1385857 - Restrict Lando-API pingback endpoint to Transplant only.

Status: RESOLVED FIXED

(Conduit :: Lando, enhancement)

Description

[Piotr Zalewa [:zalun]]

Lando API pingback should be usable only by Transplant service. 
There is a need for a specific container on which pingback will be enabled. 
This endpoint will be served using a non-standard port to simplify filtering on the network layer.

Comment 1

[Israel Madueme [:imadueme]]

I believe this is completed in https://github.com/mozilla-conduit/lando-api/pull/23?
If you agree and can confirm with ckolos that the infrastructure is deployed correctly then perhaps this bug is can be marked fixed.

Comment 2

[Piotr Zalewa [:zalun]]

To test if it is working one should try to hit the pingback from transplant server.
curl -X POST --header 'Content-Type: application/json' --header 'Accept: application/json' --header 'API-Key: {the api key}' -d '{"landed": true, "request_id": 1}' 'https://api-private.lando.devsvcdev.mozaws.net/landings/1/update'
Status code different than 403 is valid answer.

Comment 3

[Piotr Zalewa [:zalun]]

Could someone with access run the code above on the transplant server, please?

Comment 4

[:glob ✱]

lgtm – i get 403 from the transplant server, and a timeout from home.