@firestartr/cli 2.10.0-snapshot-org-secrets-2 → 2.10.0-snapshot-org-secrets-validation-1

package/build/index.js

@@ -327753,6 +327753,21 @@ function toJson_FirestartrGithubOrganizationSecretSectionSpecSecretsActionsRef(o
     // filter undefined values
     return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
 }
+/* eslint-enable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+/**
+ * Which repositories can access the secret.
+ *
+ * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsActionsVisibility
+ */
+var FirestartrGithubOrganizationSecretSectionSpecSecretsActionsVisibility;
+(function (FirestartrGithubOrganizationSecretSectionSpecSecretsActionsVisibility) {
+    /** all */
+    FirestartrGithubOrganizationSecretSectionSpecSecretsActionsVisibility["ALL"] = "all";
+    /** selected */
+    FirestartrGithubOrganizationSecretSectionSpecSecretsActionsVisibility["SELECTED"] = "selected";
+    /** private */
+    FirestartrGithubOrganizationSecretSectionSpecSecretsActionsVisibility["PRIVATE"] = "private";
+})(FirestartrGithubOrganizationSecretSectionSpecSecretsActionsVisibility || (FirestartrGithubOrganizationSecretSectionSpecSecretsActionsVisibility = {}));
 /**
  * Converts an object of type 'FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesRef' to JSON representation.
  */
@@ -327769,6 +327784,21 @@ function toJson_FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesRe
     // filter undefined values
     return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
 }
+/* eslint-enable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+/**
+ * Which repositories can access the secret.
+ *
+ * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesVisibility
+ */
+var FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesVisibility;
+(function (FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesVisibility) {
+    /** all */
+    FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesVisibility["ALL"] = "all";
+    /** selected */
+    FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesVisibility["SELECTED"] = "selected";
+    /** private */
+    FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesVisibility["PRIVATE"] = "private";
+})(FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesVisibility || (FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesVisibility = {}));
 /**
  * Converts an object of type 'FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotRef' to JSON representation.
  */
@@ -327785,6 +327815,21 @@ function toJson_FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotRe
     // filter undefined values
     return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
 }
+/* eslint-enable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+/**
+ * Which repositories can access the secret.
+ *
+ * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotVisibility
+ */
+var FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotVisibility;
+(function (FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotVisibility) {
+    /** all */
+    FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotVisibility["ALL"] = "all";
+    /** selected */
+    FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotVisibility["SELECTED"] = "selected";
+    /** private */
+    FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotVisibility["PRIVATE"] = "private";
+})(FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotVisibility || (FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotVisibility = {}));
 /**
  * Converts an object of type 'FirestartrGithubOrganizationSecretSectionSpecContextBackendRef' to JSON representation.
  */
@@ -327826,20 +327871,6 @@ var FirestartrGithubOrganizationSecretSectionSpecSecretsActionsRefKind;
     /** Secret */
     FirestartrGithubOrganizationSecretSectionSpecSecretsActionsRefKind["SECRET"] = "Secret";
 })(FirestartrGithubOrganizationSecretSectionSpecSecretsActionsRefKind || (FirestartrGithubOrganizationSecretSectionSpecSecretsActionsRefKind = {}));
-/**
- * Which repositories can access the secret.
- *
- * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsActionsVisibility
- */
-var FirestartrGithubOrganizationSecretSectionSpecSecretsActionsVisibility;
-(function (FirestartrGithubOrganizationSecretSectionSpecSecretsActionsVisibility) {
-    /** all */
-    FirestartrGithubOrganizationSecretSectionSpecSecretsActionsVisibility["ALL"] = "all";
-    /** selected */
-    FirestartrGithubOrganizationSecretSectionSpecSecretsActionsVisibility["SELECTED"] = "selected";
-    /** private */
-    FirestartrGithubOrganizationSecretSectionSpecSecretsActionsVisibility["PRIVATE"] = "private";
-})(FirestartrGithubOrganizationSecretSectionSpecSecretsActionsVisibility || (FirestartrGithubOrganizationSecretSectionSpecSecretsActionsVisibility = {}));
 /**
  * The type of Kubernetes resource to reference.
  *
@@ -327850,20 +327881,6 @@ var FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesRefKind;
     /** Secret */
     FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesRefKind["SECRET"] = "Secret";
 })(FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesRefKind || (FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesRefKind = {}));
-/**
- * Which repositories can access the secret.
- *
- * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesVisibility
- */
-var FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesVisibility;
-(function (FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesVisibility) {
-    /** all */
-    FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesVisibility["ALL"] = "all";
-    /** selected */
-    FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesVisibility["SELECTED"] = "selected";
-    /** private */
-    FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesVisibility["PRIVATE"] = "private";
-})(FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesVisibility || (FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesVisibility = {}));
 /**
  * The type of Kubernetes resource to reference.
  *
@@ -327874,20 +327891,6 @@ var FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotRefKind;
     /** Secret */
     FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotRefKind["SECRET"] = "Secret";
 })(FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotRefKind || (FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotRefKind = {}));
-/**
- * Which repositories can access the secret.
- *
- * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotVisibility
- */
-var FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotVisibility;
-(function (FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotVisibility) {
-    /** all */
-    FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotVisibility["ALL"] = "all";
-    /** selected */
-    FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotVisibility["SELECTED"] = "selected";
-    /** private */
-    FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotVisibility["PRIVATE"] = "private";
-})(FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotVisibility || (FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotVisibility = {}));
 /**
  * @schema FirestartrGithubOrganizationSecretSectionSpecContextBackendRefKind
  */
@@ -332476,12 +332479,16 @@ function renameVariantCrFiles(outputDir, renderedMap) {
 
 const IS_COMPONENT_CLAIM_REF = new RegExp(/^ComponentClaim-/);
 const IS_TF_WORKSPACE = new RegExp(/^TFWorkspaceClaim-/);
+const IS_ORG_SETTINGS_CLAIM = new RegExp(/^OrgSettingsClaim-/);
+const COMPONENT_REF_PATTERN = /^component:(.+)$/;
 function validateSubReferences(renderClaims) {
     for (const ref of Object.keys(renderClaims)) {
         if (IS_COMPONENT_CLAIM_REF.test(ref))
             validateClaimsSecretsRefs(ref, renderClaims);
         else if (IS_TF_WORKSPACE.test(ref))
             validateTFClaimsSecretsRefs(ref, renderClaims);
+        else if (IS_ORG_SETTINGS_CLAIM.test(ref))
+            validateOrgSettingsComponentRefs(ref, renderClaims);
     }
 }
 function validateTFClaimsSecretsRefs(ref, renderClaims) {
@@ -332533,6 +332540,57 @@ function searchSecretKey(secretClaim, key) {
     }
     return found;
 }
+function validateOrgSettingsComponentRefs(ref, renderClaims) {
+    const claim = renderClaims[ref].claim;
+    validateOrgSecretsSelectedRepositories(claim, renderClaims);
+    validateActionsVariablesSelectedRepositories(claim, renderClaims);
+}
+function validateOrgSecretsSelectedRepositories(claim, renderClaims) {
+    const orgSecrets = claim?.providers?.github?.org_secrets;
+    if (!orgSecrets || typeof orgSecrets !== 'object')
+        return;
+    for (const section of ['actions', 'codespaces', 'dependabot']) {
+        const secrets = orgSecrets[section];
+        if (!Array.isArray(secrets))
+            continue;
+        for (const secret of secrets) {
+            if (!secret.selected_repositories)
+                continue;
+            for (const repoRef of secret.selected_repositories) {
+                const match = repoRef.match(COMPONENT_REF_PATTERN);
+                if (!match)
+                    continue;
+                const [, componentName] = match;
+                const expectedKey = `ComponentClaim-${componentName}`;
+                if (!renderClaims[expectedKey]) {
+                    throw new Error(`CrossReference error: OrgSettingsClaim/${claim.name} references a non-existent component "${componentName}" in org_secrets.${section}.${secret.name}.selected_repositories`);
+                }
+            }
+        }
+    }
+}
+function validateActionsVariablesSelectedRepositories(claim, renderClaims) {
+    const actionsVariables = claim?.providers?.github?.actions_variables;
+    if (!Array.isArray(actionsVariables))
+        return;
+    for (const variable of actionsVariables) {
+        if (variable.visibility !== 'selected')
+            continue;
+        const selectedRepos = variable.selected_repositories;
+        if (!Array.isArray(selectedRepos) || selectedRepos.length === 0)
+            continue;
+        for (const ref of selectedRepos) {
+            const match = ref.match(COMPONENT_REF_PATTERN);
+            if (!match)
+                continue;
+            const componentName = match[1];
+            const expectedKey = `ComponentClaim-${componentName}`;
+            if (!renderClaims[expectedKey]) {
+                throw new Error(`CrossReference error: OrgSettingsClaim/${claim.name} references a non-existent component "${componentName}" in actions_variables.${variable.name}.selected_repositories`);
+            }
+        }
+    }
+}
 
 ;// CONCATENATED MODULE: ../cdk8s_renderer/src/validations/componentPagesPath.ts
 /**
@@ -332585,7 +332643,6 @@ function validateGithubOrgSettingsSingleton(crs) {
 const GITHUB_ORG_VARIABLE_SECTION_KIND = 'FirestartrGithubOrganizationVariableSection';
 const githubOrgVariableSection_FIRESTARTR_CLAIM_REF_ANNOTATION = 'firestartr.dev/claim-ref';
 const githubOrgVariableSection_CLAIM_REF_LABEL = 'claim-ref';
-const COMPONENT_REF_PATTERN = /^component:(.+)$/;
 function githubOrgVariableSection_formatResourceRef(name, claimRef) {
     return claimRef ? `${name} (claim: ${claimRef})` : name;
 }
@@ -332641,34 +332698,6 @@ function validateActionsVariablesUniqueness(crs) {
         }
     }
 }
-function validateActionsVariablesSelectedRepositories(renderClaims) {
-    for (const claimKey of Object.keys(renderClaims)) {
-        if (!claimKey.startsWith('OrgSettingsClaim-'))
-            continue;
-        const claimData = renderClaims[claimKey];
-        const claim = claimData?.claim;
-        const actionsVariables = claim?.providers?.github?.actions_variables;
-        if (!Array.isArray(actionsVariables))
-            continue;
-        for (const variable of actionsVariables) {
-            if (variable.visibility !== 'selected')
-                continue;
-            const selectedRepos = variable.selected_repositories;
-            if (!Array.isArray(selectedRepos) || selectedRepos.length === 0)
-                continue;
-            for (const ref of selectedRepos) {
-                const match = ref.match(COMPONENT_REF_PATTERN);
-                if (!match)
-                    continue;
-                const componentName = match[1];
-                const expectedKey = `ComponentClaim-${componentName}`;
-                if (!renderClaims[expectedKey]) {
-                    throw new Error(`CrossReference error: OrgSettingsClaim/${claim.name} references a non-existent component "${componentName}" in actions_variables.${variable.name}.selected_repositories`);
-                }
-            }
-        }
-    }
-}
 
 ;// CONCATENATED MODULE: ../cdk8s_renderer/src/validations/githubOrgSecretSection.ts
 const GITHUB_ORG_SECRET_SECTION_KIND = 'FirestartrGithubOrganizationSecretSection';
@@ -332813,7 +332842,6 @@ async function renderer_render(catalogScope, firestartrScope, claimList) {
     try {
         validateSubReferences(data.renderClaims);
         validateComponentPagesPath(data.renderClaims);
-        validateActionsVariablesSelectedRepositories(data.renderClaims);
         validateOrgSecretsCrossReferences(data.renderClaims);
         validateTfStateKeyUniqueness(result);
         validateGithubOrgSettingsSingleton(fullCrSet);
@@ -526232,7 +526260,7 @@ const crsStatusSubcommand = {
 };
 
 ;// CONCATENATED MODULE: ./package.json
-const package_namespaceObject = JSON.parse('{"i8":"2.10.0-snapshot-org-secrets-2"}');
+const package_namespaceObject = JSON.parse('{"i8":"2.10.0-snapshot-org-secrets-validation-1"}');
 ;// CONCATENATED MODULE: ../../package.json
 const package_namespaceObject_1 = {"i8":"2.9.0"};
 // EXTERNAL MODULE: ../../node_modules/semver/index.js

package/build/packages/cdk8s_renderer/imports/firestartr.dev.d.ts

@@ -841,6 +841,19 @@ export interface FirestartrGithubOrganizationSecretSectionSpecSecretsActionsRef
  * Converts an object of type 'FirestartrGithubOrganizationSecretSectionSpecSecretsActionsRef' to JSON representation.
  */
 export declare function toJson_FirestartrGithubOrganizationSecretSectionSpecSecretsActionsRef(obj: FirestartrGithubOrganizationSecretSectionSpecSecretsActionsRef | undefined): Record<string, any> | undefined;
+/**
+ * Which repositories can access the secret.
+ *
+ * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsActionsVisibility
+ */
+export declare enum FirestartrGithubOrganizationSecretSectionSpecSecretsActionsVisibility {
+    /** all */
+    ALL = "all",
+    /** selected */
+    SELECTED = "selected",
+    /** private */
+    PRIVATE = "private"
+}
 /**
  * A reference to the Kubernetes Secret resource that contains the value.
  *
@@ -870,6 +883,19 @@ export interface FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesR
  * Converts an object of type 'FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesRef' to JSON representation.
  */
 export declare function toJson_FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesRef(obj: FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesRef | undefined): Record<string, any> | undefined;
+/**
+ * Which repositories can access the secret.
+ *
+ * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesVisibility
+ */
+export declare enum FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesVisibility {
+    /** all */
+    ALL = "all",
+    /** selected */
+    SELECTED = "selected",
+    /** private */
+    PRIVATE = "private"
+}
 /**
  * A reference to the Kubernetes Secret resource that contains the value.
  *
@@ -899,6 +925,19 @@ export interface FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotR
  * Converts an object of type 'FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotRef' to JSON representation.
  */
 export declare function toJson_FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotRef(obj: FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotRef | undefined): Record<string, any> | undefined;
+/**
+ * Which repositories can access the secret.
+ *
+ * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotVisibility
+ */
+export declare enum FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotVisibility {
+    /** all */
+    ALL = "all",
+    /** selected */
+    SELECTED = "selected",
+    /** private */
+    PRIVATE = "private"
+}
 /**
  * @schema FirestartrGithubOrganizationSecretSectionSpecContextBackendRef
  */
@@ -942,19 +981,6 @@ export declare enum FirestartrGithubOrganizationSecretSectionSpecSecretsActionsR
     /** Secret */
     SECRET = "Secret"
 }
-/**
- * Which repositories can access the secret.
- *
- * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsActionsVisibility
- */
-export declare enum FirestartrGithubOrganizationSecretSectionSpecSecretsActionsVisibility {
-    /** all */
-    ALL = "all",
-    /** selected */
-    SELECTED = "selected",
-    /** private */
-    PRIVATE = "private"
-}
 /**
  * The type of Kubernetes resource to reference.
  *
@@ -964,19 +990,6 @@ export declare enum FirestartrGithubOrganizationSecretSectionSpecSecretsCodespac
     /** Secret */
     SECRET = "Secret"
 }
-/**
- * Which repositories can access the secret.
- *
- * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesVisibility
- */
-export declare enum FirestartrGithubOrganizationSecretSectionSpecSecretsCodespacesVisibility {
-    /** all */
-    ALL = "all",
-    /** selected */
-    SELECTED = "selected",
-    /** private */
-    PRIVATE = "private"
-}
 /**
  * The type of Kubernetes resource to reference.
  *
@@ -986,19 +999,6 @@ export declare enum FirestartrGithubOrganizationSecretSectionSpecSecretsDependab
     /** Secret */
     SECRET = "Secret"
 }
-/**
- * Which repositories can access the secret.
- *
- * @schema FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotVisibility
- */
-export declare enum FirestartrGithubOrganizationSecretSectionSpecSecretsDependabotVisibility {
-    /** all */
-    ALL = "all",
-    /** selected */
-    SELECTED = "selected",
-    /** private */
-    PRIVATE = "private"
-}
 /**
  * @schema FirestartrGithubOrganizationSecretSectionSpecContextBackendRefKind
  */

package/build/packages/cdk8s_renderer/src/validations/githubOrgVariableSection.d.ts

@@ -1,4 +1,3 @@
-import { RenderClaims, RenderedCrMap } from '../renderer/types';
+import { RenderedCrMap } from '../renderer/types';
 export declare function validateGithubOrgVariableSectionSingleton(crs: RenderedCrMap): void;
 export declare function validateActionsVariablesUniqueness(crs: RenderedCrMap): void;
-export declare function validateActionsVariablesSelectedRepositories(renderClaims: RenderClaims): void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@firestartr/cli",
-  "version": "2.10.0-snapshot-org-secrets-2",
+  "version": "2.10.0-snapshot-org-secrets-validation-1",
   "private": false,
   "description": "Commandline tool",
   "main": "build/main.js",