DinoPark Fence (protecting Dinos since 2019)

DinoPark Fence is the main API for profile interaction for people.mozilla.org

Provided Endpoints

• /api/v4/graphql
  • the main API for individual profile interactions
  • graphql schema used from CIS profile
  • retrieve data according to scope
  • modify fields owned by the mozilliansorg publisher
• /api/v4/search/simple/?q=<query>&w=<all|staff|contributors>
  • search for profiles via DinoPark Search according to scope
• /api/v4/orgchart/
  • forward requests to the orgchart service DinoPark Tree (requires staff scope)
• /_/login and /_/logout
  • session manager (un)setting the kli (keep logged in) cookie and redirecting to our OIDC proxy
• /metrics
  • preliminary prometheus endpoint

Read the DinoPark Introduction and Rust usage for more information.

Deploying

This application must be manually deployed, until we migrate our builds to GitHub Actions.

To deploy to the development and staging clusters, run:

AWS_PROFILE=iam-admin aws codebuild start-build \
    --project-name dino-park-fence \
    --environment-variables-override 'name=MANUAL_DEPLOY_TRIGGER,value=branch/master'

To deploy to the production environment, first cut a release (or tag) in the form:

<MAJOR>.<MINOR>.<PATCH>-prod

Then run:

AWS_PROFILE=iam-admin aws codebuild start-build \
    --project-name dino-park-fence \
    --environment-variables-override 'name=MANUAL_DEPLOY_TRIGGER,value=tag/<MAJOR>.<MINOR>.<PATCH>-prod'