UPDATE: network policies

deploy/helmfiles/prd.yaml

@@ -49,5 +49,8 @@ releases:
         value: dea2c27f-0973-4588-a2e0-9e31b64c7ffd
       - name: replicaCount
         value: 1
-      # - name: maestro.restricted_ip
-      #   value: "177.52.172.0/24,189.84.160.157/32,186.237.171.146/32,10.70.1.0/24"
+        # 10.70.0.0/16 internal network
+        # 137.131.167.254/32 loadbalancer
+        # 159.112.184.81/32 cluster ip for the uptime request ingest
+      - name: maestro.restricted_ip
+        value: "177.52.172.0/24, 189.84.160.157/32, 186.237.171.146/32, 137.131.167.254/32, 10.70.0.0/16, 159.112.184.81/32"

deploy/helmfiles/stg.yaml

@@ -27,4 +27,4 @@ charts:
       - name: resources
         value: null
       - name: maestro.restricted_ip
-        value: "137.131.167.254/32,10.70.0.0/16,163.176.242.27/32"
+        value: "137.131.167.254/32, 10.70.0.0/16, 159.112.184.81/32"

src/main.ts

@@ -21,27 +21,18 @@ async function bootstrap() {
   const app = await NestFactory.create(AppModule, {
     logger,
     cors: {
-      origin: [
-        'https://app.stg.dadosfera.ai',
-        'https://app.dadosfera.ai',
-        'https://unimed.dadosfera.ai',
-        'https://boston-scientific.dadosfera.ai',
-        'https://plataforma.dadosfera.ai'
-      ],
+      origin: '*',
       methods: 'GET,HEAD,PUT,PATCH,POST,DELETE',
       preflightContinue: false,
       optionsSuccessStatus: 204,
-      credentials: true,
+      credentials: true
     },
   });
   app.use(helmet());
   app.use(cookieParser(process.env.COOKIE_SECRET));
   if (process.env.ENV === 'prd') {
     app.use('/catalog/register-dataset', json({ limit: '10mb' }));
-    app.use(
-      '/catalog/register-dataset',
-      urlencoded({ extended: true, limit: '10mb' }),
-    );
+    app.use('/catalog/register-dataset', urlencoded({ extended: true, limit: '10mb' }));
   }
 
   configureSwagger(app);

src/modules/auth/auth.controller.ts

@@ -573,7 +573,7 @@ export class AuthController {
 
       this.logger.info('Set Cookie ddf-auth')
       res.cookie('ddf-auth', data.accessToken, {
-        domain: '.dadosfera.ai',
+        domain: 'stg.dadosfera.ai',
         maxAge: exp,
         httpOnly: true,
         secure: true,
@@ -584,7 +584,7 @@ export class AuthController {
     if (data.refreshToken) {
       this.logger.info('Set Cookie ddf-refresh-auth')
       res.cookie('ddf-refresh-auth', data.refreshToken, {
-        domain: '.dadosfera.ai',
+        domain: 'stg.dadosfera.ai',
         maxAge: exp,
         httpOnly: true,
         secure: true,
@@ -595,7 +595,7 @@ export class AuthController {
     if (data.userId) {
       this.logger.info('Set Cookie ddf-refresh-auth')
       res.cookie('ddf-user-id', data.userId, {
-        domain: '.dadosfera.ai',
+        domain: 'stg.dadosfera.ai',
         maxAge: exp,
         httpOnly: true,
         secure: true,

src/modules/catalog/catalog.service.ts

@@ -406,14 +406,11 @@ class CatalogService implements OnModuleInit {
 
       const roles = [];
       const users = [];
-      const data_asset_roles = data_asset?.roles || []
-      for (const role_id of data_asset_roles) {
+      for (const role_id of data_asset.roles) {
         const role = customer_roles.find((r) => r.id === role_id);
         if (role) roles.push({ id: role.id, name: role.name });
       }
-
-      const data_asset_users = data_asset?.users || []
-      for (const user_id of data_asset_users) {
+      for (const user_id of data_asset.users) {
         const user = customer_users.find((r) => r.id === user_id);
         if (user) users.push({ id: user.id, username: user.username });
       }