github.com/kyma-incubator/compass/components/director@v0.0.0-20230623144113-d764f56ff805/hack/config-local.yaml (about)

     1  graphql:
     2    query:
     3      apisForApplication: ["application:read"]
     4      eventsForApplication: ["application:read"]
     5      applications: ["application:read"]
     6      application: ["application:read"]
     7      applicationBySystemNumber: ["application:read"]
     8      applicationsForRuntime: ["application:read"]
     9      applicationTemplates: ["application_template:read"]
    10      applicationTemplate: ["application_template:read"]
    11      runtimes: ["runtime:read"]
    12      runtimeContexts: ["runtime:read"]
    13      runtime: ["runtime:read"]
    14      runtimeContext: ["runtime:read"]
    15      labelDefinitions: ["label_definition:read"]
    16      labelDefinition: ["label_definition:read"]
    17      bundleByInstanceAuth: ["application:read"]
    18      bundleInstanceAuth: ["application:read"]
    19      healthChecks: ["health_checks:read"]
    20      integrationSystem: ["integration_system:read"]
    21      integrationSystems: ["integration_system:read"]
    22      viewer: []
    23      tenants: ["tenant:read"]
    24      automaticScenarioAssignments: ["automatic_scenario_assignment:read"]
    25      automaticScenarioAssignmentForScenario: ["automatic_scenario_assignment:read"]
    26      automaticScenarioAssignmentsForSelector: ["automatic_scenario_assignment:read"]
    27      systemAuth: ["runtime.auths:read", "application.auths:read", "integration_system.auths:read"]
    28      formationTemplate: [ "formation_template:read" ]
    29      formationTemplates: [ "formation_template:read" ]
    30      formation: ["formation:read"]
    31      formations: ["formation:read"]
    32      formationConstraint: ["formation_constraint:read"]
    33      formationConstraints: ["formation_constraint:read"]
    34      formationConstraintsByFormationType: ["formation_constraint:read"]
    35      certificateSubjectMapping: ["certificate_subject_mapping:read"]
    36      certificateSubjectMappings: ["certificate_subject_mapping:read"]
    37  
    38    mutation:
    39      registerApplication: ["application:write"]
    40      registerApplicationFromTemplate: ["application:write"]
    41      updateApplication: ["application:write"]
    42      unregisterApplication: ["application:write"]
    43      mergeApplications: ["application:write"]
    44      createApplicationTemplate: ["application_template:write"]
    45      updateApplicationTemplate: ["application_template:write"]
    46      deleteApplicationTemplate: ["application_template:write"]
    47      registerRuntime: ["runtime:write"]
    48      updateRuntime: ["runtime:write"]
    49      unregisterRuntime: ["runtime:write"]
    50      registerRuntimeContext: [ "runtime:write" ]
    51      updateRuntimeContext: [ "runtime:write" ]
    52      unregisterRuntimeContext: [ "runtime:write" ]
    53      registerIntegrationSystem: ["integration_system:write"]
    54      updateIntegrationSystem: ["integration_system:write"]
    55      unregisterIntegrationSystem: ["integration_system:write"]
    56      addWebhook: ["webhook:write"]
    57      updateWebhook: ["webhook:write"]
    58      deleteWebhook: ["webhook:write"]
    59      addAPIDefinitionToBundle: ["application:write"]
    60      addAPIDefinitionToApplication: ["application:write"]
    61      updateAPIDefinition: ["application:write"]
    62      updateAPIDefinitionForApplication: ["application:write"]
    63      deleteAPIDefinition: ["application:write"]
    64      refetchAPISpec: ["application:write"]
    65      addEventDefinitionToBundle: ["application:write"]
    66      addEventDefinitionToApplication: ["application:write"]
    67      updateEventDefinition: ["application:write"]
    68      updateEventDefinitionForApplication: [ "application:write" ]
    69      deleteEventDefinition: ["application:write"]
    70      refetchEventAPISpec: ["application:write"]
    71      addDocumentToBundle: ["application:write"]
    72      deleteDocument: ["application:write"]
    73      createFormation: ["formation:write"]
    74      deleteFormation: ["formation:write"]
    75      assignFormation: ["formation:write"]
    76      unassignFormation: ["formation:write"]
    77      resynchronizeFormationNotifications: ["formation:write"]
    78      createLabelDefinition: ["label_definition:write"]
    79      updateLabelDefinition: ["label_definition:write"]
    80      setApplicationLabel: ["application:write"]
    81      deleteApplicationLabel: ["application:write"]
    82      setRuntimeLabel: ["runtime:write"]
    83      deleteRuntimeLabel: ["runtime:write"]
    84      requestOneTimeTokenForRuntime: ["runtime:write"]
    85      requestOneTimeTokenForApplication: ["application:write"]
    86      requestClientCredentialsForRuntime: ["runtime:write"]
    87      requestClientCredentialsForApplication: ["application:write"]
    88      requestClientCredentialsForIntegrationSystem: ["integration_system:write"]
    89      deleteSystemAuthForRuntime: ["runtime:write"]
    90      deleteSystemAuthForApplication: ["application:write"]
    91      deleteSystemAuthForIntegrationSystem: ["integration_system:write"]
    92      setDefaultEventingForApplication: ["eventing:manage"]
    93      deleteDefaultEventingForApplication: ["eventing:manage"]
    94      requestBundleInstanceAuthCreation: ["runtime:write"]
    95      requestBundleInstanceAuthDeletion: ["runtime:write"]
    96      setBundleInstanceAuth: ["application:write"]
    97      deleteBundleInstanceAuth: ["application:write"]
    98      createBundleInstanceAuth: ["bundle_instance_auth:write"]
    99      updateBundleInstanceAuth: ["bundle_instance_auth:write"]
   100      addBundle: ["application:write"]
   101      updateBundle: ["application:write"]
   102      deleteBundle: ["application:write"]
   103      writeTenants: ["tenant:write"]
   104      deleteTenants: ["tenant:write"]
   105      updateTenant: ["tenant:write"]
   106      subscribeTenant: ["tenant_subscription:write"]
   107      unsubscribeTenant: ["tenant_subscription:write"]
   108      createFormationTemplate: ["formation_template:write"]
   109      deleteFormationTemplate: ["formation_template:write"]
   110      updateFormationTemplate: ["formation_template:write"]
   111      createFormationConstraint: ["formation_constraint:write"]
   112      updateFormationConstraint: ["formation_constraint:write"]
   113      deleteFormationConstraint: ["formation_constraint:write"]
   114      attachConstraintToFormationTemplate: [ "formation_constraint:write" ]
   115      detachConstraintFromFormationTemplate: [ "formation_constraint:write" ]
   116      createCertificateSubjectMapping: [ "certificate_subject_mapping:write" ]
   117      updateCertificateSubjectMapping: [ "certificate_subject_mapping:write" ]
   118      deleteCertificateSubjectMapping: [ "certificate_subject_mapping:write" ]
   119      addTenantAccess: [ "tenant_access:write" ]
   120      removeTenantAccess: [ "tenant_access:write" ]
   121  
   122    field:
   123      fetch_request:
   124        auth: [ "fetch-request.auth:read" ]
   125      webhooks:
   126          auth: [ "webhooks.auth:read" ]
   127      application:
   128        auths: ["application.auths:read"]
   129        webhooks: ["application.webhooks:read"]
   130        application_template: [ "application.application_template:read"]
   131      application_template:
   132        webhooks: ["application_template.webhooks:read"]
   133      bundle:
   134        instance_auth: ["bundle.instance_auths:read"]
   135        instance_auths: ["bundle.instance_auths:read"]
   136        default_instance_auth: ["bundle.instance_auths:read"]
   137      document:
   138        fetch_request: ["document.fetch_request:read"]
   139      event_spec:
   140        fetch_request: ["event_spec.fetch_request:read"]
   141      api_spec:
   142        fetch_request: ["api_spec.fetch_request:read"]
   143      runtime:
   144        auths: ["runtime.auths:read"]
   145        webhooks: ["runtime.webhooks:read"]
   146      formation_template:
   147        webhooks: ["formation_template.webhooks:read"]
   148      integration_system:
   149        auths: ["integration_system.auths:read"]
   150  
   151    input:
   152      application:
   153        localTenantID: [ "application.local_tenant_id:write" ]
   154      formation:
   155        state: [ "formation.state:write" ]
   156  
   157  # Scopes assigned for every new Client Credentials by given object type (Runtime / Application / Integration System)
   158  clientCredentialsRegistrationScopes:
   159    runtime:
   160      - "runtime:read"
   161      - "runtime:write"
   162      - "application:read"
   163      - "runtime.auths:read"
   164      - "bundle.instance_auths:read"
   165      - "runtime.webhooks:read"
   166      - "webhook:write"
   167    application:
   168      - "application:read"
   169      - "application:write"
   170      - "application.auths:read"
   171      - "application.webhooks:read"
   172      - "application.application_template:read"
   173      - "bundle.instance_auths:read"
   174      - "webhook:write"
   175    integration_system:
   176      - "application:read"
   177      - "application:write"
   178      - "application.local_tenant_id:write"
   179      - "application_template:read"
   180      - "application_template:write"
   181      - "runtime:read"
   182      - "runtime:write"
   183      - "integration_system:read"
   184      - "label_definition:read"
   185      - "label_definition:write"
   186      - "automatic_scenario_assignment:read" 
   187      - "integration_system.auths:read"
   188      - "application.webhooks:read"
   189      - "application_template.webhooks:read"
   190      - "formation:read"
   191      - "formation:write"
   192      - "internal_visibility:read"
   193      - "application.auths:read"
   194      - "webhook:write"
   195      - "formation_template:read"
   196      - "formation_template.webhooks:read"
   197    super_admin:
   198      - "application:read"
   199      - "application:write"
   200      - "application_template:read"
   201      - "application_template:write"
   202      - "integration_system:read"
   203      - "integration_system:write"
   204      - "runtime:read"
   205      - "runtime:write"
   206      - "label_definition:read"
   207      - "label_definition:write"
   208      - "eventing:manage"
   209      - "tenant:read"
   210      - "automatic_scenario_assignment:read"
   211      - "application.auths:read"
   212      - "application.webhooks:read"
   213      - "application.application_template:read"
   214      - "application_template.webhooks:read"
   215      - "bundle.instance_auths:read"
   216      - "document.fetch_request:read"
   217      - "event_spec.fetch_request:read"
   218      - "api_spec.fetch_request:read"
   219      - "integration_system.auths:read"
   220      - "runtime.auths:read"
   221      - "fetch-request.auth:read"
   222      - "webhooks.auth:read"
   223      - "formation:read"
   224      - "formation:write"
   225      - "internal_visibility:read"
   226      - "runtime.webhooks:read"
   227      - "webhook:write"
   228      - "formation_template:read"
   229      - "formation_template:write"
   230      - "formation_template.webhooks:read"
   231      - "formation_constraint:read"
   232      - "formation_constraint:write"
   233      - "certificate_subject_mapping:read"
   234      - "certificate_subject_mapping:write"
   235      - "formation.state:write"
   236  applicationHideSelectors:
   237    applicationHideSelectorKey:
   238      - "applicationHideSelectorValue"