change: [DPS-35856] Logs: limit access to "lke_audit_logs" type based on capability

packages/api-v4/.changeset/pr-13171-added-1764924231615.md

@@ -0,0 +1,5 @@
+---
+"@linode/api-v4": Added
+---
+
+`Akamai Cloud Pulse Logs LKE-E Audit ` to the `AccountCapability` type ([#13171](https://github.com/linode/manager/pull/13171))

packages/api-v4/src/account/types.ts

@@ -63,6 +63,7 @@ export const accountCapabilities = [
   'Akamai Cloud Load Balancer',
   'Akamai Cloud Pulse',
   'Akamai Cloud Pulse Logs',
+  'Akamai Cloud Pulse Logs LKE-E Audit',
   'Block Storage',
   'Block Storage Encryption',
   'Cloud Firewall',

packages/manager/.changeset/pr-13171-changed-1764924158682.md

@@ -0,0 +1,5 @@
+---
+"@linode/manager": Changed
+---
+
+Logs: in Stream Form limit access to "lke_audit_logs" type based on Akamai Cloud Pulse Logs LKE-E Audit capability ([#13171](https://github.com/linode/manager/pull/13171))

packages/manager/cypress/e2e/core/delivery/create-stream.spec.ts

@@ -1,5 +1,6 @@
 import { streamType } from '@linode/api-v4';
 import { mockDestination } from 'support/constants/delivery';
+import { mockGetAccount } from 'support/intercepts/account';
 import {
   mockCreateDestination,
   mockCreateStream,
@@ -12,9 +13,11 @@ import { ui } from 'support/ui';
 import { logsStreamForm } from 'support/ui/pages/logs-stream-form';
 import { randomLabel } from 'support/util/random';
 
-import { kubernetesClusterFactory } from 'src/factories';
+import { accountFactory, kubernetesClusterFactory } from 'src/factories';
 
 describe('Create Stream', () => {
+  const account = accountFactory.build();
+
   beforeEach(() => {
     mockAppendFeatureFlags({
       aclpLogs: {
@@ -23,6 +26,14 @@ describe('Create Stream', () => {
         bypassAccountCapabilities: true,
       },
     });
+
+    mockGetAccount({
+      ...account,
+      capabilities: [
+        ...account.capabilities,
+        'Akamai Cloud Pulse Logs LKE-E Audit',
+      ],
+    });
   });
 
   describe('given Audit Logs Stream Type', () => {

packages/manager/src/features/Delivery/Streams/StreamForm/StreamFormGeneralInfo.test.tsx

@@ -4,10 +4,23 @@
 import React from 'react';
 import { describe, expect } from 'vitest';
 
+import { accountFactory } from 'src/factories';
 import { renderWithThemeAndHookFormContext } from 'src/utilities/testHelpers';
 
 import { StreamFormGeneralInfo } from './StreamFormGeneralInfo';
 
+const queryMocks = vi.hoisted(() => ({
+  useAccount: vi.fn().mockReturnValue({}),
+}));
+
+vi.mock('@linode/queries', async () => {
+  const actual = await vi.importActual('@linode/queries');
+  return {
+    ...actual,
+    useAccount: queryMocks.useAccount,
+  };
+});
+
 describe('StreamFormGeneralInfo', () => {
   describe('when in create mode', () => {
     it('should render Name input and allow to type text', async () => {
@@ -24,35 +37,77 @@
       });
     });
 
-    it('should render Stream type input and allow to select different options', async () => {
-      renderWithThemeAndHookFormContext({
-        component: <StreamFormGeneralInfo mode="create" />,
-        useFormOptions: {
-          defaultValues: {
-            stream: {
-              type: streamType.AuditLogs,
+    describe('when user has Akamai Cloud Pulse Logs LKE-E Audit capability', () => {
+      it('should render Stream type input and allow to select different options', async () => {
+        const account = accountFactory.build({
+          capabilities: ['Akamai Cloud Pulse Logs LKE-E Audit'],
+        });
+
+        queryMocks.useAccount.mockReturnValue({
+          data: account,
+          isLoading: false,
+          error: null,
+        });
+
+        renderWithThemeAndHookFormContext({
+          component: <StreamFormGeneralInfo mode="create" />,
+          useFormOptions: {
+            defaultValues: {
+              stream: {
+                type: streamType.AuditLogs,
+              },
             },
           },
-        },
-      });
+        });
 
-      const streamTypesAutocomplete = screen.getByRole('combobox');
+        const streamTypesAutocomplete = screen.getByRole('combobox');
 
-      expect(streamTypesAutocomplete).toHaveValue('Audit Logs');
-
-      // Open the dropdown
-      await userEvent.click(streamTypesAutocomplete);
+        expect(streamTypesAutocomplete).toHaveValue('Audit Logs');
 
-      // Select the "Kubernetes API Audit Logs" option
-      const kubernetesApiAuditLogs = await screen.findByText(
-        'Kubernetes API Audit Logs'
-      );
-      await userEvent.click(kubernetesApiAuditLogs);
+        // Open the dropdown
+        await userEvent.click(streamTypesAutocomplete);
 
-      await waitFor(() => {
-        expect(streamTypesAutocomplete).toHaveValue(
+        // Select the "Kubernetes API Audit Logs" option
+        const kubernetesApiAuditLogs = await screen.findByText(
           'Kubernetes API Audit Logs'
         );
+        await userEvent.click(kubernetesApiAuditLogs);
+
+        await waitFor(() => {
+          expect(streamTypesAutocomplete).toHaveValue(
+            'Kubernetes API Audit Logs'
+          );
+        });
+      });
+    });
+
+    describe('when user does not have Akamai Cloud Pulse Logs LKE-E Audit capability', () => {
+      it('should render disabled Stream type input with Audit Logs selected', async () => {
+        const account = accountFactory.build({
+          capabilities: [],
+        });
+
+        queryMocks.useAccount.mockReturnValue({
+          data: account,
+          isLoading: false,
+          error: null,
+        });
+
+        renderWithThemeAndHookFormContext({
+          component: <StreamFormGeneralInfo mode="create" />,
+          useFormOptions: {
+            defaultValues: {
+              stream: {
+                type: streamType.AuditLogs,
+              },
+            },
+          },
+        });
+
+        const streamTypesAutocomplete = screen.getByRole('combobox');
+
+        expect(streamTypesAutocomplete).toBeDisabled();
+        expect(streamTypesAutocomplete).toHaveValue('Audit Logs');
       });
     });
   });

packages/manager/src/features/Delivery/Streams/StreamForm/StreamFormGeneralInfo.tsx

@@ -1,4 +1,5 @@
 import { streamType } from '@linode/api-v4';
+import { useAccount } from '@linode/queries';
 import {
   Autocomplete,
   Box,
@@ -35,6 +36,10 @@ export const StreamFormGeneralInfo = (props: StreamFormGeneralInfoProps) => {
 
   const theme = useTheme();
   const { control, setValue } = useFormContext<StreamAndDestinationFormType>();
+  const { data: account } = useAccount();
+  const isLkeEAuditLogsTypeSelectionDisabled = !account?.capabilities?.includes(
+    'Akamai Cloud Pulse Logs LKE-E Audit'
+  );
 
   const capitalizedMode = capitalize(mode);
   const description = {
@@ -47,8 +52,13 @@ export const StreamFormGeneralInfo = (props: StreamFormGeneralInfoProps) => {
     audit_logs: `Logs Delivery Streams ${capitalizedMode}-Audit Logs`,
     lke_audit_logs: `Logs Delivery Streams ${capitalizedMode}-Kubernetes Audit Logs`,
   };
+
+  const filteredStreamTypeOptions = isLkeEAuditLogsTypeSelectionDisabled
+    ? streamTypeOptions.filter(({ value }) => value !== streamType.LKEAuditLogs)
+    : streamTypeOptions;
+
   const streamTypeOptionsWithPendo: AutocompleteOption[] =
-    streamTypeOptions.map((option) => ({
+    filteredStreamTypeOptions.map((option) => ({
       ...option,
       pendoId: pendoIds[option.value as StreamType],
     }));
@@ -98,7 +108,9 @@ export const StreamFormGeneralInfo = (props: StreamFormGeneralInfoProps) => {
         render={({ field, fieldState }) => (
           <Autocomplete
             disableClearable
-            disabled={isFormInEditMode(mode)}
+            disabled={
+              isFormInEditMode(mode) || isLkeEAuditLogsTypeSelectionDisabled
+            }
             errorText={fieldState.error?.message}
             label="Stream Type"
             onBlur={field.onBlur}