Skip to content

Commit

Permalink
Merge branch 'main' into update-api
Browse files Browse the repository at this point in the history
  • Loading branch information
gannaraputeja authored Dec 26, 2024
2 parents a7b8324 + afd78da commit 390013b
Show file tree
Hide file tree
Showing 110 changed files with 2,288 additions and 585 deletions.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added docs/assets/cloudflare/Wrangler_consentform.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified docs/assets/testruns-step-2.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified docs/assets/testruns-step-3.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified docs/assets/testruns-step-4.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified docs/assets/testruns-step-5.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added docs/assets/testruns-step-6.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
1 change: 1 addition & 0 deletions docs/guides/api-observability.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
---
sidebar_position: 1
description: Explore Levo.ai's frictionless API observability guide. Auto-discover and document all your APIs seamlessly while preserving privacy.
---

# Frictionless API Observability
Expand Down
1 change: 1 addition & 0 deletions docs/guides/general/general.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
---
sidebar_position: 1
description: Discover general tasks for using Levo.ai. Follow our guides on OS compatibility, private registry setup, and supported platforms for optimal performance.
---

This section describes tasks that are common when using Levo.
Expand Down
56 changes: 10 additions & 46 deletions docs/guides/general/private-registry.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
---
sidebar_position: 2
title: "Secure & Organize APIs: Leverage a Private Registry"
---

# Use a Private Docker Registry for Kubernetes Installations
Expand All @@ -25,18 +26,17 @@ region="us-west-2"
registry="your.registry"

helm repo add levoai https://charts.levo.ai || true
helm repo update
helm repo update levoai
images=($(helm template levoai/levoai-satellite | yq -N '..|.image? | select(.)' | sort -u))
images+=($(helm template levoai/levoai-ebpf-sensor | yq -N '..|.image? | select(.)' | sort -u))

for image in "${images[@]}"; do
echo "Pushing $image to $registry"
docker pull "$image"
image_name=levoai/${image##*/}
repo_name=${image_name%:*}
src_image=${image#"docker.io/"}
dest_image="$registry/$src_image"
repo_name=${src_image%:*}
aws ecr describe-repositories --repository-names $repo_name --region $region || aws ecr create-repository --repository-name $repo_name --region $region
docker tag "$image" "$registry/$image_name"
docker push "$registry/$image_name"
echo "Copying $src_image to $dest_image"
docker buildx imagetools create --tag $dest_image $src_image
done
```

Expand All @@ -55,7 +55,6 @@ kubectl create secret docker-registry ecr-auth --docker-server=your.registry --d
```yaml
sensor:
imageRepo: your.registry/levoai/ebpf_sensor
imageTag: 0.30.1
```
### Satellite
Expand All @@ -65,43 +64,8 @@ global:
levoai_config_override:
onprem-api:
org-id: <id>
refresh-token:
busyboxImage: your.registry/levoai/busybox

levoai-collector:
image: your.registry/levoai/collector
imageTag: 0.17.2
refresh-token: <token>
imageRegistry: your.registry
imagePullSecrets:
- name: ecr-auth

levoai-ion:
image:
repository: your.registry/levoai/ion
tag: 0.6.0
imagePullSecrets:
- name: ecr-auth

rabbitmq:
metrics:
enabled: true
image:
registry: your.registry
repository: levoai/rabbitmq
tag: 3.12.8-debian-11-r1
pullSecrets:
- ecr-auth

satellite:
image:
repository: your.registry/levoai/satellite
tag: 0.2.462
imagePullSecrets:
- name: ecr-auth

tagger:
image:
repository: your.registry/levoai/satellite
tag: 0.2.462
imagePullSecrets:
- name: ecr-auth
```
```
1 change: 1 addition & 0 deletions docs/guides/key-concepts.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
---
sidebar_position: 0
keywords: [API Security, eBPF, API Observability]
description: Understand key concepts in Levo.ai's API observability. Learn about sensors, satellites, and API catalog creation for effective API management and security.
---

# Key Concepts
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
---
sidebar_position: 2
title: API Role-Based Access Control Testing Guide
---

# Associating RBAC Information Using Pattern Matching (Glob)
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
---
sidebar_position: 0
title: "API Security Testing: AuthN & AuthZ Best Practices"
---

# Providing Authentication / Authorization for Tests
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
---
sidebar_position: 3
title: "Levo.ai Guide: Testing API Authorization Controls"
---

# Providing Authorization Information for Authorization Abuse Tests
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
---
sidebar_position: 4
title: "Stop Unauthorized Access: Secure APIs with Horizontal AuthZ"
---

# Providing Authorization Information for `Horizontal Authorization Abuse` Test Cases
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
---
sidebar_position: 6
title: "Prevent Data Leaks & Access Issues: Test Both AuthZ Types"
---

# Providing Authorization Information for Test Plans - `Horizontal & Vertical Authorization Abuse` Test Cases
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
---
sidebar_position: 5
title: "Secure Your APIs: Implement Robust Vertical AuthZ Testing"
---

# Providing Authorization Information for `Vertical Authorization Abuse` Test Cases
Expand Down
2 changes: 2 additions & 0 deletions docs/guides/security-testing/common-tasks/common-tasks.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
---
sidebar_position: 1
description: Discover common tasks in Levo.ai's security testing. Learn about API authentication, RBAC info, and running test plans with our comprehensive guide.
title: Common Security Testing Tasks | Levo.ai Documentation
---

# Common Tasks
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
---
sidebar_position: 2
title: "Effortless API Security Testing: Run Zero-Conf Test Plans"
---

# How do I run a Zero Configuration Test Plan?
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
---
sidebar_position: 1
title: "API Security Testing Tutorial: CRAPI Sample Application"
---

# Evaluate Levo using the sample application `crAPI`
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
---
sidebar_position: 2
title: "Levo.ai: Automate API Schema Conformance Testing"
---

# Using your own app to evaluate Levo's schema conformance testing
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
---
sidebar_position: 1
title: "Levo.ai Guide: Choosing Tools for API Security Testing"
---

# Automatically test APIs for security vulnerabilities
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
---
sidebar_position: 5
title: Configure env.yml for Data-Driven Security Testing
---

# Configure `environment.yml`
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
---
sidebar_position: 6
description: Execute your test plan with Levo.ai. Follow our guide to use Levo CLI for testing live API endpoints and view detailed results to ensure robust security.
title: Execute Data-Driven Test Plan | Levo.ai Documentation
---

# Execute Test Plan
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
---
sidebar_position: 3
description: Generate a security test plan for your app. Follow our zero-configuration guide for comprehensive API security testing and ensure robust protection.
title: Generate Data-Driven Test Plan | Levo.ai Documentation
---


Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
---
sidebar_position: 2
description: "Secure Your APIs: Import Specs, Bypass Authorization & Test with Levo. Auto-gen or upload, Levo simplifies API security testing."
title: Import APIs for Data-Driven Testing | Levo.ai Documentation
---


Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
---
sidebar_position: 4
title: Configure env.yml for Zero-Config Testing | Levo.ai
---

# Configure `environment.yml`
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
---
sidebar_position: 5
title: Execute Zero-Config Test Plan | Levo.ai Documentation
---

# Execute Test Plan
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
---
sidebar_position: 3
description: Generate a security test plan for your app. Follow our zero-configuration guide for comprehensive API security testing and ensure robust protection.
title: Auto Generate Test Plan | Levo.ai Documentation
---


Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
---
sidebar_position: 2
description: "Secure Your APIs: Import Specs, Bypass Authorization & Test with Levo. Auto-gen or upload, Levo simplifies API security testing."
title: Import APIs for Zero-Config Testing | Levo.ai Documentation
---


Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
---
sidebar_position: 1
title: "API Security Testing: DIY Guide for Your Apps"
---

# How do I use Levo with my own applications?
Expand Down
16 changes: 5 additions & 11 deletions docs/install-api-portal.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -55,14 +55,11 @@ By leveraging Levo's API Portal, developers can gain deep insights into their AP

```bash
docker run --rm --name=levoai-api-portal \
-e REFRESH_TOKEN='<REFRESH_TOKEN>' -e APP_NAME='<APP_NAME>' \
-e ENV_NAME='<ENV_NAME>' -e LEVO_ORG_ID='<LEVO_ORG_ID>' \
-p 8000:80 levoai/api-portal:latest
-e REFRESH_TOKEN='<REFRESH_TOKEN>' -e LEVO_ORG_ID='<LEVO_ORG_ID>' \
-p 8080:8080 levoai/api-portal:latest
```


> ##### **_NOTE:_**
> ##### * Default `ENV_NAME` environment value is `staging`.
> ##### * If user is part of multiple orgs, you would have to add `-e LEVO_ORG_ID='<LEVO_ORG_ID>` otherwise optional.
> ##### * If you are running for an app from Levo's India Saas instance, add this environment variable `-e LEVO_BASE_URL='https://api.india-1.levo.ai'`.
Expand All @@ -80,30 +77,27 @@ docker run --rm --name=levoai-api-portal \
- Add Levo Helm repo

```bash
helm repo add levoai https://levoai.github.io/helm-charts/
helm repo add levoai https://charts.levo.ai && helm repo update levoai
```

- Run following command to install the API Portal Helm Chart

```bash
helm install levoai-api-portal levoai/levoai-api-portal \
--set levoAuthKey="your_auth_key" \
--set levoAppName="your_app_name" \
--set levoEnvName="your_env_name" \
--set levoOrgId="your_org_id"
```

> ##### **_NOTE:_**
> ##### * Default `ENV_NAME` environment value is `staging`.
> ##### * If user is part of multiple orgs, you would have to add `-e LEVO_ORG_ID='<LEVO_ORG_ID>'` otherwise optional.
> ##### * If you are running for an app from Levo's India Saas instance, add this environment variable `-e LEVO_BASE_URL='https://api.india-1.levo.ai'`.
<br/>

- Port forward and navigate to `http://localhost:8000` to view the API docs.
- Port forward and navigate to `http://localhost:8000` to view the API docs or setup LoadBalancer as per your requirements.

```bash
kubectl port-forward services/levoai-api-portal 8000:80
kubectl port-forward services/levoai-api-portal 8080:80
```

### Install via Terraform
Expand Down
1 change: 1 addition & 0 deletions docs/install-code-analysis-tools.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
---
sidebar_position: 6
description: Install Levo.ai code analysis tools with our comprehensive guide. Enhance your API security with easy setup and detailed instructions.
---

# Install Code Analysis Tools
Expand Down
70 changes: 0 additions & 70 deletions docs/install-log-parsing-sensors.md

This file was deleted.

4 changes: 4 additions & 0 deletions docs/install-log-parsing-sensors/_category_.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
{
"label": "Install Log Parsing Sensors",
"position": 5
}
Loading

0 comments on commit 390013b

Please sign in to comment.