Граф коммитов

13 Коммитов

Автор SHA1 Сообщение Дата
Yuval Yaron 7b81ebe952 Remove the usage of azure-cli-core library (#3381)
* remove usage of azure.cli.core from airlock processor

* use urllib for parsing url

* update the way we get webapp_suffix  - to match the most recent  version of the module

* remove usage of azure.cli.core from resource processor

* remove usage of azure.cli.core from the api

* fix usage of terraform module terraform_azurerm_environment_configuration

* remove ARM_ENVIRONMENT where it's not used

* update versions

* remove unused os import from tests

* add credential_scopes to the config

* fix usage of RESOURCE_MANAGER_ENDPOINT in CREDENTIAL_SCOPES

* change the github source for terraform_azurerm_environment_configuration

* temporarily remove the version for terraform_azurerm_environment_configuration

* temporarily use the hash of the latest commit

* temporarily use the hash of the latest commit instead of version 1.0.1 of terraform_azurerm_environment_configuration

* update core
2023-04-03 09:52:14 +00:00
Anat Balzam f94384934a Support Airlock in GOV cloud (#3338)
* hardcoded storage endpoint

* fix unit tests, api hardcoded value

* bump api version

* support arm env in airlock processor

* rename

---------

Co-authored-by: Anat Balzam <anat@example.com>
2023-04-03 09:49:44 +00:00
Yuval Yaron ac9f028638
Add 'status_message' for requests that are blocked by the malware scanner (#2666)
* change error_message to status_message

* add malware scanner result to status message

* update changelog and versions
2022-10-02 08:59:47 +00:00
Yuval Yaron ed68d49940
Handle request cancellation in Airlock processor (#2584)
* add 'previous status' field to 'status changed' message

* add support for container deletion in azure function 'toDeleteTrigger'

* handle request cancellation in StatusChangedQueueTrigger

* fix  output event names

* update versions

* clean code by extracting to methods

* update changelog

* fix unit tests

* add unit tests

* use already declared variables instead of request_properties

* update api version

* update changelog

Co-authored-by: Elad Iwanir <13205761+eladiw@users.noreply.github.com>

* update log message

Co-authored-by: Elad Iwanir <13205761+eladiw@users.noreply.github.com>

* rename references of toDelete event to dataDeletion event in statusChanged function

* change toDelete to DataDeletion

* update version and changelog

Co-authored-by: Elad Iwanir <13205761+eladiw@users.noreply.github.com>
2022-09-13 17:11:17 +03:00
Yuval Yaron ff389150f7
Enumerating Airlock request files after request submission (#2504)
* add method to enumerate airlock request files

* add request_files to the output event of BlobCreatedTrigger

* consume request_files in the api

* fix merge conflict and add log

* clean code in BlobCreatedTrigger

* update api and airlock processor versions

* refine comment

* enumerate request files on failures

* add test for get_request_files in StatusChangedQueueTrigger

* add test for get_request_files in BlobCreatedTrigger

* refine log

* remove empty lines

* update changelog

* revet file enumeration in BlobCreatedTrigger

* add file enumeration to StatusChangedQueueTrigger

* add support for concurrent updates of airlock requests and for file enumeration response

* add test for file enumeration in StatusChangedQueueTrigger

* add ETag test case for update_airlock_request

* update api version
2022-08-30 12:32:36 +03:00
tanya-borisova edfe0f5613
Airlock data cleanup deletion when moving between stages (#2454) 2022-08-22 19:14:04 +01:00
Liza Shakury 3a64455180
Use delegated key when generating SAS token in API (#2460)
* Use delegated key when generating SAS token in API

* Upgrade AP version

* Upgrade versions

* Add to release notes

* Remove logging

* CR changes

* CR changes

* Rename account details

* Fix lint

* Upgrade api version.

Co-authored-by: Liza Shakury <lishakur@Lizas-MacBook-Pro.local>
2022-08-16 13:29:38 +03:00
Yuval Yaron ae8c251a2e
Move failed airlock requests to "failed" state (#2395)
* add failed status to airlock

* handle exceptions by sending a failed event to event grid

* fix typo

* do not raise the error in the catch, if the function's status is failed the output binding is not called

* log the exception

* fix "Error exception must derive from BaseException" error thrown

* add error message to failed airlock requests

* add airlock exceptions for a more specific cases

* fix test

* handle specific exceptions instead of handling all exceptions the same way

* update versions and changelog

* add error_message to sample airlock request in test

* fix airlock tests

* move strings to constants.py and rename variable
2022-08-04 13:27:45 +03:00
Tamir Kamara d1b2ef4bc4
Remove usage of storage account key in airlock processor (#2382)
* copy with delegation key

* part2

* update change log

* fix tf

* cr comments
2022-08-02 15:46:38 +03:00
Elad Iwanir bbb0b78ec7
Airlock - Adding missing blocked storage (#2163)
* Adding missing blocked storage
* opening the Scan result Event grid topic to public access so malware scanning can deliver messages
* adding missing scan_result topic subscription
2022-06-30 14:46:44 +03:00
Elad Iwanir 02c7fbe06a
Malware scanning support (no actual scanner) + Refactoring airlock stages (#2127)
* Malware scanning + Refactoring airlock stages

1. Malware scanning can be toggled on/off
2. Added missing stages 
3. Fixed TRE API to accommodate new stages
4. Added Scan Result function to handle malware scanning results
5. fixes TF to support the scanning toggle
2022-06-28 11:26:26 +03:00
Liza Shakury 2beb1f92ea
[airlock] Create containers (#2091)
* Create containers

* CR changes

* Lint fix

* Lint fix

Co-authored-by: Liza Shakury <lishakur@Lizas-MacBook-Pro.local>
2022-06-26 17:15:45 +03:00
Elad Iwanir 11a39622c8
Airlock processor handles request Submission (#1978)
* Handling submitted/approved/rejected statusChangedEvent
terraform support for the az function

* Consolidate blob created queues to single SB topic + two subscriptions
Added support for blob created event handling in the airlock processor
airlock processor uses managed identity to get keys (+ added role assignment to SAs)
2022-06-14 13:45:51 +03:00