build-trust / ockam

Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
https://ockam.io
Apache License 2.0
4.44k stars 559 forks source link

Polvorin/influxdb ux #8471

Closed polvorin closed 2 weeks ago

polvorin commented 2 weeks ago

lease-usage: per-client

Outlet

name: n1
relays: n1
influxdb-outlets:
   influxdb:
     to: 8086
     influxdb-org-id: $ORG_ID
     influxdb-token: $TOKEN
     expires-in: 60
     lease-usage: per-client 
     lease-permissions: $PERMISSIONS_JSON

launch-config: |
  {
   "startup_services": {
      "secure_channel_listener": {
        "address" : "api"
      }
    }
  }

Inlet

name: influxdb_proxy
influxdb-inlets:
  influxdb:
    from: 0.0.0.0:8087
    to: /project/default/service/forward_to_n1/secure/api/service/influxdb
    lease-usage: per-client
    tls: false | true

Inlet (with custom route to lease_issuer)


name: influxdb_proxy
influxdb-inlets:
  influxdb:
    from: 0.0.0.0:8087
    to: /project/default/service/forward_to_n1/secure/api/service/influxdb
    lease-usage: per-client
    # This can be set to any route, not tied to the 'to' outlet.  Just to showcase that scenariom
    # here it actually points to the one derived from 'to'
    lease-issuer-route: /project/default/service/forward_to_n1/secure/api/service/influxdb_lease_issuer
    tls: false

lease-usage: shared

Outlet

name: n1
relays: n1

influxdb-outlets:
   influxdb:
     to: 8086
     influxdb-org-id: $ORG_ID
     influxdb-token: $TOKEN
     expires-in: 60
     lease-usage: shared 
     lease-permissions: $PERMISSIONS_JSON

launch-config: |
  {
   "startup_services": {
      "secure_channel_listener": {
        "address" : "api"
      }
    }
  }

Inlet

name: influxdb_proxy

influxdb-inlets:
  influxd_in:
    from: 0.0.0.0:8087
    to: /project/default/service/forward_to_n1/secure/api/service/influxdb
    lease-usage: shared
    tls: false | true
polvorin commented 2 weeks ago

incorporated into https://github.com/build-trust/ockam/pull/8469