Add permissions to legacy-core stack

Author: lindenmckenzie

v2/stacks/legacy-core-publishing/README.md

@@ -4,6 +4,9 @@ This stack deploys the necessary services and dependencies to work with the lega
 
 The stack uses the sandbox instance of dp-identity-api to simplify the approach to using auth.
 
+By default this uses a local version of dp-permissions-api and runs in the de-centralised permissions mode as this what we
+are currently developing towards.
+
 ## Initialisation
 
 To connect to the dp-identity-api in sandbox you will need to port forward the address.
@@ -43,14 +46,14 @@ To run the stack:
     COMPOSE_FILE=core-deps.yml:core.yml
      ```
 
-3. Ensure that the AWS access keys (environment variables) in local.env are up to date (and delete the word 'export' before each new one copied across).
-
-4. Build and start the stack:
+3. Build and start the stack:
 
    ```shell
-   make up
+   make up-with-seed
    ```
 
+   `up-with-seed` seeds the `dp-permissions-api` with the appropriate permissions. You may need to restart other services to pick up the latest bundle if this is your first time.
+
 For more information on working with the stack and other make targets, see the [general stack guidance](../README.md#general-guidance-for-each-stack).
 
 ## Testing

v2/stacks/legacy-core-publishing/core-deps.yml

@@ -0,0 +1,7 @@
+services:
+  mongodb:
+    extends:
+      file: ${PATH_MANIFESTS}/deps/mongo.yml
+      service: mongodb
+    volumes:
+      - ${PATH_PROVISIONING}/mongo:/docker-entrypoint-initdb.d:ro

v2/stacks/legacy-core-publishing/core.yml

@@ -5,12 +5,16 @@ services:
       service: zebedee
     environment:
       ENABLE_JWT_SESSIONS:     "true"
-      ENABLE_PERMISSIONS_AUTH: ${ENABLE_PERMISSIONS_AUTH:-1}
+      ENABLE_PERMISSIONS_API: ${ENABLE_PERMISSIONS_API:-true}
+      PERMISSIONS_API_URL: http://dp-permissions-api:25400
       IDENTITY_API_URL: http://host.docker.internal:25600
       ENABLE_STATIC_FILES_PUBLISHING: "false"
     extra_hosts:
       - "host.docker.internal:host-gateway"          # localhost mapping for linux
       - "docker.for.mac.host.internal:host-gateway"  # localhost mapping for mac (docker v17.12 to v18.02)
+    depends_on:
+      dp-permissions-api:
+        condition: service_healthy
   dp-api-router:
     extends:
       file: ${PATH_MANIFESTS}/core-ons/dp-api-router.yml
@@ -27,6 +31,8 @@ services:
     depends_on:
       zebedee:
         condition: service_healthy
+    environment:
+      ENABLE_PERMISSION_API: ${ENABLE_PERMISSION_API:-true}
   dp-frontend-router:
     extends:
       file: ${PATH_MANIFESTS}/core-ons/dp-frontend-router.yml
@@ -54,3 +60,13 @@ services:
     depends_on:
       dp-api-router:
         condition: service_healthy
+  dp-permissions-api:
+    extends:
+      file: ${PATH_MANIFESTS}/core-ons/dp-permissions-api.yml
+      service: dp-permissions-api
+    environment:
+      IDENTITY_API_URL: http://host.docker.internal:25600
+    extra_hosts:
+      - "host.docker.internal:host-gateway"          # localhost mapping for linux
+      - "docker.for.mac.host.internal:host-gateway"  # localhost mapping for mac (docker v17.12 to v18.02)
+

v2/stacks/legacy-core-publishing/default.env

@@ -9,7 +9,7 @@ PATH_PROVISIONING="../../provisioning"
 
 # -- Docker compose vars --
 # https://docs.docker.com/compose/environment-variables/envvars/
-COMPOSE_FILE=core.yml:redirect.yml:redirect-deps.yml
+COMPOSE_FILE=core-deps.yml:core.yml:redirect.yml:redirect-deps.yml
 COMPOSE_PATH_SEPARATOR=:
 COMPOSE_PROJECT_NAME=legacy-core-publishing
 COMPOSE_HTTP_TIMEOUT=120