[WOR-1296] Azure workspace quota endpoint

openapi/src/parts/azure_landing_zone.yaml

@@ -143,7 +143,10 @@ paths:
     parameters:
       - $ref: '#/components/parameters/LandingZoneId'
     get:
-      summary: List all Azure landing zones resources
+      deprecated: true
+      summary: |
+        List all Azure landing zones resources.
+        Deprecated in favor of the workspace-level landing zone resource endpoint.
       operationId: listAzureLandingZoneResources
       tags: [ LandingZones ]
       responses:
@@ -161,7 +164,10 @@ paths:
       - $ref: '#/components/parameters/LandingZoneId'
       - $ref: '#/components/parameters/AzureResourceId'
     get:
-      summary: Get the quota information of a resource an Azure Landing Zone
+      deprecated: true
+      summary: |
+        Get the quota information of a resource an Azure Landing Zone.
+        Deprecated in favor of the workspace-level landing zone resource endpoint.
       operationId: getResourceQuotaResult
       tags: [ LandingZones ]
       responses:

openapi/src/parts/controlled_azure_resource.yaml

@@ -0,0 +1,35 @@
+paths:
+  /api/workspaces/v1/{workspaceId}/resources/controlled/azure/landingzone:
+    parameters:
+      - $ref: '#/components/parameters/WorkspaceId'
+    get:
+      summary: List all Azure resources in an Azure workspace's backing landing zone.
+      operationId: listWorkspaceAzureLandingZoneResources
+      tags: [ ControlledAzureResource ]
+      responses:
+        '200':
+          description: OK
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/AzureLandingZoneResourcesList'
+        '500':
+          $ref: '#/components/responses/ServerError'
+
+  /api/workspaces/v1/{workspaceId}/resources/controlled/azure/landingzone/quota:
+    parameters:
+      - $ref: '#/components/parameters/WorkspaceId'
+      - $ref: '#/components/parameters/AzureResourceId'
+    get:
+      summary: Get the quota information of a resource in an Azure workspace's backing landing zone.
+      operationId: getWorkspaceAzureLandingZoneResourceQuota
+      tags: [ ControlledAzureResource ]
+      responses:
+        '200':
+          $ref: '#/components/responses/ResourceQuotaResponse'
+        '400':
+          $ref: '#/components/responses/BadRequest'
+        '403':
+          $ref: '#/components/responses/PermissionDenied'
+        '500':
+          $ref: '#/components/responses/ServerError'

service/src/main/java/bio/terra/workspace/app/controller/ControlledAzureResourceApiController.java

@@ -7,6 +7,7 @@
 
 import bio.terra.common.exception.ApiException;
 import bio.terra.common.exception.ValidationException;
+import bio.terra.common.iam.BearerToken;
 import bio.terra.workspace.amalgam.landingzone.azure.LandingZoneApiDispatch;
 import bio.terra.workspace.app.configuration.external.AzureConfiguration;
 import bio.terra.workspace.app.configuration.external.FeatureConfiguration;
@@ -17,6 +18,7 @@
 import bio.terra.workspace.generated.model.ApiAzureDatabaseResource;
 import bio.terra.workspace.generated.model.ApiAzureDiskResource;
 import bio.terra.workspace.generated.model.ApiAzureKubernetesNamespaceResource;
+import bio.terra.workspace.generated.model.ApiAzureLandingZoneResourcesList;
 import bio.terra.workspace.generated.model.ApiAzureManagedIdentityResource;
 import bio.terra.workspace.generated.model.ApiAzureVmCreationParameters;
 import bio.terra.workspace.generated.model.ApiAzureVmResource;
@@ -42,6 +44,7 @@
 import bio.terra.workspace.generated.model.ApiDeleteControlledAzureResourceResult;
 import bio.terra.workspace.generated.model.ApiJobControl;
 import bio.terra.workspace.generated.model.ApiJobReport;
+import bio.terra.workspace.generated.model.ApiResourceQuota;
 import bio.terra.workspace.service.features.FeatureService;
 import bio.terra.workspace.service.iam.AuthenticatedUserRequest;
 import bio.terra.workspace.service.iam.AuthenticatedUserRequestFactory;
@@ -876,4 +879,37 @@ public ResponseEntity<ApiAzureKubernetesNamespaceResource> getAzureKubernetesNam
     jobService.verifyUserAccess(jobId, userRequest, workspaceId);
     return getJobDeleteResult(jobId);
   }
+
+  @Override
+  public ResponseEntity<ApiResourceQuota> getWorkspaceAzureLandingZoneResourceQuota(
+      UUID workspaceId, String azureResourceId) {
+    features.azureEnabledCheck();
+
+    AuthenticatedUserRequest userRequest = getAuthenticatedInfo();
+    var workspace =
+        workspaceService.validateWorkspaceAndAction(
+            userRequest, workspaceId, SamConstants.SamWorkspaceAction.WRITE);
+    var wsmToken = new BearerToken(samService.getWsmServiceAccountToken());
+    var landingZoneId = landingZoneApiDispatch.getLandingZoneId(wsmToken, workspace);
+
+    var result = landingZoneApiDispatch.getResourceQuota(wsmToken, landingZoneId, azureResourceId);
+
+    return new ResponseEntity<>(result, HttpStatus.OK);
+  }
+
+  @Override
+  public ResponseEntity<ApiAzureLandingZoneResourcesList> listWorkspaceAzureLandingZoneResources(
+      UUID workspaceId) {
+    features.azureEnabledCheck();
+
+    AuthenticatedUserRequest userRequest = getAuthenticatedInfo();
+    var workspace =
+        workspaceService.validateWorkspaceAndAction(
+            userRequest, workspaceId, SamConstants.SamWorkspaceAction.WRITE);
+    var wsmToken = new BearerToken(samService.getWsmServiceAccountToken());
+    var landingZoneId = landingZoneApiDispatch.getLandingZoneId(wsmToken, workspace);
+
+    var result = landingZoneApiDispatch.listAzureLandingZoneResources(wsmToken, landingZoneId);
+    return new ResponseEntity<>(result, HttpStatus.OK);
+  }
 }