@drunk-pulumi/azure-components 0.0.6

package/azAd/helpers/index.d.ts

@@ -0,0 +1,3 @@
+export * from './rsRoleDefinition';
+import { ResourceInputs } from '../../types';
+export declare const createAzureDevOpsAppRegistration: (name: string, vaultInfo: ResourceInputs) => void;

package/azAd/helpers/index.js

@@ -0,0 +1,39 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAzureDevOpsAppRegistration = void 0;
+__exportStar(require("./rsRoleDefinition"), exports);
+const AppRegistration_1 = require("../AppRegistration");
+const graphBuiltIn_1 = require("./graphBuiltIn");
+const RoleAssignment_1 = require("../RoleAssignment");
+const helpers_1 = require("../../helpers");
+const createAzureDevOpsAppRegistration = (name, vaultInfo) => {
+    const graphAccess = (0, graphBuiltIn_1.getGraphPermissions)({ name: 'User.Read', type: 'Scope' });
+    const identity = new AppRegistration_1.AppRegistration(name, {
+        appType: 'native',
+        servicePrincipal: { enabled: true },
+        requiredResourceAccesses: [graphAccess],
+        vaultInfo,
+    });
+    new RoleAssignment_1.RoleAssignment(name, {
+        principalId: identity.servicePrincipalId,
+        principalType: 'ServicePrincipal',
+        roleName: 'Owner',
+        scope: helpers_1.azureEnv.defaultSubScope,
+    }, { dependsOn: identity, parent: this });
+};
+exports.createAzureDevOpsAppRegistration = createAzureDevOpsAppRegistration;
+//# sourceMappingURL=data:application/json;base64,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

package/azAd/helpers/rolesBuiltIn.d.ts

@@ -0,0 +1,90 @@
+export declare function getRoleDefinitionByName(name: string): {
+    properties: {
+        roleName: string;
+        type: string;
+        description: string;
+        assignableScopes: string[];
+        permissions: {
+            actions: string[];
+            notActions: never[];
+            dataActions: never[];
+            notDataActions: never[];
+        }[];
+        createdOn: string;
+        updatedOn: string;
+        createdBy: null;
+        updatedBy: string;
+    };
+    id: string;
+    type: string;
+    name: string;
+} | {
+    properties: {
+        roleName: string;
+        type: string;
+        description: string;
+        assignableScopes: string[];
+        permissions: {
+            actions: string[];
+            notActions: never[];
+            dataActions: string[];
+            notDataActions: string[];
+        }[];
+        createdOn: string;
+        updatedOn: string;
+        createdBy: null;
+        updatedBy: null;
+    };
+    id: string;
+    type: string;
+    name: string;
+} | {
+    properties: {
+        roleName: string;
+        type: string;
+        description: string;
+        assignableScopes: string[];
+        permissions: {
+            actions: string[];
+            notActions: string[];
+            dataActions: string[];
+            notDataActions: never[];
+        }[];
+        createdOn: string;
+        updatedOn: string;
+        createdBy: null;
+        updatedBy: null;
+    };
+    id: string;
+    type: string;
+    name: string;
+} | {
+    properties: {
+        roleName: string;
+        type: string;
+        description: string;
+        assignableScopes: string[];
+        permissions: ({
+            actions: string[];
+            notActions: never[];
+            dataActions: never[];
+            notDataActions: never[];
+            conditionVersion?: undefined;
+            condition?: undefined;
+        } | {
+            actions: string[];
+            notActions: never[];
+            dataActions: never[];
+            notDataActions: never[];
+            conditionVersion: string;
+            condition: string;
+        })[];
+        createdOn: string;
+        updatedOn: string;
+        createdBy: null;
+        updatedBy: null;
+    };
+    id: string;
+    type: string;
+    name: string;
+};