| // Licensed to the Apache Software Foundation (ASF) under one | |
| // or more contributor license agreements. See the NOTICE file | |
| // distributed with this work for additional information | |
| // regarding copyright ownership. The ASF licenses this file | |
| // to you under the Apache License, Version 2.0 (the | |
| // "License"); you may not use this file except in compliance | |
| // with the License. You may obtain a copy of the License at | |
| // | |
| // http://www.apache.org/licenses/LICENSE-2.0 | |
| // | |
| // Unless required by applicable law or agreed to in writing, | |
| // software distributed under the License is distributed on an | |
| // "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY | |
| // KIND, either express or implied. See the License for the | |
| // specific language governing permissions and limitations | |
| // under the License. | |
| <template> | |
| <div> | |
| <div> | |
| <a-alert | |
| type="info"> | |
| <template #message> | |
| <div | |
| v-html="$t('message.egress.rules.info.for.network').replace('%x', resource.egressdefaultpolicy ? '<b>' + $t('label.allow') + '</b>' : | |
| '<b>' + $t('label.deny') + '</b>').replace('%y', resource.egressdefaultpolicy ? '<b>' + $t('message.denied') + '</b>' : '<b>' + $t('message.allowed') + '</b>.')" /> | |
| </template> | |
| </a-alert> | |
| <a-divider /> | |
| <div class="form" v-ctrl-enter="addRule"> | |
| <div class="form__item"> | |
| <div class="form__label">{{ $t('label.sourcecidr') }}</div> | |
| <a-input v-model:value="newRule.cidrlist" v-focus="true"></a-input> | |
| </div> | |
| <div class="form__item"> | |
| <div class="form__label">{{ $t('label.destcidr') }}</div> | |
| <a-input v-model:value="newRule.destcidrlist"></a-input> | |
| </div> | |
| <div class="form__item"> | |
| <div class="form__label">{{ $t('label.protocol') }}</div> | |
| <a-select | |
| v-model:value="newRule.protocol" | |
| style="width: 100%;" | |
| @change="resetRulePorts" | |
| showSearch | |
| optionFilterProp="label" | |
| :filterOption="(input, option) => { | |
| return option.label.toLowerCase().indexOf(input.toLowerCase()) >= 0 | |
| }" > | |
| <a-select-option value="tcp" :label="$t('label.tcp')">{{ capitalise($t('label.tcp')) }}</a-select-option> | |
| <a-select-option value="udp" :label="$t('label.udp')">{{ capitalise($t('label.udp')) }}</a-select-option> | |
| <a-select-option value="icmp" :label="$t('label.icmp')">{{ capitalise($t('label.icmp')) }}</a-select-option> | |
| <a-select-option value="all" :label="$t('label.all')">{{ $t('label.all') }}</a-select-option> | |
| </a-select> | |
| </div> | |
| <div v-show="newRule.protocol === 'tcp' || newRule.protocol === 'udp'" class="form__item"> | |
| <div class="form__label">{{ $t('label.startport') }}</div> | |
| <a-input v-model:value="newRule.startport"></a-input> | |
| </div> | |
| <div v-show="newRule.protocol === 'tcp' || newRule.protocol === 'udp'" class="form__item"> | |
| <div class="form__label">{{ $t('label.endport') }}</div> | |
| <a-input v-model:value="newRule.endport"></a-input> | |
| </div> | |
| <div v-show="newRule.protocol === 'icmp'" class="form__item"> | |
| <div class="form__label">{{ $t('label.icmptype') }}</div> | |
| <a-select | |
| v-model:value="newRule.icmptype" | |
| @change="val => { updateIcmpCodes(val) }" | |
| showSearch | |
| optionFilterProp="label" | |
| :filterOption="(input, option) => { | |
| return option.children[0].children.toLowerCase().indexOf(input.toLowerCase()) >= 0 | |
| }" > | |
| <a-select-option v-for="(opt) in icmpTypes" :key="opt.index" :label="opt.description"> | |
| {{ opt.index + ' - ' + opt.description }} | |
| </a-select-option> | |
| </a-select> | |
| </div> | |
| <div v-show="newRule.protocol === 'icmp'" class="form__item"> | |
| <div class="form__label">{{ $t('label.icmpcode') }}</div> | |
| <a-select | |
| v-model:value="newRule.icmpcode" | |
| showSearch | |
| optionFilterProp="label" | |
| :filterOption="(input, option) => { | |
| return option.children[0].children.toLowerCase().indexOf(input.toLowerCase()) >= 0 | |
| }" > | |
| <a-select-option v-for="(opt) in icmpCodes" :key="opt.code" :label="opt.description"> | |
| {{ opt.code + ' - ' + opt.description }} | |
| </a-select-option> | |
| </a-select> | |
| </div> | |
| <div class="form__item"> | |
| <a-button ref="submit" :disabled="!('createEgressFirewallRule' in $store.getters.apis)" type="primary" @click="addRule"> | |
| <template #icon><plus-outlined /></template> | |
| {{ $t('label.add') }} | |
| </a-button> | |
| </div> | |
| </div> | |
| </div> | |
| <a-divider/> | |
| <a-button | |
| v-if="(('deleteEgressFirewallRule' in $store.getters.apis) && this.selectedRowKeys.length > 0)" | |
| type="primary" | |
| danger | |
| style="width: 100%; margin-bottom: 15px" | |
| @click="bulkActionConfirmation()"> | |
| <template #icon><delete-outlined /></template> | |
| {{ $t('label.action.bulk.delete.egress.firewall.rules') }} | |
| </a-button> | |
| <a-table | |
| size="small" | |
| style="overflow-y: auto" | |
| :loading="loading" | |
| :columns="columns" | |
| :dataSource="egressRules" | |
| :pagination="false" | |
| :rowSelection="{selectedRowKeys: selectedRowKeys, onChange: onSelectChange}" | |
| :rowKey="record => record.id"> | |
| <template #bodyCell="{ column, record }"> | |
| <template v-if="column.key === 'protocol'"> | |
| {{ getCapitalise(record.protocol) }} | |
| </template> | |
| <template v-if="column.key === 'startport'"> | |
| {{ record.icmptype >= 0 ? String(record.icmptype): record.startport >= 0 ? String(record.startport): 'All' }} | |
| </template> | |
| <template v-if="column.key === 'endport'"> | |
| {{ record.icmpcode >= 0 ? String(record.icmpcode): record.endport >= 0 ? String(record.endport): 'All' }} | |
| </template> | |
| <template v-if="column.key === 'actions'"> | |
| <tooltip-button | |
| :tooltip="$t('label.delete')" | |
| :disabled="!('deleteEgressFirewallRule' in $store.getters.apis)" | |
| type="primary" | |
| :danger="true" | |
| icon="delete-outlined" | |
| @onClick="deleteRule(record)" /> | |
| </template> | |
| </template> | |
| </a-table> | |
| <a-pagination | |
| class="pagination" | |
| size="small" | |
| :current="page" | |
| :pageSize="pageSize" | |
| :total="totalCount" | |
| :showTotal="total => `${$t('label.total')} ${total} ${$t('label.items')}`" | |
| :pageSizeOptions="['10', '20', '40', '80', '100']" | |
| @change="handleChangePage" | |
| @showSizeChange="handleChangePageSize" | |
| showSizeChanger> | |
| <template #buildOptionText="props"> | |
| <span>{{ props.value }} / {{ $t('label.page') }}</span> | |
| </template> | |
| </a-pagination> | |
| <bulk-action-view | |
| v-if="showConfirmationAction || showGroupActionModal" | |
| :showConfirmationAction="showConfirmationAction" | |
| :showGroupActionModal="showGroupActionModal" | |
| :items="egressRules" | |
| :selectedRowKeys="selectedRowKeys" | |
| :selectedItems="selectedItems" | |
| :columns="columns" | |
| :selectedColumns="selectedColumns" | |
| action="deleteEgressFirewallRule" | |
| :loading="loading" | |
| :message="message" | |
| @group-action="deleteRules" | |
| @handle-cancel="handleCancel" | |
| @close-modal="closeModal" /> | |
| </div> | |
| </template> | |
| <script> | |
| import { getAPI, postAPI } from '@/api' | |
| import Status from '@/components/widgets/Status' | |
| import TooltipButton from '@/components/widgets/TooltipButton' | |
| import BulkActionView from '@/components/view/BulkActionView' | |
| import eventBus from '@/config/eventBus' | |
| export default { | |
| name: 'EgressRulesTab', | |
| components: { | |
| Status, | |
| TooltipButton, | |
| BulkActionView | |
| }, | |
| props: { | |
| resource: { | |
| type: Object, | |
| required: true | |
| } | |
| }, | |
| data () { | |
| return { | |
| selectedRowKeys: [], | |
| showGroupActionModal: false, | |
| selectedItems: [], | |
| selectedColumns: [], | |
| filterColumns: ['Actions'], | |
| showConfirmationAction: false, | |
| message: { | |
| title: this.$t('label.action.bulk.delete.egress.firewall.rules'), | |
| confirmMessage: this.$t('label.confirm.delete.egress.firewall.rules') | |
| }, | |
| loading: true, | |
| egressRules: [], | |
| newRule: { | |
| protocol: 'tcp', | |
| cidrlist: null, | |
| destcidrlist: null, | |
| networkid: this.resource.id, | |
| icmptype: null, | |
| icmpcode: null, | |
| startport: null, | |
| endport: null | |
| }, | |
| protocolNumbers: [], | |
| icmpTypes: [], | |
| icmpCodes: [], | |
| totalCount: 0, | |
| page: 1, | |
| pageSize: 10, | |
| columns: [ | |
| { | |
| title: this.$t('label.sourcecidr'), | |
| dataIndex: 'cidrlist' | |
| }, | |
| { | |
| title: this.$t('label.destcidr'), | |
| dataIndex: 'destcidrlist' | |
| }, | |
| { | |
| key: 'protocol', | |
| title: this.$t('label.protocol') | |
| }, | |
| { | |
| key: 'startport', | |
| title: this.$t('label.icmptype.start.port') | |
| }, | |
| { | |
| key: 'endport', | |
| title: this.$t('label.icmpcode.end.port') | |
| }, | |
| { | |
| key: 'actions', | |
| title: this.$t('label.actions') | |
| } | |
| ] | |
| } | |
| }, | |
| computed: { | |
| hasSelected () { | |
| return this.selectedRowKeys.length > 0 | |
| } | |
| }, | |
| created () { | |
| this.fetchNetworkProtocols() | |
| this.fetchData() | |
| }, | |
| watch: { | |
| resource: { | |
| deep: true, | |
| handler (newItem) { | |
| if (!newItem || !newItem.id) { | |
| return | |
| } | |
| this.fetchData() | |
| } | |
| } | |
| }, | |
| inject: ['parentFetchData'], | |
| methods: { | |
| fetchNetworkProtocols () { | |
| getAPI('listNetworkProtocols', { | |
| option: 'protocolnumber' | |
| }).then(json => { | |
| this.protocolNumbers = json.listnetworkprotocolsresponse?.networkprotocol || [] | |
| }) | |
| getAPI('listNetworkProtocols', { | |
| option: 'icmptype' | |
| }).then(json => { | |
| this.icmpTypes.push({ index: -1, description: this.$t('label.all') }) | |
| const results = json.listnetworkprotocolsresponse?.networkprotocol || [] | |
| for (const result of results) { | |
| this.icmpTypes.push(result) | |
| } | |
| }) | |
| }, | |
| updateIcmpCodes (val) { | |
| this.newRule.icmpcode = -1 | |
| this.icmpCodes = [] | |
| this.icmpCodes.push({ code: -1, description: this.$t('label.all') }) | |
| const icmpType = this.icmpTypes.find(icmpType => icmpType.index === val) | |
| if (icmpType && icmpType.details) { | |
| const icmpTypeDetails = icmpType.details | |
| for (const k of Object.keys(icmpTypeDetails)) { | |
| this.icmpCodes.push({ code: parseInt(k), description: icmpTypeDetails[k] }) | |
| } | |
| } | |
| }, | |
| fetchData () { | |
| this.loading = true | |
| getAPI('listEgressFirewallRules', { | |
| listAll: true, | |
| networkid: this.resource.id, | |
| page: this.page, | |
| pageSize: this.pageSize | |
| }).then(response => { | |
| this.egressRules = response.listegressfirewallrulesresponse.firewallrule || [] | |
| this.totalCount = response.listegressfirewallrulesresponse.count || 0 | |
| }).finally(() => { | |
| this.loading = false | |
| }) | |
| }, | |
| setSelection (selection) { | |
| this.selectedRowKeys = selection | |
| this.$emit('selection-change', this.selectedRowKeys) | |
| this.selectedItems = (this.egressRules.filter(function (item) { | |
| return selection.indexOf(item.id) !== -1 | |
| })) | |
| }, | |
| resetSelection () { | |
| this.setSelection([]) | |
| }, | |
| onSelectChange (selectedRowKeys, selectedRows) { | |
| this.setSelection(selectedRowKeys) | |
| }, | |
| bulkActionConfirmation () { | |
| this.showConfirmationAction = true | |
| this.selectedColumns = this.columns.filter(column => { | |
| return !this.filterColumns.includes(column.title) | |
| }) | |
| this.selectedItems = this.selectedItems.map(v => ({ ...v, status: 'InProgress' })) | |
| }, | |
| handleCancel () { | |
| eventBus.emit('update-bulk-job-status', { items: this.selectedItems, action: false }) | |
| this.showGroupActionModal = false | |
| this.selectedItems = [] | |
| this.selectedColumns = [] | |
| this.selectedRowKeys = [] | |
| this.parentFetchData() | |
| }, | |
| deleteRules (e) { | |
| this.showConfirmationAction = false | |
| this.selectedColumns.splice(0, 0, { | |
| key: 'status', | |
| dataIndex: 'status', | |
| title: this.$t('label.operation.status'), | |
| filters: [ | |
| { text: 'In Progress', value: 'InProgress' }, | |
| { text: 'Success', value: 'success' }, | |
| { text: 'Failed', value: 'failed' } | |
| ] | |
| }) | |
| if (this.selectedRowKeys.length > 0) { | |
| this.showGroupActionModal = true | |
| } | |
| for (const rule of this.selectedItems) { | |
| this.deleteRule(rule) | |
| } | |
| }, | |
| getCapitalise (val) { | |
| if (val === 'all') return this.$t('label.all') | |
| return val.toUpperCase() | |
| }, | |
| deleteRule (rule) { | |
| this.loading = true | |
| postAPI('deleteEgressFirewallRule', { id: rule.id }).then(response => { | |
| const jobId = response.deleteegressfirewallruleresponse.jobid | |
| eventBus.emit('update-job-details', { jobId, resourceId: null }) | |
| this.$pollJob({ | |
| title: this.$t('label.action.delete.egress.firewall'), | |
| description: rule.id, | |
| jobId: jobId, | |
| successMessage: this.$t('message.success.remove.egress.rule'), | |
| successMethod: () => { | |
| if (this.selectedItems.length > 0) { | |
| eventBus.emit('update-resource-state', { selectedItems: this.selectedItems, resource: rule.id, state: 'success' }) | |
| } | |
| this.fetchData() | |
| }, | |
| errorMessage: this.$t('message.remove.egress.rule.failed'), | |
| errorMethod: () => { | |
| if (this.selectedItems.length > 0) { | |
| eventBus.emit('update-resource-state', { selectedItems: this.selectedItems, resource: rule.id, state: 'failed' }) | |
| } | |
| this.fetchData() | |
| }, | |
| loadingMessage: this.$t('message.remove.egress.rule.processing'), | |
| catchMessage: this.$t('error.fetching.async.job.result'), | |
| catchMethod: () => this.fetchData(), | |
| bulkAction: `${this.selectedItems.length > 0}` && this.showGroupActionModal | |
| }) | |
| }).catch(error => { | |
| this.$notifyError(error) | |
| this.fetchData() | |
| }).finally(() => { | |
| this.loading = false | |
| }) | |
| }, | |
| addRule () { | |
| if (this.loading) return | |
| this.loading = true | |
| postAPI('createEgressFirewallRule', { ...this.newRule }).then(response => { | |
| this.$pollJob({ | |
| jobId: response.createegressfirewallruleresponse.jobid, | |
| successMessage: this.$t('message.success.add.egress.rule'), | |
| successMethod: () => { | |
| this.resetAllRules() | |
| this.fetchData() | |
| }, | |
| errorMessage: this.$t('message.add.egress.rule.failed'), | |
| errorMethod: () => { | |
| this.resetAllRules() | |
| this.fetchData() | |
| }, | |
| loadingMessage: this.$t('message.add.egress.rule.processing'), | |
| catchMessage: this.$t('error.fetching.async.job.result'), | |
| catchMethod: () => { | |
| this.resetAllRules() | |
| this.fetchData() | |
| } | |
| }) | |
| }).catch(error => { | |
| this.$notifyError(error) | |
| this.resetAllRules() | |
| this.fetchData() | |
| }) | |
| }, | |
| resetAllRules () { | |
| this.newRule.protocol = 'tcp' | |
| this.newRule.cidrlist = null | |
| this.newRule.destcidrlist = null | |
| this.newRule.networkid = this.resource.id | |
| this.resetRulePorts() | |
| }, | |
| resetRulePorts () { | |
| this.newRule.icmptype = null | |
| this.newRule.icmpcode = null | |
| this.newRule.startport = null | |
| this.newRule.endport = null | |
| }, | |
| closeModal () { | |
| this.showConfirmationAction = false | |
| }, | |
| handleChangePage (page, pageSize) { | |
| this.page = page | |
| this.pageSize = pageSize | |
| this.fetchData() | |
| }, | |
| handleChangePageSize (currentPage, pageSize) { | |
| this.page = currentPage | |
| this.pageSize = pageSize | |
| this.fetchData() | |
| }, | |
| capitalise (val) { | |
| return val.toUpperCase() | |
| } | |
| } | |
| } | |
| </script> | |
| <style scoped lang="scss"> | |
| .rule { | |
| &-container { | |
| display: flex; | |
| width: 100%; | |
| flex-wrap: wrap; | |
| margin-right: -20px; | |
| margin-bottom: -10px; | |
| } | |
| &__item { | |
| padding-right: 20px; | |
| margin-bottom: 20px; | |
| @media (min-width: 760px) { | |
| flex: 1; | |
| } | |
| } | |
| &__title { | |
| font-weight: bold; | |
| } | |
| } | |
| .add-btn { | |
| width: 100%; | |
| padding-top: 15px; | |
| padding-bottom: 15px; | |
| height: auto; | |
| } | |
| .add-actions { | |
| display: flex; | |
| justify-content: flex-end; | |
| margin-right: -20px; | |
| margin-bottom: 20px; | |
| @media (min-width: 760px) { | |
| margin-top: 20px; | |
| } | |
| button { | |
| margin-right: 20px; | |
| } | |
| } | |
| .form { | |
| display: flex; | |
| margin-right: -20px; | |
| margin-bottom: 20px; | |
| flex-direction: column; | |
| align-items: flex-end; | |
| @media (min-width: 760px) { | |
| flex-direction: row; | |
| } | |
| &__item { | |
| display: flex; | |
| flex-direction: column; | |
| flex: 1; | |
| padding-right: 20px; | |
| margin-bottom: 20px; | |
| @media (min-width: 760px) { | |
| margin-bottom: 0; | |
| } | |
| input, | |
| .ant-select { | |
| margin-top: auto; | |
| } | |
| } | |
| &__label { | |
| font-weight: bold; | |
| } | |
| } | |
| .pagination { | |
| margin-top: 20px; | |
| } | |
| </style> |