Adds ability to limit number of loadbalancers an owner can create #281
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Signed-off-by: Tyler Auerbeck <[email protected]>
GraphQL Schema CheckCompared 0 schema changes against 0 operations ✅ Found no changes |
Signed-off-by: Tyler Auerbeck <[email protected]>
rizzza
approved these changes
Nov 20, 2023
sthwang-metal
added a commit
to sthwang-metal/load-balancer-api
that referenced
this pull request
Jan 17, 2024
* add origin target ip address validation (infratographer#213) Signed-off-by: Matt Siwiec <[email protected]> * Use new event hooks (infratographer#212) * new manual event hooks Signed-off-by: Matt Siwiec <[email protected]> * update tests for auth-relationships Signed-off-by: Matt Siwiec <[email protected]> * relationships Signed-off-by: Matt Siwiec <[email protected]> * add location to manual hook Signed-off-by: Matt Siwiec <[email protected]> * finesse manual hook Signed-off-by: Matt Siwiec <[email protected]> --------- Signed-off-by: Matt Siwiec <[email protected]> * Update module github.com/99designs/gqlgen to v0.17.36 (infratographer#200) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update module go.infratographer.com/permissions-api to v0.2.5 (infratographer#216) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * loadbalancer-api client (infratographer#217) Signed-off-by: Matt Siwiec <[email protected]> * Add restricted ports (infratographer#219) * Add configuration to define restricted ports which the API cannot create for a loadbalancer Signed-off-by: Tyler Auerbeck <[email protected]> * Cleanup Signed-off-by: Tyler Auerbeck <[email protected]> * Use validate func in schema to check restricted ports Signed-off-by: Tyler Auerbeck <[email protected]> * Fix lints Signed-off-by: Tyler Auerbeck <[email protected]> --------- Signed-off-by: Tyler Auerbeck <[email protected]> Co-authored-by: Tyler Auerbeck <[email protected]> * Update Helm release reloader to v1.0.39 (infratographer#167) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update Helm release common to v2.9.2 (infratographer#195) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * implement MetadataNode (infratographer#218) Signed-off-by: Matt Siwiec <[email protected]> * Fix up mutation hooks to ensure additionalSubjects are present in the change message (infratographer#231) * query all for hooks and add additionalSubjects to msg Signed-off-by: Matt Siwiec <[email protected]> * origin delete additional subjects Signed-off-by: Matt Siwiec <[email protected]> --------- Signed-off-by: Matt Siwiec <[email protected]> * Update module github.com/99designs/gqlgen to v0.17.38 (infratographer#225) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update module go.infratographer.com/x to v0.3.9 (infratographer#233) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update module github.com/wundergraph/graphql-go-tools to v1.66.3 (infratographer#146) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update module github.com/Yamashou/gqlgenc to v0.15.1 (infratographer#234) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update module github.com/wundergraph/graphql-go-tools to v1.66.4 (infratographer#236) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update module github.com/testcontainers/testcontainers-go/modules/postgres to v0.24.1 (infratographer#237) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update module go.infratographer.com/permissions-api to v0.2.6 (infratographer#223) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update Helm release reloader to v1.0.41 (infratographer#222) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update module go.uber.org/zap to v1.26.0 (infratographer#238) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Add Resolver Validations (infratographer#243) * add more checks to resolvers Signed-off-by: Stephen Hwang <[email protected]> * add tests Signed-off-by: Stephen Hwang <[email protected]> * add more tests Signed-off-by: Stephen Hwang <[email protected]> * update permission checks Signed-off-by: Stephen Hwang <[email protected]> * update query method Signed-off-by: Stephen Hwang <[email protected]> * remove tests Signed-off-by: Stephen Hwang <[email protected]> * update error Signed-off-by: Stephen Hwang <[email protected]> --------- Signed-off-by: Stephen Hwang <[email protected]> * Ensure multiple locations are set in additionalSubjects, if required (infratographer#242) * generate :allthethings: Signed-off-by: Matt Siwiec <[email protected]> * handle case to populate multiple location ids Signed-off-by: Matt Siwiec <[email protected]> * inverted logic in port delete hook Signed-off-by: Matt Siwiec <[email protected]> --------- Signed-off-by: Matt Siwiec <[email protected]> * Move loadbalancer delete auth relationships into resolver (infratographer#230) * move loadbalancer delete auth relationships into resolver Signed-off-by: Matt Siwiec <[email protected]> * bump to go 1.21 to get context.WithoutCancel Signed-off-by: Matt Siwiec <[email protected]> * disable entc extension for generating hooks Signed-off-by: Matt Siwiec <[email protected]> * use go 1.21 context.WithCancel for delete auth relationship Signed-off-by: Matt Siwiec <[email protected]> * testcontainers bug fix, back to go.mod version Signed-off-by: Matt Siwiec <[email protected]> --------- Signed-off-by: Matt Siwiec <[email protected]> * Resolver input/error handling and logging (infratographer#228) * remove old Signed-off-by: Matt Siwiec <[email protected]> * loadbalancer error logs, do no expose internals Signed-off-by: Matt Siwiec <[email protected]> * origin error logs, do no expose internals Signed-off-by: Matt Siwiec <[email protected]> * handle invalid gidx Signed-off-by: Matt Siwiec <[email protected]> * pool error logs, do no expose internals Signed-off-by: Matt Siwiec <[email protected]> * port error logs, do no expose internals Signed-off-by: Matt Siwiec <[email protected]> * provider error logs, do no expose internals Signed-off-by: Matt Siwiec <[email protected]> * minor logging additions Signed-off-by: Matt Siwiec <[email protected]> * rollback error log Signed-off-by: Matt Siwiec <[email protected]> * last look Signed-off-by: Matt Siwiec <[email protected]> --------- Signed-off-by: Matt Siwiec <[email protected]> * manualhooks tests (infratographer#245) * write manualhooks tests Signed-off-by: Stephen Hwang <[email protected]> * add init script Signed-off-by: Stephen Hwang <[email protected]> * get init script Signed-off-by: Stephen Hwang <[email protected]> * terminate container only if running Signed-off-by: Stephen Hwang <[email protected]> * refactor setup and teardown Signed-off-by: Stephen Hwang <[email protected]> * remove leftover testdata Signed-off-by: Stephen Hwang <[email protected]> * refactor to re-use code Signed-off-by: Stephen Hwang <[email protected]> * use pointer receivers Signed-off-by: Stephen Hwang <[email protected]> * use TestMain pragma, swap ifErrPanic, add t to sub Signed-off-by: Stephen Hwang <[email protected]> * add more assertions, add createXXX tests Signed-off-by: Stephen Hwang <[email protected]> * less code Signed-off-by: Stephen Hwang <[email protected]> --------- Signed-off-by: Stephen Hwang <[email protected]> * add origin weights (infratographer#251) * Add ability to set weight for an origin Signed-off-by: Tyler Auerbeck <[email protected]> * Linters gonna lint Signed-off-by: Tyler Auerbeck <[email protected]> * add weight to origin node Signed-off-by: Stephen Hwang <[email protected]> * add migration to add origin weight column Signed-off-by: Stephen Hwang <[email protected]> * postgres compatible Signed-off-by: Stephen Hwang <[email protected]> * change to int instead of bigint Signed-off-by: Stephen Hwang <[email protected]> --------- Signed-off-by: Tyler Auerbeck <[email protected]> Signed-off-by: Stephen Hwang <[email protected]> Co-authored-by: Tyler Auerbeck <[email protected]> * Update module github.com/labstack/echo/v4 to v4.11.2 (infratographer#252) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Refactor Existing Tests (infratographer#253) * refactor setup and teardown Signed-off-by: Stephen Hwang <[email protected]> * refactor builders Signed-off-by: Stephen Hwang <[email protected]> * generate code Signed-off-by: Stephen Hwang <[email protected]> * use TestMain pragma, swap ifErrPanic, add t to sub Signed-off-by: Stephen Hwang <[email protected]> --------- Signed-off-by: Stephen Hwang <[email protected]> Co-authored-by: Matt Siwiec <[email protected]> * Update module github.com/spf13/viper to v1.17.0 (infratographer#255) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update docker/setup-qemu-action action to v3 (infratographer#240) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update module github.com/testcontainers/testcontainers-go/modules/postgres to v0.25.0 (infratographer#246) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update docker/login-action action to v3 (infratographer#239) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Matt Siwiec <[email protected]> * Update module github.com/99designs/gqlgen to v0.17.39 (infratographer#248) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * GetLoadbalancer return metadata status (infratographer#254) * client return node metadata Signed-off-by: Matt Siwiec <[email protected]> * client struct tags Signed-off-by: Matt Siwiec <[email protected]> * add weight to client test Signed-off-by: Matt Siwiec <[email protected]> --------- Signed-off-by: Matt Siwiec <[email protected]> * downgrade gqlgen to 0.17.38 (infratographer#258) Signed-off-by: Stephen Hwang <[email protected]> * Update actions/checkout action to v4 (infratographer#227) Signed-off-by: Matt Siwiec <[email protected]> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Matt Siwiec <[email protected]> * Update goreleaser/goreleaser-action action to v5 (infratographer#241) Signed-off-by: Matt Siwiec <[email protected]> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Matt Siwiec <[email protected]> * Bump github.com/nats-io/nats-server/v2 from 2.10.1 to 2.10.2 (infratographer#257) Bumps [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) from 2.10.1 to 2.10.2. - [Release notes](https://github.com/nats-io/nats-server/releases) - [Changelog](https://github.com/nats-io/nats-server/blob/main/.goreleaser.yml) - [Commits](nats-io/nats-server@v2.10.1...v2.10.2) --- updated-dependencies: - dependency-name: github.com/nats-io/nats-server/v2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: Matt Siwiec <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Matt Siwiec <[email protected]> * Bump google.golang.org/grpc from 1.58.2 to 1.58.3 (infratographer#262) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.58.2 to 1.58.3. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.58.2...v1.58.3) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: Matt Siwiec <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Matt Siwiec <[email protected]> * Update module github.com/brianvoe/gofakeit/v6 to v6.24.0 (infratographer#264) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Hooks improvement to use ent eager loading (infratographer#261) * additional hooks unit tests Signed-off-by: Matt Siwiec <[email protected]> * audit loadbalancer manual hook db hits and ensure providerID included in additionalSubjects Signed-off-by: Matt Siwiec <[email protected]> * audit origin manual hook db hits Signed-off-by: Matt Siwiec <[email protected]> * audit pool manual hook db hits Signed-off-by: Matt Siwiec <[email protected]> * audit port manual hook db hits Signed-off-by: Matt Siwiec <[email protected]> * bump test event msg channel timeout to 5s; align Signed-off-by: Matt Siwiec <[email protected]> * test with one retry Signed-off-by: Matt Siwiec <[email protected]> * tweek flake Signed-off-by: Matt Siwiec <[email protected]> --------- Signed-off-by: Matt Siwiec <[email protected]> * Bump github.com/nats-io/nats-server/v2 from 2.10.2 to 2.10.4 (infratographer#266) Bumps [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) from 2.10.2 to 2.10.4. - [Release notes](https://github.com/nats-io/nats-server/releases) - [Changelog](https://github.com/nats-io/nats-server/blob/main/.goreleaser.yml) - [Commits](nats-io/nats-server@v2.10.2...v2.10.4) --- updated-dependencies: - dependency-name: github.com/nats-io/nats-server/v2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * add weights to client (infratographer#260) Signed-off-by: Stephen Hwang <[email protected]> * Update module github.com/testcontainers/testcontainers-go/modules/postgres to v0.26.0 (infratographer#269) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update module github.com/mattn/go-sqlite3 to v1.14.18 (infratographer#270) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update module github.com/labstack/echo/v4 to v4.11.3 (infratographer#272) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Initial: update loadbalancer metadata status in resolvers (infratographer#273) * bump testcontainers to v0.26.0 Signed-off-by: Matt Siwiec <[email protected]> * bump chart dependencies - bitnami common (2.13.3), reloader (1.0.50) Signed-off-by: Matt Siwiec <[email protected]> * add supergraph url, metadata status namespace id, timeout and oidc client to config Signed-off-by: Matt Siwiec <[email protected]> * update metadata status for loadbalancer cud Signed-off-by: Matt Siwiec <[email protected]> * move to supergraph config Signed-off-by: Matt Siwiec <[email protected]> * port cud - update loadbalancer status Signed-off-by: Matt Siwiec <[email protected]> * permissions ignoreNoResponders Signed-off-by: Matt Siwiec <[email protected]> * update loadbalancer status - pools/origins cud Signed-off-by: Matt Siwiec <[email protected]> * add oidc client issuer to chart Signed-off-by: Matt Siwiec <[email protected]> * use helper resolver method Signed-off-by: Matt Siwiec <[email protected]> * conditional metadata usage Signed-off-by: Matt Siwiec <[email protected]> * loadbalancer metadata pkg Signed-off-by: Matt Siwiec <[email protected]> --------- Signed-off-by: Matt Siwiec <[email protected]> * Loadbalancer metadata status helper (infratographer#278) * GetLoadBalancerState convenience method Signed-off-by: Matt Siwiec <[email protected]> * use resolverOpts Signed-off-by: Matt Siwiec <[email protected]> * use status struct Signed-off-by: Matt Siwiec <[email protected]> * bump metadata-api@main Signed-off-by: Matt Siwiec <[email protected]> --------- Signed-off-by: Matt Siwiec <[email protected]> * Adds ability to limit number of loadbalancers an owner can create (infratographer#281) * Adds ability to limit number of loadbalancers an owner can create Signed-off-by: Tyler Auerbeck <[email protected]> * Fix data race in test Signed-off-by: Tyler Auerbeck <[email protected]> --------- Signed-off-by: Tyler Auerbeck <[email protected]> Co-authored-by: Tyler Auerbeck <[email protected]> * Add node Metadata fragment query to client (infratographer#283) * metadata node Signed-off-by: Matt Siwiec <[email protected]> * add client query for node metadata Signed-off-by: Matt Siwiec <[email protected]> --------- Signed-off-by: Matt Siwiec <[email protected]> * Add ip address metadata types; update metadata helper (infratographer#284) * add ip address metadata types Signed-off-by: Matt Siwiec <[email protected]> * flexible metadata helper Signed-off-by: Matt Siwiec <[email protected]> * add load-balancer-api metadata source Signed-off-by: Matt Siwiec <[email protected]> --------- Signed-off-by: Matt Siwiec <[email protected]> * Update Helm release reloader to v1.0.52 (infratographer#249) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * (DEL-2899) Make Port Name Optional (infratographer#287) * make port name optional Signed-off-by: Stephen Hwang <[email protected]> * fix unit tests Signed-off-by: Stephen Hwang <[email protected]> --------- Signed-off-by: Stephen Hwang <[email protected]> * Update metadata integration (infratographer#289) * do not return internal server error on failure to update metadata Signed-off-by: Matt Siwiec <[email protected]> * add deployment extraEnvFrom for additional environment Signed-off-by: Matt Siwiec <[email protected]> --------- Signed-off-by: Matt Siwiec <[email protected]> * Check owner permissions in resolvers (infratographer#291) * check permissions against ownerID, rather than resource Signed-off-by: Matt Siwiec <[email protected]> * establish permissions auth-relationship in ports Signed-off-by: Matt Siwiec <[email protected]> --------- Signed-off-by: Matt Siwiec <[email protected]> * associate object relationship only on create (infratographer#294) Signed-off-by: Matt Siwiec <[email protected]> * move query for metadata out of transaction (infratographer#296) Signed-off-by: Matt Siwiec <[email protected]> * Update module github.com/mattn/go-sqlite3 to v1.14.19 (infratographer#293) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update module go.infratographer.com/permissions-api to v0.2.7 (infratographer#280) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update module github.com/hasura/go-graphql-client to v0.10.1 (infratographer#286) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update module github.com/brianvoe/gofakeit/v6 to v6.26.0 (infratographer#285) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update actions/setup-go action to v5 (infratographer#300) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update module github.com/brianvoe/gofakeit/v6 to v6.26.3 (infratographer#301) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * origins and ports do not need to establish auth relationships (infratographer#302) Signed-off-by: Matt Siwiec <[email protected]> * add optional label Signed-off-by: Stephen Hwang <[email protected]> * add migration Signed-off-by: Stephen Hwang <[email protected]> * Update ghcr.io/infratographer/load-balancer-api Docker tag to v0.1.2 (infratographer#299) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update Helm release common to v2.14.1 (infratographer#297) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update Helm release reloader to v1.0.58 (infratographer#292) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Create port additionalSubjects not populated in all cases (infratographer#308) * ignore go work files Signed-off-by: Matt Siwiec <[email protected]> * oidc=false Signed-off-by: Matt Siwiec <[email protected]> * ensure additionalSubjects are present in port create when no pool ids associated Signed-off-by: Matt Siwiec <[email protected]> --------- Signed-off-by: Matt Siwiec <[email protected]> * Update module github.com/labstack/echo/v4 to v4.11.4 (infratographer#303) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update ghcr.io/infratographer/load-balancer-api Docker tag to v0.1.3 (infratographer#310) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update module github.com/hasura/go-graphql-client to v0.10.2 (infratographer#309) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Matt Siwiec <[email protected]> * Update testcontainers-go monorepo to v0.27.0 (infratographer#305) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update module github.com/docker/go-connections to v0.5.0 (infratographer#306) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update golang.org/x/exp digest to be819d1 (infratographer#282) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --------- Signed-off-by: Matt Siwiec <[email protected]> Signed-off-by: Tyler Auerbeck <[email protected]> Signed-off-by: Stephen Hwang <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: Matt Siwiec <[email protected]> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Tyler Auerbeck <[email protected]> Co-authored-by: Tyler Auerbeck <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
##What
This PR adds the ability to limit the number of load balancers a given resource owner can create/ have created at a given point of time. If the limit is not set, it will default to 0 and will not have any impact. If it is set, an error will be return on the X number of load balancer created letting the user know they have exceeded the limit.
Why
Loadbalancers are the resource that is likely to consume resources in a given environment (deployed to a cluster to soak up CPU/Memory, potentially configuring IP addresses), so we want to give some minimal configuration that would allow an operator to safely limit that in their environment.