This is an automated email from the ASF dual-hosted git repository.
rawlin pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/trafficcontrol.git
The following commit(s) were added to refs/heads/master by this push:
new 086886f updated letsencrypt endpoints to require ops permissions
(#4555)
086886f is described below
commit 086886fb2e8669e33dbcce895f5dfd3c41d93f56
Author: mattjackson220 <[email protected]>
AuthorDate: Fri Mar 27 15:22:34 2020 -0600
updated letsencrypt endpoints to require ops permissions (#4555)
Co-authored-by: mjacks258 <[email protected]>
---
traffic_ops/traffic_ops_golang/routing/routes.go | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/traffic_ops/traffic_ops_golang/routing/routes.go
b/traffic_ops/traffic_ops_golang/routing/routes.go
index dc45a36..8b326a5 100644
--- a/traffic_ops/traffic_ops_golang/routing/routes.go
+++ b/traffic_ops/traffic_ops_golang/routing/routes.go
@@ -479,8 +479,8 @@ func Routes(d ServerData) ([]Route, []RawRoute,
http.Handler, error) {
{api.Version{2, 0}, http.MethodGet,
`vault/bucket/{bucket}/key/{key}/values/?$`, vault.GetBucketKey,
auth.PrivLevelAdmin, Authenticated, nil, 2220510801, noPerlBypass},
//Delivery service LetsEncrypt
- {api.Version{2, 0}, http.MethodPost,
`deliveryservices/sslkeys/generate/letsencrypt/?$`,
deliveryservice.GenerateLetsEncryptCertificates, auth.PrivLevelReadOnly,
Authenticated, nil, 253439052, noPerlBypass},
- {api.Version{2, 0}, http.MethodGet,
`letsencrypt/dnsrecords/?$`, deliveryservice.GetDnsChallengeRecords,
auth.PrivLevelReadOnly, Authenticated, nil, 253439055, noPerlBypass},
+ {api.Version{2, 0}, http.MethodPost,
`deliveryservices/sslkeys/generate/letsencrypt/?$`,
deliveryservice.GenerateLetsEncryptCertificates, auth.PrivLevelOperations,
Authenticated, nil, 253439052, noPerlBypass},
+ {api.Version{2, 0}, http.MethodGet,
`letsencrypt/dnsrecords/?$`, deliveryservice.GetDnsChallengeRecords,
auth.PrivLevelOperations, Authenticated, nil, 253439055, noPerlBypass},
{api.Version{2, 0}, http.MethodPost,
`letsencrypt/autorenew/?$`, deliveryservice.RenewCertificates,
auth.PrivLevelOperations, Authenticated, nil, 253439056, noPerlBypass},
{api.Version{2, 0}, http.MethodGet,
`deliveryservices/{id}/health/?$`, deliveryservice.GetHealth,
auth.PrivLevelReadOnly, Authenticated, nil, 2234590101, noPerlBypass},
@@ -949,8 +949,8 @@ func Routes(d ServerData) ([]Route, []RawRoute,
http.Handler, error) {
{api.Version{1, 1}, http.MethodGet,
`riak/bucket/{bucket}/key/{key}/values/?(\.json)?$`,
vault.GetBucketKeyDeprecated, auth.PrivLevelAdmin, Authenticated, nil,
2020510801, noPerlBypass},
//Delivery service LetsEncrypt
- {api.Version{1, 5}, http.MethodPost,
`deliveryservices/sslkeys/generate/letsencrypt/?(\.json)?$`,
deliveryservice.GenerateLetsEncryptCertificates, auth.PrivLevelReadOnly,
Authenticated, nil, 753439052, noPerlBypass},
- {api.Version{1, 5}, http.MethodGet,
`letsencrypt/dnsrecords/?(\.json)?$`, deliveryservice.GetDnsChallengeRecords,
auth.PrivLevelReadOnly, Authenticated, nil, 753439055, noPerlBypass},
+ {api.Version{1, 5}, http.MethodPost,
`deliveryservices/sslkeys/generate/letsencrypt/?(\.json)?$`,
deliveryservice.GenerateLetsEncryptCertificates, auth.PrivLevelOperations,
Authenticated, nil, 753439052, noPerlBypass},
+ {api.Version{1, 5}, http.MethodGet,
`letsencrypt/dnsrecords/?(\.json)?$`, deliveryservice.GetDnsChallengeRecords,
auth.PrivLevelOperations, Authenticated, nil, 753439055, noPerlBypass},
{api.Version{1, 5}, http.MethodPost,
`letsencrypt/autorenew/?(\.json)?$`, deliveryservice.RenewCertificates,
auth.PrivLevelOperations, Authenticated, nil, 753439056, noPerlBypass},
{api.Version{1, 1}, http.MethodGet,
`deliveryservices/{id}/health/?(\.json)?$`, deliveryservice.GetHealth,
auth.PrivLevelReadOnly, Authenticated, nil, 2034590101, perlBypass},
