@firestartr/cli 2.11.0-snapshot-objects-in-patches → 2.11.0-snapshot-orgsettings-nullguard-1

package/build/packages/cdk8s_renderer/src/claims/github/orgSecrets.schema.d.ts

@@ -0,0 +1,67 @@
+declare const _default: {
+    $schema: string;
+    $id: string;
+    definitions: {
+        GithubOrgClaimSecrets: {
+            $id: string;
+            type: string;
+            description: string;
+            properties: {
+                actions: {
+                    type: string;
+                    items: {
+                        $ref: string;
+                    };
+                };
+                codespaces: {
+                    type: string;
+                    items: {
+                        $ref: string;
+                    };
+                };
+                dependabot: {
+                    type: string;
+                    items: {
+                        $ref: string;
+                    };
+                };
+            };
+            additionalProperties: boolean;
+        };
+        GithubOrgClaimSecretRef: {
+            $id: string;
+            type: string;
+            description: string;
+            pattern: string;
+        };
+        GithubOrgClaimSecret: {
+            $id: string;
+            type: string;
+            description: string;
+            properties: {
+                name: {
+                    type: string;
+                    description: string;
+                };
+                value: {
+                    $ref: string;
+                };
+                visibility: {
+                    type: string;
+                    enum: string[];
+                    description: string;
+                };
+                selected_repositories: {
+                    type: string;
+                    items: {
+                        type: string;
+                    };
+                    description: string;
+                };
+            };
+            required: string[];
+            additionalProperties: boolean;
+        };
+    };
+};
+export default _default;

package/build/packages/cdk8s_renderer/src/claims/github/orgSettings.d.ts

@@ -35,6 +35,26 @@ export interface IGithubOrgSettingsClaim extends IOrgSettingsClaim {
                 visibility: 'all' | 'private' | 'selected';
                 selected_repositories?: string[];
             }[];
+            org_secrets?: {
+                actions?: {
+                    name: string;
+                    value: string;
+                    visibility?: 'all' | 'private' | 'selected';
+                    selected_repositories?: string[];
+                }[];
+                codespaces?: {
+                    name: string;
+                    value: string;
+                    visibility?: 'all' | 'private' | 'selected';
+                    selected_repositories?: string[];
+                }[];
+                dependabot?: {
+                    name: string;
+                    value: string;
+                    visibility?: 'all' | 'private' | 'selected';
+                    selected_repositories?: string[];
+                }[];
+            };
         };
     };
 }

package/build/packages/cdk8s_renderer/src/claims/github/orgsettings.schema.d.ts

@@ -146,6 +146,30 @@ declare const _default: {
                             }[];
                         };
                     };
+                    org_secrets: {
+                        type: string;
+                        properties: {
+                            actions: {
+                                type: string;
+                                items: {
+                                    $ref: string;
+                                };
+                            };
+                            codespaces: {
+                                type: string;
+                                items: {
+                                    $ref: string;
+                                };
+                            };
+                            dependabot: {
+                                type: string;
+                                items: {
+                                    $ref: string;
+                                };
+                            };
+                        };
+                        additionalProperties: boolean;
+                    };
                 };
                 additionalProperties: boolean;
                 required: string[];

package/build/packages/cdk8s_renderer/src/renderer/claims-render.d.ts

@@ -8,5 +8,5 @@ export declare function renderClaims(catalogScope: Construct, firestartrScope: C
     crs: any;
     renames?: IRenameResult[];
 }): Promise<RenderedCrMap>;
-export declare function renderClaim(catalogScope: Construct, firestartrScope: Construct, claim: any, patches: ICustomResourcePatch[], previousCR?: any | null, claimPath?: string, variableSectionPreviousCR?: any | false, variableSectionPatches?: ICustomResourcePatch[]): Promise<IRenderClaimResult>;
+export declare function renderClaim(catalogScope: Construct, firestartrScope: Construct, claim: any, patches: ICustomResourcePatch[], previousCR?: any | null, claimPath?: string, variableSectionPreviousCR?: any | false, variableSectionPatches?: ICustomResourcePatch[], secretSectionPreviousCR?: any | false, secretSectionPatches?: ICustomResourcePatch[]): Promise<IRenderClaimResult>;
 export declare function renameVariantCrFiles(outputDir: string, renderedMap: RenderedCrMap): void;

package/build/packages/cdk8s_renderer/src/validations/githubOrgSecretSection.d.ts

@@ -0,0 +1,4 @@
+import { RenderClaims, RenderedCrMap } from '../renderer/types';
+export declare function validateGithubOrgSecretSectionSingleton(crs: RenderedCrMap): void;
+export declare function validateSecretNamesUniqueness(crs: RenderedCrMap): void;
+export declare function validateOrgSecretsCrossReferences(renderClaims: RenderClaims): void;

package/build/packages/gh_provisioner/src/entities/ghorgsecretsection/index.d.ts

@@ -0,0 +1,7 @@
+import { Entity } from '../base';
+export declare class EntityGHOrgSecretSection extends Entity {
+    constructor(artifact: any);
+    loadResources(tfOp: string): Promise<void>;
+    postProvision(_tfOp: string): Promise<void>;
+    loadAddressesToImport(): Promise<void>;
+}

package/build/packages/gh_provisioner/src/entities/ghorgsecretsection/secrets.d.ts

@@ -0,0 +1,16 @@
+import type { EntityGHOrgSecretSection } from '.';
+import { type OrgSecretsSection } from 'github';
+export type SecretEntry = {
+    name: string;
+    ref: {
+        kind: string;
+        name: string;
+        key: string;
+    };
+    visibility: string;
+    selectedRepositories?: string[];
+};
+declare const SECTIONS: OrgSecretsSection[];
+export { SECTIONS };
+export declare function provisionOrgSecrets(entity: EntityGHOrgSecretSection, secrets: Record<string, SecretEntry[]>): Promise<void>;
+export declare function adoptSecretsIfNeeded(entity: EntityGHOrgSecretSection, secrets: Record<string, SecretEntry[]>): Promise<void>;

package/build/packages/github/index.d.ts

@@ -2,7 +2,9 @@ import { createCheckRun } from './src/check_run';
 import { upsertMultiPartStickyComments } from './src/sticky_comment';
 import { getOctokitForOrg, getGithubAppToken, getOctokitFromPat } from './src/auth';
 import { encryptRepoSecret, getRepoPublicKey } from './src/encrypt';
+import { getOrgPublicKey, encryptOrgSecret, getOrgSecret } from './src/orgSecrets';
 import type { RepoSecretsSection } from './src/encrypt';
+import type { OrgSecretsSection } from './src/orgSecrets';
 import type { WorkflowCompletionResult, WorkflowDispatchInputs, WorkflowRunConclusion, WorkflowRunStatus, WorkflowRunStatusFilter, WorkflowRunSummary } from './src/workflow';
 import { withProfile } from './src/with_profile';
 import { createProfile } from './src/profile';
@@ -103,10 +105,14 @@ declare const _default: {
     encryption: {
         encryptRepoSecret: typeof encryptRepoSecret;
         getRepoPublicKey: typeof getRepoPublicKey;
+        getOrgPublicKey: typeof getOrgPublicKey;
+        encryptOrgSecret: typeof encryptOrgSecret;
+        getOrgSecret: typeof getOrgSecret;
     };
     withProfile: typeof withProfile;
     createProfile: typeof createProfile;
 };
 export default _default;
-export { RepoSecretsSection, createProfile };
+export { createProfile };
+export type { RepoSecretsSection, OrgSecretsSection };
 export type { WorkflowCompletionResult, WorkflowDispatchInputs, WorkflowRunConclusion, WorkflowRunStatus, WorkflowRunStatusFilter, WorkflowRunSummary, };

package/build/packages/github/src/orgSecrets.d.ts

@@ -0,0 +1,10 @@
+export type OrgSecretsSection = 'actions' | 'dependabot' | 'codespaces';
+export declare function getOrgPublicKey(org: string, section: OrgSecretsSection, octokit?: any): Promise<any>;
+export declare function encryptOrgSecret(org: string, section: OrgSecretsSection, plaintextValue: string, preFetchedKey?: {
+    key_id: string;
+    key: string;
+}, octokit?: any): Promise<{
+    key_id: any;
+    encrypted_value: string;
+}>;
+export declare function getOrgSecret(org: string, section: OrgSecretsSection, name: string, octokit?: any): Promise<any>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@firestartr/cli",
-  "version": "2.11.0-snapshot-objects-in-patches",
+  "version": "2.11.0-snapshot-orgsettings-nullguard-1",
   "private": false,
   "description": "Commandline tool",
   "main": "build/main.js",