kartverket / kartverket.dev

Kartverket's internal developer portal
https://kartverket.dev
MIT License
1 stars 3 forks source link

List exposed endpoints #26

Open eliihen opened 2 months ago

eliihen commented 2 months ago

👩‍💻 User story

As a security team in Kartverket I want to get an overview over which URLs are exposed and what components they are associated with so that we can take appropriate action when required

✅ Acceptance criteria

eliihen commented 2 months ago

I have some thoughts on how this could be done.

One idea could be by making a plugin that pulls info from a skiperator app based on a label on the component (the name and namespace of the skiperator app) and shows that list as info on a component.

This plugin could also automatically make custom backstage “URL” resources that map to the component using “exposes” relations.

But this is just one idea, I’m sure there are many other ways to resolve this