@firestartr/cli 2.9.0 → 2.10.0-snapshot-org-secrets-2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -3,3 +3,5 @@ export { GithubMembershipChart } from './membershipChart';
3
3
  export { GithubRepositoryChart } from './repositoryChart';
4
4
  export { GithubOrgWebhookChart } from './orgWebhookChart';
5
5
  export { GithubOrgSettingsChart } from './orgSettingsChart';
6
+ export { GithubOrgVariableSectionChart } from './orgVariableSectionChart';
7
+ export { GithubOrgSecretSectionChart } from './orgSecretSectionChart';
@@ -0,0 +1,8 @@
1
+ import { FirestartrGithubOrganizationSecretSection, FirestartrGithubOrganizationSecretSectionProps } from '../../../imports/firestartr.dev';
2
+ import { IUnitializedStateKey } from '../../claims/base';
3
+ import { BaseGithubChart } from './base';
4
+ export declare class GithubOrgSecretSectionChart extends BaseGithubChart {
5
+ template(): FirestartrGithubOrganizationSecretSectionProps | IUnitializedStateKey;
6
+ gvk(): import("cdk8s").GroupVersionKind;
7
+ instanceApiObject(template: any): FirestartrGithubOrganizationSecretSection;
8
+ }
@@ -0,0 +1,8 @@
1
+ import { FirestartrGithubOrganizationVariableSection, FirestartrGithubOrganizationVariableSectionProps } from '../../../imports/firestartr.dev';
2
+ import { IUnitializedStateKey } from '../../claims/base';
3
+ import { BaseGithubChart } from './base';
4
+ export declare class GithubOrgVariableSectionChart extends BaseGithubChart {
5
+ template(): FirestartrGithubOrganizationVariableSectionProps | IUnitializedStateKey;
6
+ gvk(): import("cdk8s").GroupVersionKind;
7
+ instanceApiObject(template: any): FirestartrGithubOrganizationVariableSection;
8
+ }
@@ -1,4 +1,4 @@
1
- import { GithubGroupChart, GithubMembershipChart, GithubRepositoryChart, GithubOrgWebhookChart, GithubOrgSettingsChart } from './github';
1
+ import { GithubGroupChart, GithubMembershipChart, GithubRepositoryChart, GithubOrgWebhookChart, GithubOrgSettingsChart, GithubOrgVariableSectionChart, GithubOrgSecretSectionChart } from './github';
2
2
  import { CatalogComponentChart, CatalogDomainChart, CatalogGroupChart, CatalogSystemChart, CatalogUserChart, CatalogTFWorkspaceChart, CatalogArgoDeployChart, CatalogSecretsChart, CatalogOrgWebhookChart, CatalogApiChart } from './catalog';
3
3
  import { TFWorkspaceChart } from './workspaces/tfworkspaceChart';
4
4
  import { ArgoDeployChart } from './argocd/argodeployChart';
@@ -22,5 +22,7 @@ declare const _default: {
22
22
  SecretsChart: typeof SecretsChart;
23
23
  GithubOrgWebhookChart: typeof GithubOrgWebhookChart;
24
24
  GithubOrgSettingsChart: typeof GithubOrgSettingsChart;
25
+ GithubOrgVariableSectionChart: typeof GithubOrgVariableSectionChart;
26
+ GithubOrgSecretSectionChart: typeof GithubOrgSecretSectionChart;
25
27
  };
26
28
  export default _default;
@@ -974,6 +974,76 @@ declare const schemas: {
974
974
  secret_scanning_push_protection_enabled_for_new_repositories: {
975
975
  type: string;
976
976
  };
977
+ actions_variables: {
978
+ type: string;
979
+ items: {
980
+ type: string;
981
+ properties: {
982
+ name: {
983
+ type: string;
984
+ pattern: string;
985
+ };
986
+ value: {
987
+ type: string;
988
+ };
989
+ visibility: {
990
+ type: string;
991
+ enum: string[];
992
+ };
993
+ selected_repositories: {
994
+ type: string;
995
+ items: {
996
+ $ref: string;
997
+ };
998
+ };
999
+ };
1000
+ required: string[];
1001
+ additionalProperties: boolean;
1002
+ allOf: {
1003
+ if: {
1004
+ properties: {
1005
+ visibility: {
1006
+ const: string;
1007
+ };
1008
+ };
1009
+ required: string[];
1010
+ };
1011
+ then: {};
1012
+ else: {
1013
+ properties: {
1014
+ selected_repositories: {
1015
+ type: string;
1016
+ maxItems: number;
1017
+ };
1018
+ };
1019
+ };
1020
+ }[];
1021
+ };
1022
+ };
1023
+ org_secrets: {
1024
+ type: string;
1025
+ properties: {
1026
+ actions: {
1027
+ type: string;
1028
+ items: {
1029
+ $ref: string;
1030
+ };
1031
+ };
1032
+ codespaces: {
1033
+ type: string;
1034
+ items: {
1035
+ $ref: string;
1036
+ };
1037
+ };
1038
+ dependabot: {
1039
+ type: string;
1040
+ items: {
1041
+ $ref: string;
1042
+ };
1043
+ };
1044
+ };
1045
+ additionalProperties: boolean;
1046
+ };
977
1047
  };
978
1048
  additionalProperties: boolean;
979
1049
  required: string[];
@@ -1093,6 +1163,71 @@ declare const schemas: {
1093
1163
  additionalProperties: boolean;
1094
1164
  };
1095
1165
  };
1166
+ } | {
1167
+ $schema: string;
1168
+ $id: string;
1169
+ definitions: {
1170
+ GithubOrgClaimSecrets: {
1171
+ $id: string;
1172
+ type: string;
1173
+ description: string;
1174
+ properties: {
1175
+ actions: {
1176
+ type: string;
1177
+ items: {
1178
+ $ref: string;
1179
+ };
1180
+ };
1181
+ codespaces: {
1182
+ type: string;
1183
+ items: {
1184
+ $ref: string;
1185
+ };
1186
+ };
1187
+ dependabot: {
1188
+ type: string;
1189
+ items: {
1190
+ $ref: string;
1191
+ };
1192
+ };
1193
+ };
1194
+ additionalProperties: boolean;
1195
+ };
1196
+ GithubOrgClaimSecretRef: {
1197
+ $id: string;
1198
+ type: string;
1199
+ description: string;
1200
+ pattern: string;
1201
+ };
1202
+ GithubOrgClaimSecret: {
1203
+ $id: string;
1204
+ type: string;
1205
+ description: string;
1206
+ properties: {
1207
+ name: {
1208
+ type: string;
1209
+ description: string;
1210
+ };
1211
+ value: {
1212
+ $ref: string;
1213
+ };
1214
+ visibility: {
1215
+ type: string;
1216
+ enum: string[];
1217
+ description: string;
1218
+ };
1219
+ selected_repositories: {
1220
+ type: string;
1221
+ items: {
1222
+ type: string;
1223
+ };
1224
+ description: string;
1225
+ };
1226
+ };
1227
+ required: string[];
1228
+ additionalProperties: boolean;
1229
+ };
1230
+ };
1096
1231
  })[] | {
1097
1232
  $id: string;
1098
1233
  definitions: {
@@ -505,6 +505,76 @@ export declare const GithubSchemas: ({
505
505
  secret_scanning_push_protection_enabled_for_new_repositories: {
506
506
  type: string;
507
507
  };
508
+ actions_variables: {
509
+ type: string;
510
+ items: {
511
+ type: string;
512
+ properties: {
513
+ name: {
514
+ type: string;
515
+ pattern: string;
516
+ };
517
+ value: {
518
+ type: string;
519
+ };
520
+ visibility: {
521
+ type: string;
522
+ enum: string[];
523
+ };
524
+ selected_repositories: {
525
+ type: string;
526
+ items: {
527
+ $ref: string;
528
+ };
529
+ };
530
+ };
531
+ required: string[];
532
+ additionalProperties: boolean;
533
+ allOf: {
534
+ if: {
535
+ properties: {
536
+ visibility: {
537
+ const: string;
538
+ };
539
+ };
540
+ required: string[];
541
+ };
542
+ then: {};
543
+ else: {
544
+ properties: {
545
+ selected_repositories: {
546
+ type: string;
547
+ maxItems: number;
548
+ };
549
+ };
550
+ };
551
+ }[];
552
+ };
553
+ };
554
+ org_secrets: {
555
+ type: string;
556
+ properties: {
557
+ actions: {
558
+ type: string;
559
+ items: {
560
+ $ref: string;
561
+ };
562
+ };
563
+ codespaces: {
564
+ type: string;
565
+ items: {
566
+ $ref: string;
567
+ };
568
+ };
569
+ dependabot: {
570
+ type: string;
571
+ items: {
572
+ $ref: string;
573
+ };
574
+ };
575
+ };
576
+ additionalProperties: boolean;
577
+ };
508
578
  };
509
579
  additionalProperties: boolean;
510
580
  required: string[];
@@ -624,4 +694,69 @@ export declare const GithubSchemas: ({
624
694
  additionalProperties: boolean;
625
695
  };
626
696
  };
697
+ } | {
698
+ $schema: string;
699
+ $id: string;
700
+ definitions: {
701
+ GithubOrgClaimSecrets: {
702
+ $id: string;
703
+ type: string;
704
+ description: string;
705
+ properties: {
706
+ actions: {
707
+ type: string;
708
+ items: {
709
+ $ref: string;
710
+ };
711
+ };
712
+ codespaces: {
713
+ type: string;
714
+ items: {
715
+ $ref: string;
716
+ };
717
+ };
718
+ dependabot: {
719
+ type: string;
720
+ items: {
721
+ $ref: string;
722
+ };
723
+ };
724
+ };
725
+ additionalProperties: boolean;
726
+ };
727
+ GithubOrgClaimSecretRef: {
728
+ $id: string;
729
+ type: string;
730
+ description: string;
731
+ pattern: string;
732
+ };
733
+ GithubOrgClaimSecret: {
734
+ $id: string;
735
+ type: string;
736
+ description: string;
737
+ properties: {
738
+ name: {
739
+ type: string;
740
+ description: string;
741
+ };
742
+ value: {
743
+ $ref: string;
744
+ };
745
+ visibility: {
746
+ type: string;
747
+ enum: string[];
748
+ description: string;
749
+ };
750
+ selected_repositories: {
751
+ type: string;
752
+ items: {
753
+ type: string;
754
+ };
755
+ description: string;
756
+ };
757
+ };
758
+ required: string[];
759
+ additionalProperties: boolean;
760
+ };
761
+ };
627
762
  })[];
@@ -0,0 +1,67 @@
1
+ declare const _default: {
2
+ $schema: string;
3
+ $id: string;
4
+ definitions: {
5
+ GithubOrgClaimSecrets: {
6
+ $id: string;
7
+ type: string;
8
+ description: string;
9
+ properties: {
10
+ actions: {
11
+ type: string;
12
+ items: {
13
+ $ref: string;
14
+ };
15
+ };
16
+ codespaces: {
17
+ type: string;
18
+ items: {
19
+ $ref: string;
20
+ };
21
+ };
22
+ dependabot: {
23
+ type: string;
24
+ items: {
25
+ $ref: string;
26
+ };
27
+ };
28
+ };
29
+ additionalProperties: boolean;
30
+ };
31
+ GithubOrgClaimSecretRef: {
32
+ $id: string;
33
+ type: string;
34
+ description: string;
35
+ pattern: string;
36
+ };
37
+ GithubOrgClaimSecret: {
38
+ $id: string;
39
+ type: string;
40
+ description: string;
41
+ properties: {
42
+ name: {
43
+ type: string;
44
+ description: string;
45
+ };
46
+ value: {
47
+ $ref: string;
48
+ };
49
+ visibility: {
50
+ type: string;
51
+ enum: string[];
52
+ description: string;
53
+ };
54
+ selected_repositories: {
55
+ type: string;
56
+ items: {
57
+ type: string;
58
+ };
59
+ description: string;
60
+ };
61
+ };
62
+ required: string[];
63
+ additionalProperties: boolean;
64
+ };
65
+ };
66
+ };
67
+ export default _default;
@@ -29,6 +29,32 @@ export interface IGithubOrgSettingsClaim extends IOrgSettingsClaim {
29
29
  dependency_graph_enabled_for_new_repositories?: boolean;
30
30
  secret_scanning_enabled_for_new_repositories?: boolean;
31
31
  secret_scanning_push_protection_enabled_for_new_repositories?: boolean;
32
+ actions_variables?: {
33
+ name: string;
34
+ value: string;
35
+ visibility: 'all' | 'private' | 'selected';
36
+ selected_repositories?: string[];
37
+ }[];
38
+ org_secrets?: {
39
+ actions?: {
40
+ name: string;
41
+ value: string;
42
+ visibility?: 'all' | 'private' | 'selected';
43
+ selected_repositories?: string[];
44
+ }[];
45
+ codespaces?: {
46
+ name: string;
47
+ value: string;
48
+ visibility?: 'all' | 'private' | 'selected';
49
+ selected_repositories?: string[];
50
+ }[];
51
+ dependabot?: {
52
+ name: string;
53
+ value: string;
54
+ visibility?: 'all' | 'private' | 'selected';
55
+ selected_repositories?: string[];
56
+ }[];
57
+ };
32
58
  };
33
59
  };
34
60
  }
@@ -100,6 +100,76 @@ declare const _default: {
100
100
  secret_scanning_push_protection_enabled_for_new_repositories: {
101
101
  type: string;
102
102
  };
103
+ actions_variables: {
104
+ type: string;
105
+ items: {
106
+ type: string;
107
+ properties: {
108
+ name: {
109
+ type: string;
110
+ pattern: string;
111
+ };
112
+ value: {
113
+ type: string;
114
+ };
115
+ visibility: {
116
+ type: string;
117
+ enum: string[];
118
+ };
119
+ selected_repositories: {
120
+ type: string;
121
+ items: {
122
+ $ref: string;
123
+ };
124
+ };
125
+ };
126
+ required: string[];
127
+ additionalProperties: boolean;
128
+ allOf: {
129
+ if: {
130
+ properties: {
131
+ visibility: {
132
+ const: string;
133
+ };
134
+ };
135
+ required: string[];
136
+ };
137
+ then: {};
138
+ else: {
139
+ properties: {
140
+ selected_repositories: {
141
+ type: string;
142
+ maxItems: number;
143
+ };
144
+ };
145
+ };
146
+ }[];
147
+ };
148
+ };
149
+ org_secrets: {
150
+ type: string;
151
+ properties: {
152
+ actions: {
153
+ type: string;
154
+ items: {
155
+ $ref: string;
156
+ };
157
+ };
158
+ codespaces: {
159
+ type: string;
160
+ items: {
161
+ $ref: string;
162
+ };
163
+ };
164
+ dependabot: {
165
+ type: string;
166
+ items: {
167
+ $ref: string;
168
+ };
169
+ };
170
+ };
171
+ additionalProperties: boolean;
172
+ };
103
173
  };
104
174
  additionalProperties: boolean;
105
175
  required: string[];
@@ -8,5 +8,5 @@ export declare function renderClaims(catalogScope: Construct, firestartrScope: C
8
8
  crs: any;
9
9
  renames?: IRenameResult[];
10
10
  }): Promise<RenderedCrMap>;
11
- export declare function renderClaim(catalogScope: Construct, firestartrScope: Construct, claim: any, patches: ICustomResourcePatch[], previousCR?: any | null, claimPath?: string): Promise<IRenderClaimResult>;
11
+ export declare function renderClaim(catalogScope: Construct, firestartrScope: Construct, claim: any, patches: ICustomResourcePatch[], previousCR?: any | null, claimPath?: string, variableSectionPreviousCR?: any | false, variableSectionPatches?: ICustomResourcePatch[], secretSectionPreviousCR?: any | false, secretSectionPatches?: ICustomResourcePatch[]): Promise<IRenderClaimResult>;
12
12
  export declare function renameVariantCrFiles(outputDir: string, renderedMap: RenderedCrMap): void;
@@ -1 +1 @@
1
- export declare function getPreviousCRfromClaim(claim: any, previousCRs: any): any;
1
+ export declare function getPreviousCRfromClaim(claim: any, previousCRs: any, expectedKind?: string): any;
@@ -0,0 +1,4 @@
1
+ import { RenderClaims, RenderedCrMap } from '../renderer/types';
2
+ export declare function validateGithubOrgSecretSectionSingleton(crs: RenderedCrMap): void;
3
+ export declare function validateSecretNamesUniqueness(crs: RenderedCrMap): void;
4
+ export declare function validateOrgSecretsCrossReferences(renderClaims: RenderClaims): void;
@@ -0,0 +1,4 @@
1
+ import { RenderClaims, RenderedCrMap } from '../renderer/types';
2
+ export declare function validateGithubOrgVariableSectionSingleton(crs: RenderedCrMap): void;
3
+ export declare function validateActionsVariablesUniqueness(crs: RenderedCrMap): void;
4
+ export declare function validateActionsVariablesSelectedRepositories(renderClaims: RenderClaims): void;
@@ -0,0 +1,8 @@
1
+ import { Entity } from '../base';
2
+ export declare class EntityGHOrgVarsSection extends Entity {
3
+ constructor(artifact: any);
4
+ loadResources(tfOp: string): Promise<void>;
5
+ private adoptVariablesIfNeeded;
6
+ postProvision(tfOp: string): Promise<void>;
7
+ loadAddressesToImport(): Promise<void>;
8
+ }
@@ -17,6 +17,7 @@ declare const _default: {
17
17
  getOrgTeamsDirectAccess: typeof import("./src/organization").getOrgTeamsDirectAccess;
18
18
  getOrgPlanName: typeof import("./src/organization").getOrgPlanName;
19
19
  getWebhookList: typeof import("./src/organization").getWebhookList;
20
+ getOrgVariable: typeof import("./src/organization").getOrgVariable;
20
21
  };
21
22
  repo: {
22
23
  listReleases: typeof import("./src/repository").listReleases;
@@ -8,6 +8,7 @@ export declare function getWebhookList(org: string, octokit?: any): Promise<any>
8
8
  export declare function getOrgTeamsDirectAccess(org: string, octokit?: any): Promise<any>;
9
9
  export declare function transformGraphQLResponse(response: any): any;
10
10
  export declare function getOrgPlanName(org: string, octokit?: any): Promise<any>;
11
+ export declare function getOrgVariable(org: string, variableName: string, octokit?: any): Promise<any>;
11
12
  declare const _default: {
12
13
  getRepositoryList: typeof getRepositoryList;
13
14
  getTeamList: typeof getTeamList;
@@ -18,5 +19,6 @@ declare const _default: {
18
19
  getOrgTeamsDirectAccess: typeof getOrgTeamsDirectAccess;
19
20
  getOrgPlanName: typeof getOrgPlanName;
20
21
  getWebhookList: typeof getWebhookList;
22
+ getOrgVariable: typeof getOrgVariable;
21
23
  };
22
24
  export default _default;
@@ -21,6 +21,7 @@ export declare function withProfile(profileName: string): {
21
21
  getWebhookList: (orgName: string) => Promise<any>;
22
22
  getOrgTeamsDirectAccess: (orgName: string) => Promise<any>;
23
23
  getOrgPlanName: (orgName: string) => Promise<any>;
24
+ getOrgVariable: (orgName: string, variableName: string) => Promise<any>;
24
25
  };
25
26
  repo: {
26
27
  addStatusCheck: (output: any, isFailure: boolean, headSha: string, name: string, status: string, repoName: string, owner: string) => Promise<void>;
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@firestartr/cli",
3
- "version": "2.9.0",
3
+ "version": "2.10.0-snapshot-org-secrets-2",
4
4
  "private": false,
5
5
  "description": "Commandline tool",
6
6
  "main": "build/main.js",
@@ -23,10 +23,11 @@
23
23
  "author": "Víctor Rodríguez",
24
24
  "license": "ISC",
25
25
  "dependencies": {
26
- "semver": "^7.7.2"
26
+ "semver": "^7.8.5"
27
27
  },
28
28
  "devDependencies": {
29
29
  "@types/command-line-args": "^5.2.0",
30
+ "@types/semver": "^7.5.8",
30
31
  "catalog_common": "file:../catalog_common",
31
32
  "cdk8s_renderer": "file:../cdk8s_renderer",
32
33
  "command-line-args": "^5.2.1",