Put /services/:serviceId under resources permission

Signed-off-by: Dominika Zemanovicova <dzemanov@redhat.com>
This commit is contained in:
Dominika Zemanovicova
2024-12-17 13:39:23 +01:00
parent 66803d5ab7
commit 07efa3a8d8
6 changed files with 4 additions and 18 deletions
@@ -796,7 +796,6 @@ metadata:
permissions: [
{ type: 'basic', name: 'kubernetes.proxy', attributes: {} },
{ type: 'basic', name: 'kubernetes.resources', attributes: {} },
{ type: 'basic', name: 'kubernetes.services', attributes: {} },
{ type: 'basic', name: 'kubernetes.clusters', attributes: {} },
],
rules: [],
@@ -20,7 +20,7 @@ import {
ANNOTATION_KUBERNETES_OIDC_TOKEN_PROVIDER,
kubernetesClustersPermission,
kubernetesPermissions,
kubernetesServicesPermission,
kubernetesResourcesPermission,
} from '@backstage/plugin-kubernetes-common';
import { PermissionEvaluator } from '@backstage/plugin-permission-common';
import { createPermissionIntegrationRouter } from '@backstage/plugin-permission-node';
@@ -398,7 +398,7 @@ export class KubernetesBuilder {
router.post('/services/:serviceId', async (req, res) => {
await requirePermission(
permissionApi,
kubernetesServicesPermission,
kubernetesResourcesPermission,
httpAuth,
req,
);