@drunk-pulumi/azure 0.0.37 → 0.0.39

package/AzAd/EnvRoles.js

@@ -1,63 +1,85 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createEnvRoles = exports.getEnvRoleNames = void 0;
-const AzureEnv_1 = require("../Common/AzureEnv");
+exports.getEnvRolesOutput = exports.getEnvRole = exports.createEnvRoles = void 0;
 const Role_1 = require("./Role");
-const AzDevOps_1 = require("./Identities/AzDevOps");
-const Group_1 = require("./Group");
+const pulumi_1 = require("@pulumi/pulumi");
+const Naming_1 = require("../Common/Naming");
+const CustomHelper_1 = require("../KeyVault/CustomHelper");
+const Helper_1 = require("../KeyVault/Helper");
 const envRoleConfig = {
     readOnly: {
-        env: AzureEnv_1.currentEnv,
-        roleName: 'Readonly',
-        appName: 'Azure',
+        roleName: "Readonly",
+        appName: "Azure",
     },
     contributor: {
-        env: AzureEnv_1.currentEnv,
-        roleName: 'Contributor',
-        appName: 'Azure',
+        roleName: "Contributor",
+        appName: "Azure",
     },
     admin: {
-        env: AzureEnv_1.currentEnv,
-        roleName: 'Admin',
-        appName: 'Azure',
+        roleName: "Admin",
+        appName: "Azure",
     },
 };
-const getEnvRoleNames = () => ({
-    readOnly: (0, Role_1.getRoleName)({ ...envRoleConfig.readOnly }),
-    contributor: (0, Role_1.getRoleName)({
-        ...envRoleConfig.contributor,
-    }),
-    admin: (0, Role_1.getRoleName)({ ...envRoleConfig.admin }),
+const getRoleSecretName = (name) => ({
+    objectIdName: (0, Naming_1.getSecretName)(`envRoles-${name}-object-id`),
+    displayName: (0, Naming_1.getSecretName)(`envRoles-${name}-display-name`),
 });
-exports.getEnvRoleNames = getEnvRoleNames;
-const createEnvRoles = ({ addAdoIdentityMember = true, }) => {
-    //Admin
-    const adminGroup = (0, Role_1.default)({
-        ...envRoleConfig.admin,
-        //permissions: [{ roleName: 'Reader', scope: defaultScope }],
+const createEnvRoles = () => {
+    const groups = {};
+    Object.keys(envRoleConfig).forEach((key) => {
+        const config = envRoleConfig[key];
+        const g = (0, Role_1.default)(config);
+        groups[key] = (0, pulumi_1.output)([g.objectId, g.displayName]).apply(([i, d]) => ({
+            objectId: i,
+            displayName: d,
+        }));
     });
-    //Contributor
-    const contributorGroup = (0, Role_1.default)({
-        ...envRoleConfig.contributor,
-        //permissions: [{ roleName: 'Reader', scope: defaultScope }],
-        members: [adminGroup.objectId],
-    });
-    //ReadOnly
-    const readOnlyGroup = (0, Role_1.default)({
-        ...envRoleConfig.readOnly,
-        //permissions: [{ roleName: 'Reader', scope: defaultScope }],
-        members: [contributorGroup.objectId],
-    });
-    if (addAdoIdentityMember) {
-        //Add Global ADO Identity as Admin
-        const ado = (0, AzDevOps_1.getAdoIdentity)();
-        (0, Group_1.addMemberToGroup)({
-            name: 'ado-admin-role',
-            groupObjectId: adminGroup.objectId,
-            objectId: ado.principal.objectId,
+    const addRolesToVault = (vaultInfo) => {
+        Object.keys(groups).forEach((key) => {
+            const role = groups[key];
+            //Add to Key Vault
+            const secretNames = getRoleSecretName(key);
+            (0, CustomHelper_1.addCustomSecret)({
+                name: secretNames.objectIdName,
+                value: role.objectId,
+                contentType: secretNames.objectIdName,
+                vaultInfo,
+            });
+            (0, CustomHelper_1.addCustomSecret)({
+                name: secretNames.displayName,
+                value: role.displayName,
+                contentType: secretNames.displayName,
+                vaultInfo,
+            });
         });
-    }
-    return { adminGroup, contributorGroup, readOnlyGroup };
+    };
+    return {
+        ...groups,
+        addRolesToVault,
+    };
 };
 exports.createEnvRoles = createEnvRoles;
-//# sourceMappingURL=data:application/json;base64,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
+/** Get Single Env Role Object */
+const getEnvRole = async (name, vaultInfo) => {
+    const secretNames = getRoleSecretName(name);
+    console.log(`getEnvRole:`, secretNames);
+    const [objectId, displayName] = await Promise.all([
+        (0, Helper_1.getSecret)({ name: secretNames.objectIdName, vaultInfo }),
+        (0, Helper_1.getSecret)({ name: secretNames.displayName, vaultInfo }),
+    ]);
+    return {
+        displayName: displayName?.value,
+        objectId: objectId?.value,
+    };
+};
+exports.getEnvRole = getEnvRole;
+/** Get All Env Role Objects */
+const getEnvRolesOutput = (vaultInfo) => {
+    const rs = {};
+    Object.keys(envRoleConfig).forEach((key) => {
+        rs[key] = (0, pulumi_1.output)((0, exports.getEnvRole)(key, vaultInfo));
+    });
+    return rs;
+};
+exports.getEnvRolesOutput = getEnvRolesOutput;
+//# sourceMappingURL=data:application/json;base64,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

package/AzAd/GraphDefinition.d.ts

@@ -1,10 +1,10 @@
 type RoleProps = {
     name: string;
-    type: 'Scope' | 'Role';
+    type: "Scope" | "Role";
 };
 type RoleResultProps = {
     id: string;
-    type: 'Scope' | 'Role';
+    type: "Scope" | "Role";
 };
 type PermissionProps = {
     resourceAppId: string;