kessel-sdk 1.3.0 → 1.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 03c1e365bed3b3630e895a51b7dc31ce2ea261df747b13792b27fee2425b1d92
-  data.tar.gz: 206abbac137b487acdb9d33e30cd0fd597d6bc2a04a7115c718e84a606f17875
+  metadata.gz: 2e2b24045b21b41dc888f7ce2c81efefbb882e7c81b9e747e1587d11bed3882e
+  data.tar.gz: 906ce22a27644bacd76e79a30257d463dd73ae0d46ccf784133adc545979bb4a
 SHA512:
-  metadata.gz: 4ff107f891cfa1b12b71908ca3783b9db9064b0695c29de7790462550148ef2c58c2e5e81e90f5a62d2791da7e446335c898b0fa0f155a39b8e6fe875099db04
-  data.tar.gz: 4e5c268ae1cdcf9db41910b9ccf5ffc812f0e73ce6a8fc5f67e605e4bb54d0edc27f10dc8c3e6f4463f7071f277c077a3b7765d7302b3863888b84ad6349526f
+  metadata.gz: 3a072b07ce4021d603045744b35d68680a53ef492e2bc7839706ca5402ffe024105399a8e5a1b835f22d93e4c3be1029a0331aa05b3a3695e7a457481b1094f8
+  data.tar.gz: 884484eb24a3ce17829bcc370712201bd593770f4a673e914671f47d70582c13dc60e79b9ab80c96804277b3cc8372fa791e5bca4c2aa499a716ee056f835636

data/lib/kessel/rbac/v2.rb

@@ -3,11 +3,17 @@
 require 'net/http'
 require 'uri'
 require 'json'
+require_relative 'v2_helpers'
+require_relative 'v2_http'
+require_relative '../inventory/v1beta2'
 
 module Kessel
   module RBAC
     module V2
+      include Kessel::Inventory::V1beta2
+
       WORKSPACE_ENDPOINT = '/api/rbac/v2/workspaces/'
+      DEFAULT_PAGE_LIMIT = 1000
       Workspace = Struct.new(:id, :name, :type, :description)
 
       def fetch_default_workspace(rbac_base_endpoint, org_id, auth: nil, http_client: nil)
@@ -18,17 +24,35 @@ module Kessel
         fetch_workspace(rbac_base_endpoint, org_id, 'root', auth: auth, http_client: http_client)
       end
 
-      private
-
-      def run_request(uri, org_id, auth, http_client)
-        request = Net::HTTP::Get.new uri
-        request['x-rh-rbac-org-id'] = org_id
-
-        auth&.configure_request(request)
-
-        http_client.request(request)
+      def list_workspaces(inventory, subject, relation, continuation_token = nil)
+        Enumerator.new do |yielder|
+          loop do
+            request = StreamedListObjectsRequest.new(
+              object_type: workspace_type,
+              relation: relation,
+              subject: subject,
+              pagination: RequestPagination.new(
+                limit: DEFAULT_PAGE_LIMIT,
+                continuation_token: continuation_token
+              )
+            )
+
+            has_responses = false
+            streamed_response = inventory.streamed_list_objects(request)
+            streamed_response.each do |response|
+              has_responses = true
+              yielder << response
+
+              continuation_token = response&.pagination&.continuation_token
+            end
+
+            break if !has_responses || !continuation_token
+          end
+        end
       end
 
+      private
+
       def process_response(response, workspace_type)
         unless response.is_a?(Net::HTTPSuccess)
           raise "Error while fetching the workspace of type #{workspace_type}. " \
@@ -70,12 +94,6 @@ module Kessel
         response = run_request(uri, org_id, auth, http_client)
         process_response(response, workspace_type)
       end
-
-      def check_http_client(http_client, uri)
-        return if uri.host == http_client.address && uri.port == http_client.port
-
-        raise 'http client host and port do not match rbac_base_endpoint'
-      end
     end
   end
 end

data/lib/kessel/rbac/v2_helpers.rb

@@ -0,0 +1,64 @@
+# frozen_string_literal: true
+
+module Kessel
+  module RBAC
+    module V2
+      def workspace_type
+        RepresentationType.new(
+          resource_type: 'workspace',
+          reporter_type: 'rbac'
+        )
+      end
+
+      def role_type
+        RepresentationType.new(
+          resource_type: 'role',
+          reporter_type: 'rbac'
+        )
+      end
+
+      def principal_resource(id, domain)
+        ResourceReference.new(
+          resource_type: 'principal',
+          resource_id: "#{domain}/#{id}",
+          reporter: ReporterReference.new(
+            type: 'rbac'
+          )
+        )
+      end
+
+      def role_resource(resource_id)
+        ResourceReference.new(
+          resource_type: 'role',
+          resource_id: resource_id,
+          reporter: ReporterReference.new(
+            type: 'rbac'
+          )
+        )
+      end
+
+      def workspace_resource(resource_id)
+        ResourceReference.new(
+          resource_type: 'workspace',
+          resource_id: resource_id,
+          reporter: ReporterReference.new(
+            type: 'rbac'
+          )
+        )
+      end
+
+      def principal_subject(id, domain)
+        SubjectReference.new(
+          resource: principal_resource(id, domain)
+        )
+      end
+
+      def subject(resource_ref, relation = nil)
+        SubjectReference.new(
+          resource: resource_ref,
+          relation: relation
+        )
+      end
+    end
+  end
+end

data/lib/kessel/rbac/v2_http.rb

@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+
+module Kessel
+  module RBAC
+    module V2
+      private
+
+      def run_request(uri, org_id, auth, http_client)
+        request = Net::HTTP::Get.new uri
+        request['x-rh-rbac-org-id'] = org_id
+
+        auth&.configure_request(request)
+
+        http_client.request(request)
+      end
+
+      def check_http_client(http_client, uri)
+        return if uri.host == http_client.address && uri.port == http_client.port
+
+        raise 'http client host and port do not match rbac_base_endpoint'
+      end
+    end
+  end
+end

data/lib/kessel/version.rb

@@ -2,6 +2,6 @@
 
 module Kessel
   module Inventory
-    VERSION = '1.3.0'
+    VERSION = '1.4.0'
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: kessel-sdk
 version: !ruby/object:Gem::Version
-  version: 1.3.0
+  version: 1.4.0
 platform: ruby
 authors:
 - Project Kessel
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-10-01 00:00:00.000000000 Z
+date: 2025-10-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: grpc
@@ -261,6 +261,8 @@ files:
 - lib/kessel/inventory/v1beta2/subject_reference_pb.rb
 - lib/kessel/inventory/v1beta2/write_visibility_pb.rb
 - lib/kessel/rbac/v2.rb
+- lib/kessel/rbac/v2_helpers.rb
+- lib/kessel/rbac/v2_http.rb
 - lib/kessel/version.rb
 homepage: https://github.com/project-kessel/kessel-sdk-ruby
 licenses: