proto: add authz annotations to console secrets api

redpanda-data · Feb 28, 2025 · 6f39315 · 6f39315
1 parent 51ff7fd
commit 6f39315
Show file tree

Hide file tree

Showing 8 changed files with 255 additions and 218 deletions.
diff --git a/...consolev1alpha1connect/secrets.connect.go → .../consolev1alpha1connect/secret.connect.go b/...consolev1alpha1connect/secrets.connect.go → .../consolev1alpha1connect/secret.connect.go
diff --git a/...solev1alpha1connect/secrets.connect.gw.go → ...nsolev1alpha1connect/secret.connect.gw.go b/...solev1alpha1connect/secrets.connect.gw.go → ...nsolev1alpha1connect/secret.connect.gw.go
diff --git a/...dpanda/api/console/v1alpha1/secrets.pb.go → ...edpanda/api/console/v1alpha1/secret.pb.go b/...dpanda/api/console/v1alpha1/secrets.pb.go → ...edpanda/api/console/v1alpha1/secret.pb.go
diff --git a/...nda/api/console/v1alpha1/secrets.pb.gw.go → ...anda/api/console/v1alpha1/secret.pb.gw.go b/...nda/api/console/v1alpha1/secrets.pb.gw.go → ...anda/api/console/v1alpha1/secret.pb.gw.go
diff --git a/...a/api/console/v1alpha1/secrets_grpc.pb.go → ...da/api/console/v1alpha1/secret_grpc.pb.go b/...a/api/console/v1alpha1/secrets_grpc.pb.go → ...da/api/console/v1alpha1/secret_grpc.pb.go
diff --git a/...a/api/console/v1alpha1/secrets_connect.ts → ...da/api/console/v1alpha1/secret_connect.ts b/...a/api/console/v1alpha1/secrets_connect.ts → ...da/api/console/v1alpha1/secret_connect.ts
@@ -1,9 +1,9 @@
 // @generated by protoc-gen-connect-es v1.2.0 with parameter "target=ts,import_extension="
-// @generated from file redpanda/api/console/v1alpha1/secrets.proto (package redpanda.api.console.v1alpha1, syntax proto3)
+// @generated from file redpanda/api/console/v1alpha1/secret.proto (package redpanda.api.console.v1alpha1, syntax proto3)
 /* eslint-disable */
 // @ts-nocheck
 
-import { CreateSecretRequest, CreateSecretResponse, DeleteSecretRequest, DeleteSecretResponse, GetSecretRequest, GetSecretResponse, ListSecretScopesRequest, ListSecretScopesResponse, ListSecretsRequest, ListSecretsResponse, UpdateSecretRequest, UpdateSecretResponse } from "./secrets_pb";
+import { CreateSecretRequest, CreateSecretResponse, DeleteSecretRequest, DeleteSecretResponse, GetSecretRequest, GetSecretResponse, ListSecretScopesRequest, ListSecretScopesResponse, ListSecretsRequest, ListSecretsResponse, UpdateSecretRequest, UpdateSecretResponse } from "./secret_pb";
 import { MethodKind } from "@bufbuild/protobuf";
 
 /**

diff --git a/...dpanda/api/console/v1alpha1/secrets_pb.ts → ...edpanda/api/console/v1alpha1/secret_pb.ts b/...dpanda/api/console/v1alpha1/secrets_pb.ts → ...edpanda/api/console/v1alpha1/secret_pb.ts
@@ -1,5 +1,5 @@
 // @generated by protoc-gen-es v1.6.0 with parameter "target=ts,import_extension="
-// @generated from file redpanda/api/console/v1alpha1/secrets.proto (package redpanda.api.console.v1alpha1, syntax proto3)
+// @generated from file redpanda/api/console/v1alpha1/secret.proto (package redpanda.api.console.v1alpha1, syntax proto3)
 /* eslint-disable */
 // @ts-nocheck
 

diff --git a/...dpanda/api/console/v1alpha1/secrets.proto → ...edpanda/api/console/v1alpha1/secret.proto b/...dpanda/api/console/v1alpha1/secrets.proto → ...edpanda/api/console/v1alpha1/secret.proto
@@ -2,6 +2,7 @@ syntax = "proto3";
 
 package redpanda.api.console.v1alpha1;
 
+import "redpanda/api/auth/v1/authorization.proto";
 import "redpanda/api/dataplane/v1/secret.proto";
 
 message GetSecretRequest {
@@ -53,15 +54,45 @@ message ListSecretScopesResponse {
 }
 
 service SecretService {
-  rpc GetSecret(GetSecretRequest) returns (GetSecretResponse) {}
-
-  rpc ListSecrets(ListSecretsRequest) returns (ListSecretsResponse) {}
-
-  rpc CreateSecret(CreateSecretRequest) returns (CreateSecretResponse) {}
-
-  rpc UpdateSecret(UpdateSecretRequest) returns (UpdateSecretResponse) {}
-
-  rpc DeleteSecret(DeleteSecretRequest) returns (DeleteSecretResponse) {}
-
-  rpc ListSecretScopes(ListSecretScopesRequest) returns (ListSecretScopesResponse) {}
+  rpc GetSecret(GetSecretRequest) returns (GetSecretResponse) {
+    option (redpanda.api.auth.v1.authorization) = {
+      required_permission: PERMISSION_VIEW
+      api: API_CONSOLE
+    };
+  }
+
+  rpc ListSecrets(ListSecretsRequest) returns (ListSecretsResponse) {
+    option (redpanda.api.auth.v1.authorization) = {
+      required_permission: PERMISSION_VIEW
+      api: API_CONSOLE
+    };
+  }
+
+  rpc CreateSecret(CreateSecretRequest) returns (CreateSecretResponse) {
+    option (redpanda.api.auth.v1.authorization) = {
+      required_permission: PERMISSION_EDIT
+      api: API_CONSOLE
+    };
+  }
+
+  rpc UpdateSecret(UpdateSecretRequest) returns (UpdateSecretResponse) {
+    option (redpanda.api.auth.v1.authorization) = {
+      required_permission: PERMISSION_EDIT
+      api: API_CONSOLE
+    };
+  }
+
+  rpc DeleteSecret(DeleteSecretRequest) returns (DeleteSecretResponse) {
+    option (redpanda.api.auth.v1.authorization) = {
+      required_permission: PERMISSION_EDIT
+      api: API_CONSOLE
+    };
+  }
+
+  rpc ListSecretScopes(ListSecretScopesRequest) returns (ListSecretScopesResponse) {
+    option (redpanda.api.auth.v1.authorization) = {
+      required_permission: PERMISSION_VIEW
+      api: API_CONSOLE
+    };
+  }
 }