mirror of
https://github.com/hanzoai/o11y.git
synced 2026-10-30 14:56:15 +00:00
zeekayandHanzo Dev
3011b92ea4
gorilla/mux, otelmux, gorilla/handlers and rs/cors leave go.mod. Every route the runtime serves is a zip route on a zip group: 233 from the apiserver tree, 134 from query-service, 367 total — the same 367 the mount publishes. pkg/http/routing is the one registration surface. It exists because a registration carries three facts zip has no slot for, and the tree this replaces recovered all three PER REQUEST by asking the router what it had just matched: the bound segments, the path template, and the route's declared resources. mux.CurrentRoute(req).GetHandler() was type-asserted back to handler.Handler in two separate packages to re-derive at request time what was already known once at boot. Stating them at registration deletes both lookups. The middleware chain is composed at the LEAF rather than registered ambient, because Audit keys on the route template and Resource resolves the route's declared resources — ambient middleware runs before the router has matched, so both would read an empty route. Per-leaf composition reproduces the order the old tree ran in exactly: match, then middleware, then handler. Duplicate registration now panics at boot; gorilla let the first one win. The Sentry ingest constraint becomes fiber's own guid — a UUID parse instead of a hand-written character class. Paths keep their public brace spelling in the source and in the table; the respelling happens in one function. The standalone server hands its listener to the app, so streams and the websocket upgrade run native fasthttp. Counted, not asserted: routes_test.go in the apiserver pins 233 against the real AddToRouter, routing_test.go pins the table against the router itself. This repo has already shipped 83 typed ops that reached no router while the suite stayed green — an uncalled func is legal Go, so arithmetic is the test. Co-authored-by: Hanzo Dev <[email protected]>
261 lines
12 KiB
Go
261 lines
12 KiB
Go
package o11yapiserver
|
|
|
|
import (
|
|
"net/http"
|
|
|
|
"github.com/hanzoai/o11y/pkg/http/handler"
|
|
"github.com/hanzoai/o11y/pkg/http/routing"
|
|
"github.com/hanzoai/o11y/pkg/types"
|
|
citypes "github.com/hanzoai/o11y/pkg/types/cloudintegrationtypes"
|
|
)
|
|
|
|
// ALL of these routes are ALSO declared as typed ops at the module's mount seam
|
|
// (integrations.go in the repo root), which is what carries them into the
|
|
// composed document, the SDK, the CLI and the agent surface. That is a second
|
|
// DISPATCH, never a second implementation: the ops answer by handing the call
|
|
// to this router, so the handlers below stay the one place the work is
|
|
// performed — and the gates declared here (AdminAccess, ViewAccess) stay the
|
|
// one place access is decided. Both halves are needed — the ops serve the
|
|
// composed binary, this router serves the standalone process, which has no
|
|
// native router to register an op on — so deleting either drops one of the two
|
|
// deployments.
|
|
func (provider *provider) addCloudIntegrationRoutes(router routing.Router) {
|
|
router.Get("/v1/o11y/cloud_integrations/{cloud_provider}/credentials", handler.New(
|
|
provider.authzMiddleware.AdminAccess(provider.cloudIntegrationHandler.GetConnectionCredentials),
|
|
handler.OpenAPIDef{
|
|
ID: "GetConnectionCredentials",
|
|
Tags: []string{"cloudintegration"},
|
|
Summary: "Get connection credentials",
|
|
Description: "This endpoint retrieves the connection credentials required for integration",
|
|
Request: nil,
|
|
RequestContentType: "application/json",
|
|
Response: new(citypes.Credentials),
|
|
ResponseContentType: "application/json",
|
|
SuccessStatusCode: http.StatusOK,
|
|
ErrorStatusCodes: []int{},
|
|
Deprecated: false,
|
|
SecuritySchemes: newSecuritySchemes(types.RoleAdmin),
|
|
},
|
|
))
|
|
|
|
router.Post("/v1/o11y/cloud_integrations/{cloud_provider}/accounts", handler.New(
|
|
provider.authzMiddleware.AdminAccess(provider.cloudIntegrationHandler.CreateAccount),
|
|
handler.OpenAPIDef{
|
|
ID: "CreateAccount",
|
|
Tags: []string{"cloudintegration"},
|
|
Summary: "Create account",
|
|
Description: "This endpoint creates a new cloud integration account for the specified cloud provider",
|
|
Request: new(citypes.PostableAccount),
|
|
RequestContentType: "application/json",
|
|
Response: new(citypes.GettableAccountWithConnectionArtifact),
|
|
ResponseContentType: "application/json",
|
|
SuccessStatusCode: http.StatusCreated,
|
|
ErrorStatusCodes: []int{},
|
|
Deprecated: false,
|
|
SecuritySchemes: newSecuritySchemes(types.RoleAdmin),
|
|
},
|
|
))
|
|
|
|
router.Get("/v1/o11y/cloud_integrations/{cloud_provider}/accounts", handler.New(
|
|
provider.authzMiddleware.AdminAccess(provider.cloudIntegrationHandler.ListAccounts),
|
|
handler.OpenAPIDef{
|
|
ID: "ListAccounts",
|
|
Tags: []string{"cloudintegration"},
|
|
Summary: "List accounts",
|
|
Description: "This endpoint lists the accounts for the specified cloud provider",
|
|
Request: nil,
|
|
RequestContentType: "",
|
|
Response: new(citypes.GettableAccounts),
|
|
ResponseContentType: "application/json",
|
|
SuccessStatusCode: http.StatusOK,
|
|
ErrorStatusCodes: []int{},
|
|
Deprecated: false,
|
|
SecuritySchemes: newSecuritySchemes(types.RoleAdmin),
|
|
},
|
|
))
|
|
|
|
router.Get("/v1/o11y/cloud_integrations/{cloud_provider}/accounts/{id}", handler.New(
|
|
provider.authzMiddleware.AdminAccess(provider.cloudIntegrationHandler.GetAccount),
|
|
handler.OpenAPIDef{
|
|
ID: "GetAccount",
|
|
Tags: []string{"cloudintegration"},
|
|
Summary: "Get account",
|
|
Description: "This endpoint gets an account for the specified cloud provider",
|
|
Request: nil,
|
|
RequestContentType: "",
|
|
Response: new(citypes.Account),
|
|
ResponseContentType: "application/json",
|
|
SuccessStatusCode: http.StatusOK,
|
|
ErrorStatusCodes: []int{http.StatusBadRequest, http.StatusNotFound},
|
|
Deprecated: false,
|
|
SecuritySchemes: newSecuritySchemes(types.RoleAdmin),
|
|
},
|
|
))
|
|
|
|
router.Put("/v1/o11y/cloud_integrations/{cloud_provider}/accounts/{id}", handler.New(
|
|
provider.authzMiddleware.AdminAccess(provider.cloudIntegrationHandler.UpdateAccount),
|
|
handler.OpenAPIDef{
|
|
ID: "UpdateAccount",
|
|
Tags: []string{"cloudintegration"},
|
|
Summary: "Update account",
|
|
Description: "This endpoint updates an account for the specified cloud provider",
|
|
Request: new(citypes.UpdatableAccount),
|
|
RequestContentType: "application/json",
|
|
Response: nil,
|
|
ResponseContentType: "",
|
|
SuccessStatusCode: http.StatusNoContent,
|
|
ErrorStatusCodes: []int{},
|
|
Deprecated: false,
|
|
SecuritySchemes: newSecuritySchemes(types.RoleAdmin),
|
|
},
|
|
))
|
|
|
|
router.Delete("/v1/o11y/cloud_integrations/{cloud_provider}/accounts/{id}", handler.New(
|
|
provider.authzMiddleware.AdminAccess(provider.cloudIntegrationHandler.DisconnectAccount),
|
|
handler.OpenAPIDef{
|
|
ID: "DisconnectAccount",
|
|
Tags: []string{"cloudintegration"},
|
|
Summary: "Disconnect account",
|
|
Description: "This endpoint disconnects an account for the specified cloud provider",
|
|
Request: nil,
|
|
RequestContentType: "",
|
|
Response: nil,
|
|
ResponseContentType: "",
|
|
SuccessStatusCode: http.StatusNoContent,
|
|
ErrorStatusCodes: []int{},
|
|
Deprecated: false,
|
|
SecuritySchemes: newSecuritySchemes(types.RoleAdmin),
|
|
},
|
|
))
|
|
|
|
router.Get("/v1/o11y/cloud_integrations/{cloud_provider}/services", handler.New(
|
|
provider.authzMiddleware.AdminAccess(provider.cloudIntegrationHandler.ListServicesMetadata),
|
|
handler.OpenAPIDef{
|
|
ID: "ListServicesMetadata",
|
|
Tags: []string{"cloudintegration"},
|
|
Summary: "List services metadata",
|
|
Description: "This endpoint lists the services metadata for the specified cloud provider",
|
|
Request: nil,
|
|
RequestQuery: new(citypes.ListServicesMetadataParams),
|
|
RequestContentType: "",
|
|
Response: new(citypes.GettableServicesMetadata),
|
|
ResponseContentType: "application/json",
|
|
SuccessStatusCode: http.StatusOK,
|
|
ErrorStatusCodes: []int{},
|
|
Deprecated: false,
|
|
SecuritySchemes: newSecuritySchemes(types.RoleAdmin),
|
|
},
|
|
))
|
|
|
|
router.Get("/v1/o11y/cloud_integrations/{cloud_provider}/accounts/{id}/services", handler.New(
|
|
provider.authzMiddleware.AdminAccess(provider.cloudIntegrationHandler.ListAccountServicesMetadata),
|
|
handler.OpenAPIDef{
|
|
ID: "ListAccountServicesMetadata",
|
|
Tags: []string{"cloudintegration"},
|
|
Summary: "List account services metadata",
|
|
Description: "This endpoint lists the services metadata for the specified account and cloud provider",
|
|
Request: nil,
|
|
RequestContentType: "",
|
|
Response: new(citypes.GettableServicesMetadata),
|
|
ResponseContentType: "application/json",
|
|
SuccessStatusCode: http.StatusOK,
|
|
ErrorStatusCodes: []int{},
|
|
Deprecated: false,
|
|
SecuritySchemes: newSecuritySchemes(types.RoleAdmin),
|
|
},
|
|
))
|
|
|
|
router.Get("/v1/o11y/cloud_integrations/{cloud_provider}/services/{service_id}", handler.New(
|
|
provider.authzMiddleware.AdminAccess(provider.cloudIntegrationHandler.GetService),
|
|
handler.OpenAPIDef{
|
|
ID: "GetService",
|
|
Tags: []string{"cloudintegration"},
|
|
Summary: "Get service",
|
|
Description: "This endpoint gets a service for the specified cloud provider",
|
|
Request: nil,
|
|
RequestQuery: new(citypes.GetServiceParams),
|
|
RequestContentType: "",
|
|
Response: new(citypes.Service),
|
|
ResponseContentType: "application/json",
|
|
SuccessStatusCode: http.StatusOK,
|
|
ErrorStatusCodes: []int{},
|
|
Deprecated: false,
|
|
SecuritySchemes: newSecuritySchemes(types.RoleAdmin),
|
|
},
|
|
))
|
|
|
|
router.Put("/v1/o11y/cloud_integrations/{cloud_provider}/accounts/{id}/services/{service_id}", handler.New(
|
|
provider.authzMiddleware.AdminAccess(provider.cloudIntegrationHandler.UpdateService),
|
|
handler.OpenAPIDef{
|
|
ID: "UpdateService",
|
|
Tags: []string{"cloudintegration"},
|
|
Summary: "Update service",
|
|
Description: "This endpoint updates a service for the specified cloud provider",
|
|
Request: new(citypes.UpdatableService),
|
|
RequestContentType: "application/json",
|
|
Response: nil,
|
|
ResponseContentType: "",
|
|
SuccessStatusCode: http.StatusNoContent,
|
|
ErrorStatusCodes: []int{},
|
|
Deprecated: false,
|
|
SecuritySchemes: newSecuritySchemes(types.RoleAdmin),
|
|
},
|
|
))
|
|
|
|
router.Get("/v1/o11y/cloud_integrations/{cloud_provider}/accounts/{id}/services/{service_id}", handler.New(
|
|
provider.authzMiddleware.AdminAccess(provider.cloudIntegrationHandler.GetAccountService),
|
|
handler.OpenAPIDef{
|
|
ID: "GetAccountService",
|
|
Tags: []string{"cloudintegration"},
|
|
Summary: "Get service for account",
|
|
Description: "This endpoint gets a service and its configuration for the specified cloud integration account",
|
|
Request: nil,
|
|
RequestContentType: "",
|
|
Response: new(citypes.Service),
|
|
ResponseContentType: "application/json",
|
|
SuccessStatusCode: http.StatusOK,
|
|
ErrorStatusCodes: []int{http.StatusBadRequest, http.StatusNotFound},
|
|
Deprecated: false,
|
|
SecuritySchemes: newSecuritySchemes(types.RoleAdmin),
|
|
},
|
|
))
|
|
|
|
// Agent check-in endpoint is kept same as older one to maintain backward compatibility with already deployed agents.
|
|
// In the future, this endpoint will be deprecated and a new endpoint will be introduced for consistency with above endpoints.
|
|
router.Post("/v1/o11y/cloud-integrations/{cloud_provider}/agent-check-in", handler.New(
|
|
provider.authzMiddleware.ViewAccess(provider.cloudIntegrationHandler.AgentCheckIn),
|
|
handler.OpenAPIDef{
|
|
ID: "AgentCheckInDeprecated",
|
|
Tags: []string{"cloudintegration"},
|
|
Summary: "Agent check-in",
|
|
Description: "[Deprecated] This endpoint is called by the deployed agent to check in",
|
|
Request: new(citypes.PostableAgentCheckIn),
|
|
RequestContentType: "application/json",
|
|
Response: new(citypes.GettableAgentCheckIn),
|
|
ResponseContentType: "application/json",
|
|
SuccessStatusCode: http.StatusOK,
|
|
ErrorStatusCodes: []int{},
|
|
Deprecated: true, // this endpoint will be deprecated in future
|
|
SecuritySchemes: newSecuritySchemes(types.RoleViewer), // agent role is viewer
|
|
},
|
|
))
|
|
|
|
router.Post("/v1/o11y/cloud_integrations/{cloud_provider}/accounts/check_in", handler.New(
|
|
provider.authzMiddleware.ViewAccess(provider.cloudIntegrationHandler.AgentCheckIn),
|
|
handler.OpenAPIDef{
|
|
ID: "AgentCheckIn",
|
|
Tags: []string{"cloudintegration"},
|
|
Summary: "Agent check-in",
|
|
Description: "This endpoint is called by the deployed agent to check in",
|
|
Request: new(citypes.PostableAgentCheckIn),
|
|
RequestContentType: "application/json",
|
|
Response: new(citypes.GettableAgentCheckIn),
|
|
ResponseContentType: "application/json",
|
|
SuccessStatusCode: http.StatusOK,
|
|
ErrorStatusCodes: []int{},
|
|
Deprecated: false,
|
|
SecuritySchemes: newSecuritySchemes(types.RoleViewer), // agent role is viewer
|
|
},
|
|
))
|
|
}
|