/meep-webhook
		@@ -520,6 +514,8 @@ repo:
		file: go-apps/meep-ams/api/swagger.yaml
		# location of user supplied API specifications
		user-api:
		- name: 'Application Mobility Service REST API'
		file: config/api/ams-api.yaml
		# resources available to docker container image
		docker-data:
		# location of entry script
		@@ -554,6 +550,10 @@ repo:
		file: go-apps/meep-app-enablement/api/service-mgmt/swagger.yaml
		# location of user supplied API specifications
		user-api:
		- name: 'MEC Application Support API'
		file: config/api/app-support.yaml
		- name: 'MEC Service Management API'
		file: config/api/service-mgmt.yaml
		# resources available to docker container image
		docker-data:
		# location of entry script
		@@ -615,6 +615,8 @@ repo:
		file: go-apps/meep-loc-serv/api/swagger.yaml
		# location of user supplied API specifications
		user-api:
		- name: 'Location Service REST API'
		file: config/api/loc-serv-api.yaml
		# resources available to docker container image
		docker-data:
		# location of entry script
		@@ -663,15 +665,15 @@ repo:
		# user supplied value file located @ .meep/user/values (use below file name)
		chart-user-values: meep-mg-manager.yaml
		# enable meepctl build
		build: true
		build: false
		# enable meepctl dockerize
		dockerize: true
		dockerize: false
		# enable meepctl deploy/delete
		deploy: true
		deploy: false
		# supports code coverage measurement when built in codecov mode
		codecov: true
		# supports linting
		lint: true
		lint: false
		# location of API specifications
		api:
		- name: 'AdvantEDGE Mobility Group Service REST API'
		@@ -759,15 +761,15 @@ repo:
		# user supplied value file located @ .meep/user/values (use below file name)
		chart-user-values: meep-tc-engine.yaml
		# enable meepctl build
		build: true
		build: false
		# enable meepctl dockerize
		dockerize: true
		dockerize: false
		# enable meepctl deploy/delete
		deploy: true
		deploy: false
		# supports code coverage measurement when built in codecov mode
		codecov: true
		# supports linting
		lint: true
		lint: false
		meep-tc-sidecar:
		# location of source code
		src: go-apps/meep-tc-sidecar
		@@ -783,40 +785,6 @@ repo:
		codecov: false
		# supports linting
		lint: true
		meep-tm:
		# location of source code
		src: go-apps/meep-tm
		# location of binary
		bin: bin/meep-tm
		# location of deployment chart
		chart: charts/meep-tm
		# user supplied value file located @ .meep/user/values (use below file name)
		chart-user-values: meep-tm.yaml
		# extra build flags
		build-flags:
		- -mod=vendor
		# enable meepctl build
		build: true
		# enable meepctl dockerize
		dockerize: true
		# enable meepctl deploy/delete
		deploy: true
		# supports code coverage measurement when built in codecov mode
		codecov: true
		# supports linting
		lint: true
		# location of API specifications
		api:
		- name: 'AdvantEDGE MEC Bandwidth Management REST API'
		file: go-apps/meep-tm/api/bwm/swagger.yaml
		- name: 'AdvantEDGE MEC Multi-access Traffic Steering REST API'
		file: go-apps/meep-tm/api/mts/swagger.yaml
		# location of user supplied API specifications
		user-api:
		# resources available to docker container image
		docker-data:
		# location of entry script
		'entrypoint.sh': go-apps/meep-tm/entrypoint.sh
		meep-wais:
		# location of source code
		src: go-apps/meep-wais
		@@ -845,19 +813,21 @@ repo:
		file: go-apps/meep-wais/api/swagger.yaml
		# location of user supplied API specifications
		user-api:
		- name: 'WLAN Access Information Service REST API'
		file: config/api/wais-api.yaml
		# resources available to docker container image
		docker-data:
		# location of entry script
		'entrypoint.sh': go-apps/meep-wais/entrypoint.sh
		meep-vis:
		meep-tm:
		# location of source code
		src: go-apps/meep-vis
		src: go-apps/meep-tm
		# location of binary
		bin: bin/meep-vis
		bin: bin/meep-tm
		# location of deployment chart
		chart: charts/meep-vis
		chart: charts/meep-tm
		# user supplied value file located @ .meep/user/values (use below file name)
		chart-user-values: meep-vis.yaml
		chart-user-values: meep-tm.yaml
		# extra build flags
		build-flags:
		- -mod=vendor
		@@ -873,23 +843,65 @@ repo:
		lint: true
		# location of API specifications
		api:
		- name: 'AdvantEDGE V2X Information Service REST API'
		file: go-apps/meep-vis/api/swagger.yaml
		- name: 'AdvantEDGE MEC Bandwidth Management REST API'
		file: go-apps/meep-tm/api/bwm/swagger.yaml
		- name: 'AdvantEDGE MEC Multi-access Traffic Steering REST API'
		file: go-apps/meep-tm/api/mts/swagger.yaml
		# location of user supplied API specifications
		user-api:
		# resources available to docker container image
		- name: 'Bandwidth Management REST API'
		file: config/api/bwm-api.yaml
		- name: 'Multi-access Traffic Steering REST API'
		file: config/api/mts-api.yaml
		docker-data:
		# location of entry script
		'entrypoint.sh': go-apps/meep-vis/entrypoint.sh
		meep-dai:
		'entrypoint.sh': go-apps/meep-tm/entrypoint.sh
		# meep-dai:
		# # location of source code
		# src: go-apps/meep-dai
		# # location of binary
		# bin: bin/meep-dai
		# # location of deployment chart
		# chart: charts/meep-dai
		# # user supplied value file located @ .meep/user/values (use below file name)
		# chart-user-values: meep-dai.yaml
		# # extra build flags
		# build-flags:
		# - -mod=vendor
		# # enable meepctl build
		# build: false #true
		# # enable meepctl dockerize
		# dockerize: false #true
		# # enable meepctl deploy/delete
		# deploy: false #true
		# # supports code coverage measurement when built in codecov mode
		# codecov: true
		# # supports onboarded device application instantiation
		# onboardedapp: true
		# # supports linting
		# lint: true
		# # location of API specifications
		# api:
		# - name: 'AdvantEDGE Device Application Interface REST API'
		# file: go-apps/meep-dai/api/swagger.yaml
		# # location of user supplied API specifications
		# user-api:
		# - name: 'Device Application Interface REST API'
		# file: config/api/dai-api.yaml
		# # resources available to docker container image
		# docker-data:
		# # location of entry script
		# 'entrypoint.sh': go-apps/meep-dai/entrypoint.sh
		meep-vis:
		# location of source code
		src: go-apps/meep-dai
		src: go-apps/meep-vis
		# location of binary
		bin: bin/meep-dai
		bin: bin/meep-vis
		# location of deployment chart
		chart: charts/meep-dai
		chart: charts/meep-vis
		# user supplied value file located @ .meep/user/values (use below file name)
		chart-user-values: meep-dai.yaml
		chart-user-values: meep-vis.yaml
		# extra build flags
		build-flags:
		- -mod=vendor
		@@ -901,20 +913,22 @@ repo:
		deploy: true
		# supports code coverage measurement when built in codecov mode
		codecov: true
		# supports onboarded device application instantiation
		onboardedapp: true
		# supports linting
		lint: true
		# location of API specifications
		api:
		- name: 'AdvantEDGE Device Application Interface Service REST API'
		file: go-apps/meep-dai/api/swagger.yaml
		- name: 'AdvantEDGE V2X Information REST API'
		file: go-apps/meep-vis/api/swagger.yaml
		# location of user supplied API specifications
		user-api:
		- name: 'V2X Information Service REST API'
		file: config/api/vis-api.yaml
		# resources available to docker container image
		docker-data:
		# location of entry script
		'entrypoint.sh': go-apps/meep-dai/entrypoint.sh
		'entrypoint.sh': go-apps/meep-vis/entrypoint.sh
		# location of grid map file
		'grid_map.yaml': go-packages/meep-vis-traffic-mgr/grid_map.yaml

		#------------------------------
		# Dependencies
		@@ -997,6 +1011,17 @@ repo:
		chart: charts/kube-state-metrics
		# user supplied value file located @ .meep/user/values (use below file name)
		chart-user-values: meep-kube-state-metrics.yaml
		meep-minio:
		# enable meepctl build -> deps are never built
		build: false
		# enable meepctl dockerize -> deps are never dockerized
		dockerize: false
		# enable meepctl deploy/delete
		deploy: false
		# location of deployment chart
		chart: charts/minio
		# user supplied value file located @ .meep/user/values (use below file name)
		chart-user-values: meep-minio.yaml
		meep-open-map-tiles:
		# enable meepctl build -> deps are never built
		build: false
		@@ -1047,7 +1072,7 @@ repo:
		# enable meepctl dockerize -> deps are never dockerized
		dockerize: false
		# enable meepctl deploy/delete
		deploy: false
		deploy: true
		# location of deployment chart
		chart: charts/thanos
		# user supplied value file located @ .meep/user/values (use below file name)
		@@ -1058,7 +1083,7 @@ repo:
		# enable meepctl dockerize -> deps are never dockerized
		dockerize: false
		# enable meepctl deploy/delete
		deploy: false
		deploy: true
		# location of deployment chart
		chart: charts/thanos
		# user supplied value file located @ .meep/user/values (use below file name)
		@@ -1240,6 +1265,16 @@ repo:
		src: go-packages/meep-users
		# supports linting
		lint: true
		# meep-dai-client:
		# # location of source code
		# src: go-packages/meep-dai-client
		# # supports linting
		# lint: false
		meep-wais-client:
		# location of source code
		src: go-packages/meep-wais-client
		# supports linting
		lint: false
		meep-vis-client:
		# location of source code
		src: go-packages/meep-vis-client
		@@ -1249,11 +1284,6 @@ repo:
		# location of source code
		src: go-packages/meep-vis-traffic-mgr
		# supports linting
		lint: true
		meep-wais-client:
		# location of source code
		src: go-packages/meep-wais-client
		# supports linting
		lint: false
		meep-watchdog:
		# location of source code
		@@ -1265,11 +1295,6 @@ repo:
		src: go-packages/meep-websocket
		# supports linting
		lint: true
		meep-dai-client:
		# location of source code
		src: go-packages/meep-dai-client
		# supports linting
		lint: false

		# Javascript Packages
		js-packages:

config/permissions.yaml

+2 −2

Original line number	Diff line number	Diff line
		@@ -689,14 +689,14 @@ services:
		roles:
		admin: 'allow'
		user: 'allow'
		- name: 'sandboxNetworkScenariosPOST'
		- name: 'sandboxNetworkScenarioPOST'
		path: 'sandboxNetworkScenarios/{network_scenario_id}'
		method: 'POST'
		mode: 'allow'
		roles:
		admin: 'allow'
		user: 'allow'
		- name: 'SandboxNetworkScenariosDELETE'
		- name: 'SandboxNetworkScenarioDELETE'
		path: 'sandboxNetworkScenarios/{network_scenario_id}'
		method: 'DELETE'
		mode: 'allow'

Admin message