297 lines
13 KiB
HTML
297 lines
13 KiB
HTML
{{define "portal.html"}}
|
|
<!doctype html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
<title>{{.Title}} · TAPM</title>
|
|
<link rel="stylesheet" href="/static/app.css">
|
|
<script src="/static/app.js" defer></script>
|
|
</head>
|
|
<body>
|
|
<header class="topbar">
|
|
<div>
|
|
<span class="wordmark">TAPM</span>
|
|
<span class="product-name">Deployment Access</span>
|
|
</div>
|
|
<div class="operator">
|
|
<span>{{.Technician.DisplayName}}</span>
|
|
<form action="/auth/logout" method="post">
|
|
<input type="hidden" name="csrf_token" value="{{.CSRFToken}}">
|
|
<button class="text-button" type="submit">Sign out</button>
|
|
</form>
|
|
</div>
|
|
</header>
|
|
|
|
<main class="page">
|
|
{{if .NewCode}}
|
|
<section class="code-reveal" aria-live="polite">
|
|
<div>
|
|
<p class="eyebrow">Deployment authorization created</p>
|
|
<h2 id="new-code">{{.NewCode}}</h2>
|
|
<p>Share this code only with the technician performing the deployment.</p>
|
|
</div>
|
|
<button class="button light" type="button" data-copy="#new-code">Copy code</button>
|
|
</section>
|
|
{{end}}
|
|
|
|
{{if .Notice}}<div class="notice">{{.Notice}}</div>{{end}}
|
|
|
|
<section class="hero">
|
|
<div>
|
|
<p class="eyebrow">Controlled package delivery</p>
|
|
<h1>Open a deployment window.</h1>
|
|
<p>
|
|
Authorize a limited number of hosts for selected packages and
|
|
installer actions. Access closes automatically at the end of the window.
|
|
</p>
|
|
</div>
|
|
<div class="policy-card">
|
|
<span>Default policy</span>
|
|
<strong>{{.DefaultHostLimit}} hosts</strong>
|
|
<strong>{{.DefaultDuration}} hours</strong>
|
|
</div>
|
|
</section>
|
|
|
|
<div class="content-grid">
|
|
<section class="panel create-panel">
|
|
<div class="panel-heading">
|
|
<div>
|
|
<p class="eyebrow">New authorization</p>
|
|
<h2>Create deployment code</h2>
|
|
</div>
|
|
</div>
|
|
|
|
<form action="/portal/authorizations" method="post" class="stack">
|
|
<input type="hidden" name="csrf_token" value="{{.CSRFToken}}">
|
|
<label>
|
|
Customer or deployment label
|
|
<input name="customer_label" maxlength="255" placeholder="Example: Acme cluster refresh">
|
|
</label>
|
|
|
|
<div class="field-row">
|
|
<label>
|
|
Maximum hosts
|
|
<input name="host_limit" type="number" min="1" max="25" value="{{.DefaultHostLimit}}" required>
|
|
</label>
|
|
<label>
|
|
Duration in hours
|
|
<input name="duration_hours" type="number" min="1" max="24" value="{{.DefaultDuration}}" required>
|
|
</label>
|
|
</div>
|
|
|
|
<fieldset>
|
|
<legend>Allowed packages</legend>
|
|
{{range .Packages}}
|
|
{{if .Enabled}}
|
|
<label class="package-choice">
|
|
<input type="checkbox" name="package_id" value="{{.ID}}">
|
|
<span>
|
|
<strong>{{.DisplayName}}</strong>
|
|
<small>{{.PackageVersion}}</small>
|
|
</span>
|
|
</label>
|
|
{{end}}
|
|
{{else}}
|
|
<p class="empty">No packages have been enabled yet.</p>
|
|
{{end}}
|
|
</fieldset>
|
|
|
|
<fieldset>
|
|
<legend>Allowed installer actions</legend>
|
|
{{range .Actions}}
|
|
{{if .Enabled}}
|
|
<label class="package-choice">
|
|
<input type="checkbox" name="action_slug" value="{{.Slug}}">
|
|
<span>
|
|
<strong>{{.DisplayName}}</strong>
|
|
<small>Authorization gate</small>
|
|
</span>
|
|
</label>
|
|
{{end}}
|
|
{{else}}
|
|
<p class="empty">No installer actions have been enabled.</p>
|
|
{{end}}
|
|
</fieldset>
|
|
|
|
<button class="button primary" type="submit">Create 3-hour code</button>
|
|
</form>
|
|
</section>
|
|
|
|
<section class="panel">
|
|
<div class="panel-heading">
|
|
<div>
|
|
<p class="eyebrow">Recent activity</p>
|
|
<h2>Deployment authorizations</h2>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="authorization-list">
|
|
{{range .Authorizations}}
|
|
<article class="authorization {{if isActive .}}active{{else}}closed{{end}}">
|
|
<div class="authorization-top">
|
|
<div>
|
|
<strong>{{if .CustomerLabel}}{{.CustomerLabel}}{{else}}Unlabeled deployment{{end}}</strong>
|
|
<span class="status">{{if isActive .}}Active{{else}}Closed{{end}}</span>
|
|
</div>
|
|
<span class="code-hint">•••••{{.CodeHint}}</span>
|
|
</div>
|
|
<dl>
|
|
<div><dt>Hosts</dt><dd>{{.HostCount}} / {{.HostLimit}}</dd></div>
|
|
<div><dt>Expires</dt><dd>{{formatTime .ExpiresAt}}</dd></div>
|
|
<div><dt>Packages</dt><dd>{{if .Packages}}{{.Packages}}{{else}}None{{end}}</dd></div>
|
|
<div><dt>Actions</dt><dd>{{if .Actions}}{{.Actions}}{{else}}None{{end}}</dd></div>
|
|
<div><dt>Created by</dt><dd>{{.CreatedBy}}</dd></div>
|
|
</dl>
|
|
{{if isActive .}}
|
|
<form action="/portal/authorizations/{{.ID}}/revoke" method="post">
|
|
<input type="hidden" name="csrf_token" value="{{$.CSRFToken}}">
|
|
<button class="text-button danger" type="submit">Revoke now</button>
|
|
</form>
|
|
{{end}}
|
|
</article>
|
|
{{else}}
|
|
<p class="empty">No deployment authorizations have been created.</p>
|
|
{{end}}
|
|
</div>
|
|
</section>
|
|
</div>
|
|
|
|
<section class="panel package-admin">
|
|
<div class="panel-heading">
|
|
<div>
|
|
<p class="eyebrow">Registry catalog</p>
|
|
<h2>Protected packages</h2>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="package-layout">
|
|
<div class="package-table">
|
|
{{range .Packages}}
|
|
<div class="package-row">
|
|
<div>
|
|
<strong>{{.DisplayName}}</strong>
|
|
<small>{{.Slug}} · {{.PackageVersion}}</small>
|
|
</div>
|
|
<span class="status {{if .Enabled}}enabled{{end}}">{{if .Enabled}}Enabled{{else}}Disabled{{end}}</span>
|
|
</div>
|
|
{{else}}
|
|
<p class="empty">Add the first package after publishing it to Gitea.</p>
|
|
{{end}}
|
|
</div>
|
|
|
|
<div class="package-forms">
|
|
{{if .Packages}}
|
|
<form action="/portal/packages/upload" method="post" enctype="multipart/form-data" class="stack compact" data-upload-form>
|
|
<input type="hidden" name="csrf_token" value="{{.CSRFToken}}">
|
|
<input type="hidden" name="mode" value="update">
|
|
<p class="form-title">Update a package</p>
|
|
<label>Package
|
|
<select name="slug" required>
|
|
{{range .Packages}}
|
|
<option value="{{.Slug}}">{{.DisplayName}} ({{.Slug}} · {{.PackageVersion}})</option>
|
|
{{end}}
|
|
</select>
|
|
</label>
|
|
<label>New version <input name="package_version" placeholder="26.2.0.10" required></label>
|
|
<label class="toggle"><input type="checkbox" name="enabled" value="1" checked> Enable after upload</label>
|
|
<label>Replacement installer <input name="package_file" type="file" required></label>
|
|
<p class="form-help">The package ID stays the same. Existing authorizations automatically use the replacement, and its prior Gitea version is removed.</p>
|
|
<button class="button primary" type="submit">Replace current package</button>
|
|
<p class="upload-status" data-upload-status aria-live="polite"></p>
|
|
</form>
|
|
{{end}}
|
|
|
|
<form action="/portal/packages/upload" method="post" enctype="multipart/form-data" class="stack compact" data-upload-form>
|
|
<input type="hidden" name="csrf_token" value="{{.CSRFToken}}">
|
|
<input type="hidden" name="mode" value="create">
|
|
<p class="form-title">Add a protected package</p>
|
|
<label>Package ID <input name="slug" placeholder="sentinelone-linux" pattern="[a-z0-9_-]+" required></label>
|
|
<label>Display name <input name="display_name" placeholder="SentinelOne Linux Agent" required></label>
|
|
<label>Version <input name="package_version" placeholder="26.2.0.10" required></label>
|
|
<label class="toggle"><input type="checkbox" name="enabled" value="1" checked> Enable after upload</label>
|
|
<label>Installer file <input name="package_file" type="file" required></label>
|
|
<button class="button secondary" type="submit">Upload new package</button>
|
|
<p class="upload-status" data-upload-status aria-live="polite"></p>
|
|
</form>
|
|
|
|
<details class="manual-metadata">
|
|
<summary>Register package metadata manually</summary>
|
|
<form action="/portal/packages" method="post" class="stack compact">
|
|
<input type="hidden" name="csrf_token" value="{{.CSRFToken}}">
|
|
<label>Package ID <input name="slug" placeholder="sentinelone-linux" pattern="[a-z0-9_-]+" required></label>
|
|
<label>Display name <input name="display_name" placeholder="SentinelOne Linux Agent" required></label>
|
|
<label>Version <input name="package_version" placeholder="26.1.1.31" required></label>
|
|
<label>Filename <input name="file_name" placeholder="SentinelAgent_linux_x86_64.deb" required></label>
|
|
<label>SHA-256 <input name="sha256" minlength="64" maxlength="64" placeholder="64 hexadecimal characters" required></label>
|
|
<label class="toggle"><input type="checkbox" name="enabled" value="1"> Enable for new authorizations</label>
|
|
<button class="button secondary" type="submit">Save package metadata</button>
|
|
</form>
|
|
</details>
|
|
</div>
|
|
</div>
|
|
</section>
|
|
|
|
<section class="panel audit-panel">
|
|
<div class="panel-heading">
|
|
<div>
|
|
<p class="eyebrow">Audit trail</p>
|
|
<h2>Security events</h2>
|
|
</div>
|
|
</div>
|
|
<form action="/portal" method="get" class="audit-filters">
|
|
<label>Time range
|
|
<select name="audit_range">
|
|
<option value="24h" {{if eq .AuditFilters.TimeRange "24h"}}selected{{end}}>Past 24 hours</option>
|
|
<option value="7d" {{if eq .AuditFilters.TimeRange "7d"}}selected{{end}}>Past 7 days</option>
|
|
<option value="30d" {{if eq .AuditFilters.TimeRange "30d"}}selected{{end}}>Past 30 days</option>
|
|
<option value="90d" {{if eq .AuditFilters.TimeRange "90d"}}selected{{end}}>Past 90 days</option>
|
|
<option value="all" {{if eq .AuditFilters.TimeRange "all"}}selected{{end}}>All retained events</option>
|
|
</select>
|
|
</label>
|
|
<label>Event type
|
|
<select name="audit_event">
|
|
<option value="">All event types</option>
|
|
{{range .AuditEventTypes}}
|
|
<option value="{{.}}" {{if eq $.AuditFilters.EventType .}}selected{{end}}>{{.}}</option>
|
|
{{end}}
|
|
</select>
|
|
</label>
|
|
<label>Technician / actor <input name="audit_actor" value="{{.AuditFilters.Actor}}" placeholder="taiadmin"></label>
|
|
<label>Hostname <input name="audit_hostname" value="{{.AuditFilters.Hostname}}" placeholder="pve01"></label>
|
|
<label>Package ID <input name="audit_package" value="{{.AuditFilters.PackageSlug}}" placeholder="sentinelone-linux"></label>
|
|
<label>Source IP <input name="audit_ip" value="{{.AuditFilters.SourceIP}}" placeholder="10.10.1.25"></label>
|
|
<label>Details contain <input name="audit_details" value="{{.AuditFilters.Details}}" placeholder="customer or action"></label>
|
|
<div class="audit-filter-actions">
|
|
<button class="button secondary" type="submit">Apply filters</button>
|
|
<a class="text-button" href="/portal?audit_range=30d">Clear filters</a>
|
|
</div>
|
|
<p class="form-help audit-filter-note">Audit records are retained indefinitely. Up to the newest 250 matching events are shown.</p>
|
|
</form>
|
|
<div class="audit-table">
|
|
{{range .AuditEvents}}
|
|
<div class="audit-row">
|
|
<div>
|
|
<strong>{{.EventType}}</strong>
|
|
<small>{{formatTime .CreatedAt}}</small>
|
|
</div>
|
|
<div>
|
|
{{if .Actor}}<span>{{.Actor}}</span>{{end}}
|
|
{{if .Hostname}}<span>{{.Hostname}}</span>{{end}}
|
|
{{if .PackageSlug}}<span>{{.PackageSlug}}</span>{{end}}
|
|
</div>
|
|
<div>
|
|
<span>{{.SourceIP}}</span>
|
|
{{if .Details}}<small>{{.Details}}</small>{{end}}
|
|
</div>
|
|
</div>
|
|
{{else}}
|
|
<p class="empty audit-empty">No security events match these filters.</p>
|
|
{{end}}
|
|
</div>
|
|
</section>
|
|
</main>
|
|
</body>
|
|
</html>
|
|
{{end}}
|