feat: make provision endpoints public

Author: henninge

docs/deployment/provision/provider.mdx

@@ -129,10 +129,10 @@ The high-level provisioning mechanism:
 
 Provider configurations can be updated dynamically by changing the YAML files in the `KEEP_PROVIDERS_DIRECTORY` directory.
 
-Provider provisioning is done on every restart. It can also be triggered without a restart via the `/providers/provision` endpoint of the API. The user needs `write` permissions on providers.
+Provider provisioning is done on every restart. It can also be triggered without a restart via the `/providers/provision` endpoint of the API.
 
 ```
-curl -XPOST -u user:password http://localhost:8080/providers/provision
+curl -XPOST http://localhost:8080/providers/provision
 ```
 
 Keep reads the YAML files in the `KEEP_PROVIDERS_DIRECTORY` directory and determines which providers need to be added or removed.

docs/deployment/provision/workflow.mdx

@@ -24,10 +24,10 @@ Example directory structure:
 
 You can efficiently add new workflows, remove existing ones, or modify their configurations by simply updating the workflow files in the `KEEP_WORKFLOWS_DIRECTORY`. This process allows for flexible management of workflows without requiring manual intervention.
 
-Workflow provisioning is done on every restart. It can also be triggered without a restart via the `/workflows/provision` endpoint of the API. The user needs `write` permissions on workflows.
+Workflow provisioning is done on every restart. It can also be triggered without a restart via the `/workflows/provision` endpoint of the API.
 
 ```
-curl -XPOST -u user:password http://localhost:8080/workflows/provision
+curl -XPOST http://localhost:8080/workflows/provision
 ```
 
 Keep reads the `KEEP_WORKFLOWS_DIRECTORY` environment variable and determines which workflows need to be added, removed, or updated.

docs/openapi.json

@@ -15,6 +15,7 @@
 
 from keep.api.core.config import config
 from keep.api.core.db import count_alerts, get_provider_distribution, get_session
+from keep.api.core.dependencies import SINGLE_TENANT_UUID
 from keep.api.core.limiter import limiter
 from keep.api.models.db.provider import Provider
 from keep.api.models.provider import Provider as ProviderDTO
@@ -66,14 +67,9 @@ def _is_localhost():
 
 
 @router.post("/provision", description="Provision providers from file or directory")
-def provision_providers(
-    authenticated_entity: AuthenticatedEntity = Depends(
-        IdentityManagerFactory.get_auth_verifier(["write:providers"])
-    ),
-):
-    tenant_id = authenticated_entity.tenant_id
-    logger.info("Reloading provisioned providers", extra={"tenant_id": tenant_id})
-    ProvidersService.provision_providers(tenant_id)
+def provision_providers():
+    logger.info("Reloading provisioned providers")
+    ProvidersService.provision_providers(SINGLE_TENANT_UUID)
     return {
         "provision": "done",
         "is_localhost": _is_localhost(),

keep/api/routes/providers.py

@@ -33,6 +33,7 @@
     update_workflow_by_id as update_workflow_by_id_db,
 )
 from keep.api.core.db import get_workflow_executions as get_workflow_executions_db
+from keep.api.core.dependencies import SINGLE_TENANT_UUID
 from keep.api.core.workflows import (
     get_workflow_facets,
     get_workflow_facets_data,
@@ -75,14 +76,9 @@
 
 
 @router.post("/provision", description="Provision workflows from a directory")
-def provision_providers(
-    authenticated_entity: AuthenticatedEntity = Depends(
-        IdentityManagerFactory.get_auth_verifier(["write:workflows"])
-    ),
-):
-    tenant_id = authenticated_entity.tenant_id
-    logger.info("Reloading provisioned workfflows", extra={"tenant_id": tenant_id})
-    WorkflowStore.provision_workflows(tenant_id)
+def provision_providers():
+    logger.info("Reloading provisioned workfflows")
+    WorkflowStore.provision_workflows(SINGLE_TENANT_UUID)
     return {
             "provision": "done",
     }