Add poco settings for stage ghe critical checks (#2565)

atlassian · Nov 24, 2023 · 1ab5b8c · 1ab5b8c
1 parent 33b4eb0
commit 1ab5b8c
Show file tree

Hide file tree

Showing 2 changed files with 64 additions and 0 deletions.
diff --git a/etc/poco/bundle/extras-stg-test.json b/etc/poco/bundle/extras-stg-test.json
@@ -15,11 +15,31 @@
 			"path": "/api/audit-log/subscription/12345",
 			"method": "GET",
 			"mechanism": "asap",
+			"principals": [
+				"pollinator-check/0afb3a4c-1ab2-4475-b7bd-4b197eb4e7c0"
+			],
+			"allowed": true
+		},
+		{
+			"name": "Allow Stg Backfill Critical Pollinator Test to call Get Audit Log endpoints",
+			"path": "/api/audit-log/subscription/12345",
+			"method": "GET",
+			"mechanism": "asap",
 			"principals": [
 				"pollinator-check/06673b3a-7d8f-4f6e-8b72-0527695e241b"
 			],
 			"allowed": true
 		},
+		{
+			"name": "Allow Stg Backfill GHE Critical Pollinator Test to call Get Audit Log endpoints",
+			"path": "/api/audit-log/subscription/12345",
+			"method": "GET",
+			"mechanism": "asap",
+			"principals": [
+				"pollinator-check/293a7fe8-9dc7-4f0b-9785-852c104f98d2"
+			],
+			"allowed": true
+		},
 		{
 			"name": "Allow Stg Basic Check Critical Pollinator Test to call Delete Installation endpoints",
 			"path": "/api/deleteInstallation/21266506/https%3A%2F%2Ffusion-arc-pollinator-staging-app.atlassian.net",
@@ -35,11 +55,31 @@
 			"path": "/api/deleteInstallation/21266506/https%3A%2F%2Ffusion-arc-pollinator-staging-app.atlassian.net",
 			"method": "DELETE",
 			"mechanism": "asap",
+			"principals": [
+				"pollinator-check/0afb3a4c-1ab2-4475-b7bd-4b197eb4e7c0"
+			],
+			"allowed": true
+		},
+		{
+			"name": "Allow Stg Backfill Critical Pollinator Test to call Delete Installation endpoints",
+			"path": "/api/deleteInstallation/21266506/https%3A%2F%2Ffusion-arc-pollinator-staging-app.atlassian.net",
+			"method": "DELETE",
+			"mechanism": "asap",
 			"principals": [
 				"pollinator-check/06673b3a-7d8f-4f6e-8b72-0527695e241b"
 			],
 			"allowed": true
 		},
+		{
+			"name": "Allow Stg Backfill GHE Critical Pollinator Test to call Delete Installation endpoints",
+			"path": "/api/deleteInstallation/21266506/https%3A%2F%2Ffusion-arc-pollinator-staging-app.atlassian.net",
+			"method": "DELETE",
+			"mechanism": "asap",
+			"principals": [
+				"pollinator-check/293a7fe8-9dc7-4f0b-9785-852c104f98d2"
+			],
+			"allowed": true
+		},
 		{
 			"name": "Allow pollinator test to call Delete Installation endpoints",
 			"path": "/api/deleteInstallation/21266506/https%3A%2F%2Ffusion-arc-pollinator-staging-app.atlassian.net",
@@ -115,11 +155,31 @@
 			"path": "/api/jira/13453453/verify",
 			"method": "DELETE",
 			"mechanism": "asap",
+			"principals": [
+				"pollinator-check/0afb3a4c-1ab2-4475-b7bd-4b197eb4e7c0"
+			],
+			"allowed": false
+		},
+		{
+			"name": "Not allow Stg Backfill Check Critical Pollinator Test to call other admin endpoints",
+			"path": "/api/jira/13453453/verify",
+			"method": "DELETE",
+			"mechanism": "asap",
 			"principals": [
 				"pollinator-check/06673b3a-7d8f-4f6e-8b72-0527695e241b"
 			],
 			"allowed": false
 		},
+		{
+			"name": "Not allow Stg Backfill Check GHE Critical Pollinator Test to call other admin endpoints",
+			"path": "/api/jira/13453453/verify",
+			"method": "DELETE",
+			"mechanism": "asap",
+			"principals": [
+				"pollinator-check/293a7fe8-9dc7-4f0b-9785-852c104f98d2"
+			],
+			"allowed": false
+		},
 		{
 			"name": "Not allow Pollinator GHE tests to call other Admin endpoints",
 			"path": "/api/jira/13453453/verify",

diff --git a/etc/poco/bundle/extras-stg.json b/etc/poco/bundle/extras-stg.json
@@ -11,6 +11,8 @@
 			"principals": {
 				"asap": {
 					"issuers": [
+						"pollinator-check/0afb3a4c-1ab2-4475-b7bd-4b197eb4e7c0",
+						"pollinator-check/293a7fe8-9dc7-4f0b-9785-852c104f98d2",
 						"pollinator-check/44d4ce64-f598-4282-8cbb-189eff9b94bf",
 						"pollinator-check/06673b3a-7d8f-4f6e-8b72-0527695e241b",
 						"pollinator-check/f69a7641-a541-4996-adef-0a3516da26d2",
@@ -32,6 +34,8 @@
 			"principals": {
 				"asap": {
 					"issuers": [
+						"pollinator-check/0afb3a4c-1ab2-4475-b7bd-4b197eb4e7c0",
+						"pollinator-check/293a7fe8-9dc7-4f0b-9785-852c104f98d2",
 						"pollinator-check/44d4ce64-f598-4282-8cbb-189eff9b94bf",
 						"pollinator-check/06673b3a-7d8f-4f6e-8b72-0527695e241b",
 						"pollinator-check/f69a7641-a541-4996-adef-0a3516da26d2",