chore: split sparkle policies into separate file

1 files changed, 22 insertions, 0 deletions

diff --git a/etc/authzd/policy1.cedar b/etc/authzd/policy1.cedar
new file mode 100644
index 00000000..507ef3ed
--- /dev/null
+++ b/etc/authzd/policy1.cedar
@@ -0,0 +1,22 @@
+permit (principal, action, resource)
+when
+{
+  context has host &&
+  context has method &&
+  context has path &&
+  (
+    (
+      context.host == "sparkle.runway.gitlab.net" ||
+      context.host == "sparkle.staging.runway.gitlab.net" ||
+      context.host like "localhost:*"
+    ) && (
+      (
+      context.method == "GET" &&
+     (context.path == "/" ||
+      context.path == "/callback" ||
+      context.path == "/dashboard/nav" ||
+      context.path == "/health" ||
+      context.path == "/signout" ||
+      context.path == "/sparkles")) ||
+    (context.method == "POST" && (context.path == "/sparkles/restore"))))
+};