Commit 4826fe71 authored by Dimitrios Gogos's avatar Dimitrios Gogos
Browse files

feat: update CAMARA scopes to include Traffic Influence operations in... 

feat: update CAMARA scopes to include Traffic Influence operations in documentation and configuration
parent 1e6e90e6

oop-platform-chart/charts/keycloak/README.md

+1 −1
Changes for oop-platform-chart/charts/keycloak/README.md: 1 added line, 1 removed line.
Original line number Diff line number Diff line
@@ -152,7 +152,7 @@ organization's job ([section 9](#9-organizations-and-tenants)). 
### CAMARA scopes



Portal tokens also carry one scope per CAMARA operation (QoD, Edge Application Management,

Location Retrieval), named as in each API's OpenAPI `security` block. The list lives in

Location Retrieval, Traffic Influence), named as in each API's OpenAPI `security` block. The list lives in

[`files/camara-scopes.yaml`](files/camara-scopes.yaml): add an entry there when OEG gains an

operation. On an existing installation, also create the scope in the admin console and add it to

`oop-portal` as **Default** ([Change realm settings after install](#change-realm-settings-after-install)).

oop-platform-chart/charts/keycloak/files/camara-scopes.yaml

+12 −1
Changes for oop-platform-chart/charts/keycloak/files/camara-scopes.yaml: 12 added lines, 1 removed line.
Original line number Diff line number Diff line 
# CAMARA operation scopes of realm `oop`, one per operation across QoD, Edge Application

# Management and Location Retrieval. Names match each API's OpenAPI `security` block.

# Management, Location Retrieval and Traffic Influence. Names match each API's OpenAPI

# `security` block.

# Every scope here is created in the realm and issued on portal tokens.

- name: "edge-application-management:apps:read"

  description: "List/view applications"
@@ -33,3 +34,13 @@ 
  description: "Deletion of QoS sessions"

- name: "location-retrieval:read"

  description: "Retrieve a device's location"

- name: "traffic-influence:traffic-influences:read"

  description: "List/view traffic influence resources"

- name: "traffic-influence:traffic-influences:write"

  description: "Create traffic influence resources for any user"

- name: "traffic-influence:traffic-influence-devices:write"

  description: "Create traffic influence resources for a specific device"

- name: "traffic-influence:traffic-influences:update"

  description: "Update traffic influence resources"

- name: "traffic-influence:traffic-influences:delete"

  description: "Delete traffic influence resources"