@drunk-pulumi/azure 0.0.19

package/AzAd/RoleAssignment.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.roleAssignment = exports.getRoleDefinitionByName = void 0;
+const native = require("@pulumi/azure-native");
+const AzureEnv_1 = require("../Common/AzureEnv");
+const RolesBuiltIn_1 = require("./RolesBuiltIn");
+// interface AzureRestResult<T> {
+//   value: Array<T>;
+// }
+//
+// type RoleDefinitionProps = {
+//   name: string;
+//   id: string;
+//   type: string;
+//   properties: {
+//     roleName: string;
+//     type: 'BuiltInRole';
+//     description: string;
+//   };
+// };
+/** The result must be single item if not will return undefined. */
+const getRoleDefinitionByName = ({ roleName }) => {
+    const role = RolesBuiltIn_1.default.find((r) => r.properties.roleName === roleName);
+    if (role)
+        return role;
+    throw new Error(`The role ${roleName} is not found.`);
+    // const axios = createAxios();
+    // const url = `/providers/Microsoft.Authorization/roleDefinitions?$filter=roleName eq '${roleName}'&api-version=2018-01-01-preview`;
+    //
+    // const rs = await axios
+    //   .get<AzureRestResult<RoleDefinitionProps>>(url)
+    //   .then((rs) => rs.data.value);
+    //
+    // if (rs.length <= 0) throw new Error(`Role ${roleName} not found`);
+    // return rs[0];
+};
+exports.getRoleDefinitionByName = getRoleDefinitionByName;
+const roleAssignment = ({ name, roleName, scope = AzureEnv_1.defaultScope, principalId, principalType, dependsOn, }) => {
+    const role = (0, exports.getRoleDefinitionByName)({ roleName });
+    return new native.authorization.RoleAssignment(`${name}-${roleName.split(' ').join('')}`, {
+        principalId,
+        principalType,
+        roleDefinitionId: role.id,
+        scope,
+    }, { dependsOn });
+};
+exports.roleAssignment = roleAssignment;
+//# sourceMappingURL=data:application/json;base64,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

package/AzAd/RolesBuiltIn.d.ts

@@ -0,0 +1,62 @@
+declare const _default: ({
+    properties: {
+        roleName: string;
+        type: string;
+        description: string;
+        assignableScopes: string[];
+        permissions: {
+            actions: string[];
+            notActions: never[];
+            dataActions: never[];
+            notDataActions: never[];
+        }[];
+        createdOn: string;
+        updatedOn: string;
+        createdBy: null;
+        updatedBy: string;
+    };
+    id: string;
+    type: string;
+    name: string;
+} | {
+    properties: {
+        roleName: string;
+        type: string;
+        description: string;
+        assignableScopes: string[];
+        permissions: {
+            actions: string[];
+            notActions: never[];
+            dataActions: string[];
+            notDataActions: string[];
+        }[];
+        createdOn: string;
+        updatedOn: string;
+        createdBy: null;
+        updatedBy: null;
+    };
+    id: string;
+    type: string;
+    name: string;
+} | {
+    properties: {
+        roleName: string;
+        type: string;
+        description: string;
+        assignableScopes: string[];
+        permissions: {
+            actions: string[];
+            notActions: string[];
+            dataActions: string[];
+            notDataActions: never[];
+        }[];
+        createdOn: string;
+        updatedOn: string;
+        createdBy: null;
+        updatedBy: null;
+    };
+    id: string;
+    type: string;
+    name: string;
+})[];
+export default _default;