go-scalingo/firewall_rules.go at master · Scalingo/go-scalingo · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
package scalingo

import (
	"context"

	httpclient "github.com/Scalingo/go-scalingo/v10/http"
	"github.com/Scalingo/go-utils/errors/v3"
)

const firewallRulesResource = "firewall_rules"

type FirewallRuleType string

const (
	FirewallRuleTypeManagedRange FirewallRuleType = "managed_range"
	FirewallRuleTypeCustomRange  FirewallRuleType = "custom_range"
)

type FirewallRulesService interface {
	FirewallRulesCreate(ctx context.Context, appID string, addonID string, params FirewallRuleCreateParams) (FirewallRule, error)
	FirewallRulesList(ctx context.Context, appID string, addonID string) ([]FirewallRule, error)
	FirewallRulesDestroy(ctx context.Context, appID string, addonID string, firewallRuleID string) error
	FirewallRulesGetManagedRanges(ctx context.Context, appID string, addonID string) ([]FirewallManagedRange, error)
}

type FirewallManagedRange struct {
	ID   string `json:"id"`
	Name string `json:"name"`
}

type FirewallRuleCreateParams struct {
	Type    FirewallRuleType `json:"type"`
	CIDR    string           `json:"cidr,omitempty"`
	Label   string           `json:"label,omitempty"`
	RangeID string           `json:"range_id,omitempty"`
}

type FirewallRule struct {
	ID         string           `json:"id"`
	Type       FirewallRuleType `json:"type"`
	CIDR       string           `json:"cidr"`
	Label      string           `json:"label"`
	RangeID    string           `json:"range_id"`
	DatabaseID string           `json:"database_id"`
}

type FirewallManagedRangesResponse struct {
	ManagedRanges []FirewallManagedRange `json:"ranges"`
}

type FirewallRuleResponse struct {
	FirewallRule FirewallRule `json:"rule"`
}

type FirewallRulesResponse struct {
	FirewallRules []FirewallRule `json:"rules"`
}

var _ FirewallRulesService = (*PreviewClient)(nil)

func (c *PreviewClient) FirewallRulesCreate(ctx context.Context, appID string, addonID string, params FirewallRuleCreateParams) (FirewallRule, error) {
	var res FirewallRuleResponse

	err := c.parent.DBAPI(appID, addonID).SubresourceAdd(ctx, "databases", addonID, firewallRulesResource, params, &res)
	if err != nil {
		return res.FirewallRule, errors.Wrap(ctx, err, "create firewall rule")
	}
	return res.FirewallRule, nil
}

func (c *PreviewClient) FirewallRulesList(ctx context.Context, appID string, addonID string) ([]FirewallRule, error) {
	var res FirewallRulesResponse

	err := c.parent.DBAPI(appID, addonID).SubresourceList(ctx, "databases", addonID, firewallRulesResource, nil, &res)
	if err != nil {
		return nil, errors.Wrap(ctx, err, "list firewall rules")
	}

	return res.FirewallRules, nil
}

func (c *PreviewClient) FirewallRulesDestroy(ctx context.Context, appID string, addonID string, firewallRuleID string) error {
	err := c.parent.DBAPI(appID, addonID).SubresourceDelete(ctx, "databases", addonID, firewallRulesResource, firewallRuleID)
	if err != nil {
		return errors.Wrap(ctx, err, "destroy firewall rule")
	}
	return nil
}

func (c *PreviewClient) FirewallRulesGetManagedRanges(ctx context.Context, appID string, addonID string) ([]FirewallManagedRange, error) {
	var res FirewallManagedRangesResponse

	req := &httpclient.APIRequest{
		Method:   "GET",
		Endpoint: "/firewall/managed_ranges",
	}

	err := c.parent.DBAPI(appID, addonID).DoRequest(ctx, req, &res)
	if err != nil {
		return nil, errors.Wrap(ctx, err, "get managed ranges")
	}

	return res.ManagedRanges, nil
}