@flowcore/cli-plugin-iam 1.6.0 → 1.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. package/CHANGELOG.md +15 -0
  2. package/README.md +7 -7
  3. package/dist/commands/get/role.js +0 -1
  4. package/dist/resource-types/policy.resource.d.ts +8 -7
  5. package/dist/resource-types/policy.resource.js +5 -2
  6. package/dist/resource-types/role.resource.js +0 -1
  7. package/oclif.manifest.json +59 -59
  8. package/package.json +1 -1
package/CHANGELOG.md CHANGED
@@ -1,5 +1,20 @@
1
1
  # Changelog
2
2
 
3
+ ## [1.7.0](https://github.com/flowcore-io/cli-plugin-iam/compare/v1.6.1...v1.7.0) (2025-05-01)
4
+
5
+
6
+ ### Features
7
+
8
+ * **policy:** :art: update policy action validation to support string union ([e16d95b](https://github.com/flowcore-io/cli-plugin-iam/commit/e16d95bfeaeaf74e32b41116a92790c85ca6be36))
9
+ * **policy:** :sparkles: add SENSITIVE_DATA_FETCH action to policy document ([6026408](https://github.com/flowcore-io/cli-plugin-iam/commit/60264082133c149e4d1fc78606ee2b0cb0cced4a))
10
+
11
+ ## [1.6.1](https://github.com/flowcore-io/cli-plugin-iam/compare/v1.6.0...v1.6.1) (2025-03-20)
12
+
13
+
14
+ ### Bug Fixes
15
+
16
+ * **role:** :art: improve formatting in GetRole command output, removed console logs ([ee41739](https://github.com/flowcore-io/cli-plugin-iam/commit/ee417394174d567abf48133d767ba70bedb2bdc2))
17
+
3
18
  ## [1.6.0](https://github.com/flowcore-io/cli-plugin-iam/compare/v1.5.0...v1.6.0) (2025-02-16)
4
19
 
5
20
 
package/README.md CHANGED
@@ -18,7 +18,7 @@ $ npm install -g @flowcore/cli-plugin-iam
18
18
  $ iam COMMAND
19
19
  running command...
20
20
  $ iam (--version)
21
- @flowcore/cli-plugin-iam/1.6.0 linux-x64 node-v20.16.0
21
+ @flowcore/cli-plugin-iam/1.7.0 linux-x64 node-v20.16.0
22
22
  $ iam --help [COMMAND]
23
23
  USAGE
24
24
  $ iam COMMAND
@@ -55,7 +55,7 @@ DESCRIPTION
55
55
  Delete a policy
56
56
  ```
57
57
 
58
- _See code: [src/commands/delete/policy.ts](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.6.0/src/commands/delete/policy.ts)_
58
+ _See code: [src/commands/delete/policy.ts](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.7.0/src/commands/delete/policy.ts)_
59
59
 
60
60
  ## `iam delete role NAME`
61
61
 
@@ -78,7 +78,7 @@ DESCRIPTION
78
78
  Delete a role
79
79
  ```
80
80
 
81
- _See code: [src/commands/delete/role.ts](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.6.0/src/commands/delete/role.ts)_
81
+ _See code: [src/commands/delete/role.ts](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.7.0/src/commands/delete/role.ts)_
82
82
 
83
83
  ## `iam edit policy NAME`
84
84
 
@@ -104,7 +104,7 @@ EXAMPLES
104
104
  $ FC_EDITOR=code flowcore iam edit policy my-policy -t my-tenant
105
105
  ```
106
106
 
107
- _See code: [src/commands/edit/policy.ts](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.6.0/src/commands/edit/policy.ts)_
107
+ _See code: [src/commands/edit/policy.ts](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.7.0/src/commands/edit/policy.ts)_
108
108
 
109
109
  ## `iam edit role NAME`
110
110
 
@@ -130,7 +130,7 @@ EXAMPLES
130
130
  $ FC_EDITOR=code flowcore iam edit role my-role -t my-tenant
131
131
  ```
132
132
 
133
- _See code: [src/commands/edit/role.ts](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.6.0/src/commands/edit/role.ts)_
133
+ _See code: [src/commands/edit/role.ts](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.7.0/src/commands/edit/role.ts)_
134
134
 
135
135
  ## `iam get policy [NAME]`
136
136
 
@@ -153,7 +153,7 @@ DESCRIPTION
153
153
  Get a policy
154
154
  ```
155
155
 
156
- _See code: [src/commands/get/policy.ts](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.6.0/src/commands/get/policy.ts)_
156
+ _See code: [src/commands/get/policy.ts](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.7.0/src/commands/get/policy.ts)_
157
157
 
158
158
  ## `iam get role [NAME]`
159
159
 
@@ -176,5 +176,5 @@ DESCRIPTION
176
176
  Get a role
177
177
  ```
178
178
 
179
- _See code: [src/commands/get/role.ts](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.6.0/src/commands/get/role.ts)_
179
+ _See code: [src/commands/get/role.ts](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.7.0/src/commands/get/role.ts)_
180
180
  <!-- commandsstop -->
package/dist/commands/get/role.js CHANGED
@@ -170,7 +170,6 @@ export default class GetRole extends BaseCommand {
170
170
  if (err) {
171
171
  this.logger.fatal(`Failed to get roles: ${err.message}`);
172
172
  }
173
- console.log(userRoles.data);
174
173
  const headers = [
175
174
  "Role ID",
176
175
  "Name",
package/dist/resource-types/policy.resource.d.ts CHANGED
@@ -6,6 +6,7 @@ export declare enum PolicyDocumentAction {
6
6
  FETCH = "fetch",
7
7
  INGEST = "ingest",
8
8
  READ = "read",
9
+ SENSITIVE_DATA_FETCH = "sensitive-data-fetch",
9
10
  WRITE = "write"
10
11
  }
11
12
  export declare const policyDto: z.ZodObject<z.objectUtil.extendShape<{
@@ -26,15 +27,15 @@ export declare const policyDto: z.ZodObject<z.objectUtil.extendShape<{
26
27
  description: z.ZodOptional<z.ZodString>;
27
28
  flowcoreManaged: z.ZodOptional<z.ZodBoolean>;
28
29
  policyDocuments: z.ZodArray<z.ZodObject<{
29
- action: z.ZodUnion<[z.ZodArray<z.ZodNativeEnum<typeof PolicyDocumentAction>, "many">, z.ZodNativeEnum<typeof PolicyDocumentAction>]>;
30
+ action: z.ZodUnion<[z.ZodArray<z.ZodUnion<[z.ZodNativeEnum<typeof PolicyDocumentAction>, z.ZodString]>, "many">, z.ZodUnion<[z.ZodNativeEnum<typeof PolicyDocumentAction>, z.ZodString]>]>;
30
31
  resource: z.ZodString;
31
32
  statementId: z.ZodOptional<z.ZodString>;
32
33
  }, "strip", z.ZodTypeAny, {
33
- action: PolicyDocumentAction | PolicyDocumentAction[];
34
+ action: string | string[];
34
35
  resource: string;
35
36
  statementId?: string | undefined;
36
37
  }, {
37
- action: PolicyDocumentAction | PolicyDocumentAction[];
38
+ action: string | string[];
38
39
  resource: string;
39
40
  statementId?: string | undefined;
40
41
  }>, "many">;
@@ -43,7 +44,7 @@ export declare const policyDto: z.ZodObject<z.objectUtil.extendShape<{
43
44
  }, "strip", z.ZodTypeAny, {
44
45
  version: string;
45
46
  policyDocuments: {
46
- action: PolicyDocumentAction | PolicyDocumentAction[];
47
+ action: string | string[];
47
48
  resource: string;
48
49
  statementId?: string | undefined;
49
50
  }[];
@@ -53,7 +54,7 @@ export declare const policyDto: z.ZodObject<z.objectUtil.extendShape<{
53
54
  }, {
54
55
  version: string;
55
56
  policyDocuments: {
56
- action: PolicyDocumentAction | PolicyDocumentAction[];
57
+ action: string | string[];
57
58
  resource: string;
58
59
  statementId?: string | undefined;
59
60
  }[];
@@ -71,7 +72,7 @@ export declare const policyDto: z.ZodObject<z.objectUtil.extendShape<{
71
72
  spec: {
72
73
  version: string;
73
74
  policyDocuments: {
74
- action: PolicyDocumentAction | PolicyDocumentAction[];
75
+ action: string | string[];
75
76
  resource: string;
76
77
  statementId?: string | undefined;
77
78
  }[];
@@ -89,7 +90,7 @@ export declare const policyDto: z.ZodObject<z.objectUtil.extendShape<{
89
90
  spec: {
90
91
  version: string;
91
92
  policyDocuments: {
92
- action: PolicyDocumentAction | PolicyDocumentAction[];
93
+ action: string | string[];
93
94
  resource: string;
94
95
  statementId?: string | undefined;
95
96
  }[];
package/dist/resource-types/policy.resource.js CHANGED
@@ -2,6 +2,7 @@ import { baseResourceDto } from "@flowcore/cli-plugin-core";
2
2
  import { diff } from "@opentf/obj-diff";
3
3
  import enquirer from "enquirer";
4
4
  import { diffString } from "json-diff";
5
+ import { inspect } from "node:util";
5
6
  import { omit } from "radash";
6
7
  import { z } from "zod";
7
8
  export var PolicyDocumentAction;
@@ -10,6 +11,7 @@ export var PolicyDocumentAction;
10
11
  PolicyDocumentAction["FETCH"] = "fetch";
11
12
  PolicyDocumentAction["INGEST"] = "ingest";
12
13
  PolicyDocumentAction["READ"] = "read";
14
+ PolicyDocumentAction["SENSITIVE_DATA_FETCH"] = "sensitive-data-fetch";
13
15
  PolicyDocumentAction["WRITE"] = "write";
14
16
  })(PolicyDocumentAction || (PolicyDocumentAction = {}));
15
17
  export const policyDto = baseResourceDto.extend({
@@ -18,8 +20,8 @@ export const policyDto = baseResourceDto.extend({
18
20
  flowcoreManaged: z.boolean().optional(),
19
21
  policyDocuments: z.array(z.object({
20
22
  action: z
21
- .array(z.nativeEnum(PolicyDocumentAction))
22
- .or(z.nativeEnum(PolicyDocumentAction)),
23
+ .array(z.union([z.nativeEnum(PolicyDocumentAction), z.string()]))
24
+ .or(z.union([z.nativeEnum(PolicyDocumentAction), z.string()])),
23
25
  resource: z.string(),
24
26
  statementId: z.string().optional(),
25
27
  })),
@@ -119,6 +121,7 @@ export class PolicyService {
119
121
  this.logger.fatal(`Failed to create policy with error(${err.error.status} - ${err.error.code}): ${err.error.message}`);
120
122
  }
121
123
  else {
124
+ console.log(`Error: ${error}`, inspect(error, { depth: null }));
122
125
  this.logger.fatal(`Failed to create policy with unknown error: ${error}`);
123
126
  }
124
127
  }
package/dist/resource-types/role.resource.js CHANGED
@@ -129,7 +129,6 @@ export class RoleService {
129
129
  this.logger.debug(`Created binding for policy ${policyId} to role ${existingRole.id}`);
130
130
  }
131
131
  for (const policy of toRemove) {
132
- console.log(policy, alreadyLinkedPolicies.data);
133
132
  const policyId = alreadyLinkedPolicies.data.find((p) => p.name === policy)?.id;
134
133
  if (!policyId) {
135
134
  this.logger.fatal(`Policy ${policy} not found`);
package/oclif.manifest.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "commands": {
3
- "edit:policy": {
3
+ "delete:policy": {
4
4
  "aliases": [],
5
5
  "args": {
6
6
  "NAME": {
@@ -9,11 +9,8 @@
9
9
  "required": true
10
10
  }
11
11
  },
12
- "description": "Edit a policy in your preferred editor",
13
- "examples": [
14
- "$ flowcore iam edit policy my-policy -t my-tenant",
15
- "$ FC_EDITOR=code flowcore iam edit policy my-policy -t my-tenant"
16
- ],
12
+ "description": "Delete a policy",
13
+ "examples": [],
17
14
  "flags": {
18
15
  "profile": {
19
16
  "description": "Specify the configuration profile to use",
@@ -22,6 +19,14 @@
22
19
  "multiple": false,
23
20
  "type": "option"
24
21
  },
22
+ "json": {
23
+ "char": "j",
24
+ "description": "json output",
25
+ "name": "json",
26
+ "required": false,
27
+ "allowNo": false,
28
+ "type": "boolean"
29
+ },
25
30
  "tenant": {
26
31
  "char": "t",
27
32
  "description": "tenant",
@@ -30,11 +35,19 @@
30
35
  "hasDynamicHelp": false,
31
36
  "multiple": false,
32
37
  "type": "option"
38
+ },
39
+ "yes": {
40
+ "char": "y",
41
+ "description": "yes to all",
42
+ "name": "yes",
43
+ "required": false,
44
+ "allowNo": false,
45
+ "type": "boolean"
33
46
  }
34
47
  },
35
48
  "hasDynamicHelp": false,
36
49
  "hiddenAliases": [],
37
- "id": "edit:policy",
50
+ "id": "delete:policy",
38
51
  "pluginAlias": "@flowcore/cli-plugin-iam",
39
52
  "pluginName": "@flowcore/cli-plugin-iam",
40
53
  "pluginType": "core",
@@ -44,11 +57,11 @@
44
57
  "relativePath": [
45
58
  "dist",
46
59
  "commands",
47
- "edit",
60
+ "delete",
48
61
  "policy.js"
49
62
  ]
50
63
  },
51
- "edit:role": {
64
+ "delete:role": {
52
65
  "aliases": [],
53
66
  "args": {
54
67
  "NAME": {
@@ -57,11 +70,8 @@
57
70
  "required": true
58
71
  }
59
72
  },
60
- "description": "Edit a role in your preferred editor",
61
- "examples": [
62
- "$ flowcore iam edit role my-role -t my-tenant",
63
- "$ FC_EDITOR=code flowcore iam edit role my-role -t my-tenant"
64
- ],
73
+ "description": "Delete a role",
74
+ "examples": [],
65
75
  "flags": {
66
76
  "profile": {
67
77
  "description": "Specify the configuration profile to use",
@@ -70,6 +80,14 @@
70
80
  "multiple": false,
71
81
  "type": "option"
72
82
  },
83
+ "json": {
84
+ "char": "j",
85
+ "description": "json output",
86
+ "name": "json",
87
+ "required": false,
88
+ "allowNo": false,
89
+ "type": "boolean"
90
+ },
73
91
  "tenant": {
74
92
  "char": "t",
75
93
  "description": "tenant",
@@ -78,11 +96,19 @@
78
96
  "hasDynamicHelp": false,
79
97
  "multiple": false,
80
98
  "type": "option"
99
+ },
100
+ "yes": {
101
+ "char": "y",
102
+ "description": "yes to all",
103
+ "name": "yes",
104
+ "required": false,
105
+ "allowNo": false,
106
+ "type": "boolean"
81
107
  }
82
108
  },
83
109
  "hasDynamicHelp": false,
84
110
  "hiddenAliases": [],
85
- "id": "edit:role",
111
+ "id": "delete:role",
86
112
  "pluginAlias": "@flowcore/cli-plugin-iam",
87
113
  "pluginName": "@flowcore/cli-plugin-iam",
88
114
  "pluginType": "core",
@@ -92,11 +118,11 @@
92
118
  "relativePath": [
93
119
  "dist",
94
120
  "commands",
95
- "edit",
121
+ "delete",
96
122
  "role.js"
97
123
  ]
98
124
  },
99
- "delete:policy": {
125
+ "edit:policy": {
100
126
  "aliases": [],
101
127
  "args": {
102
128
  "NAME": {
@@ -105,8 +131,11 @@
105
131
  "required": true
106
132
  }
107
133
  },
108
- "description": "Delete a policy",
109
- "examples": [],
134
+ "description": "Edit a policy in your preferred editor",
135
+ "examples": [
136
+ "$ flowcore iam edit policy my-policy -t my-tenant",
137
+ "$ FC_EDITOR=code flowcore iam edit policy my-policy -t my-tenant"
138
+ ],
110
139
  "flags": {
111
140
  "profile": {
112
141
  "description": "Specify the configuration profile to use",
@@ -115,14 +144,6 @@
115
144
  "multiple": false,
116
145
  "type": "option"
117
146
  },
118
- "json": {
119
- "char": "j",
120
- "description": "json output",
121
- "name": "json",
122
- "required": false,
123
- "allowNo": false,
124
- "type": "boolean"
125
- },
126
147
  "tenant": {
127
148
  "char": "t",
128
149
  "description": "tenant",
@@ -131,19 +152,11 @@
131
152
  "hasDynamicHelp": false,
132
153
  "multiple": false,
133
154
  "type": "option"
134
- },
135
- "yes": {
136
- "char": "y",
137
- "description": "yes to all",
138
- "name": "yes",
139
- "required": false,
140
- "allowNo": false,
141
- "type": "boolean"
142
155
  }
143
156
  },
144
157
  "hasDynamicHelp": false,
145
158
  "hiddenAliases": [],
146
- "id": "delete:policy",
159
+ "id": "edit:policy",
147
160
  "pluginAlias": "@flowcore/cli-plugin-iam",
148
161
  "pluginName": "@flowcore/cli-plugin-iam",
149
162
  "pluginType": "core",
@@ -153,11 +166,11 @@
153
166
  "relativePath": [
154
167
  "dist",
155
168
  "commands",
156
- "delete",
169
+ "edit",
157
170
  "policy.js"
158
171
  ]
159
172
  },
160
- "delete:role": {
173
+ "edit:role": {
161
174
  "aliases": [],
162
175
  "args": {
163
176
  "NAME": {
@@ -166,8 +179,11 @@
166
179
  "required": true
167
180
  }
168
181
  },
169
- "description": "Delete a role",
170
- "examples": [],
182
+ "description": "Edit a role in your preferred editor",
183
+ "examples": [
184
+ "$ flowcore iam edit role my-role -t my-tenant",
185
+ "$ FC_EDITOR=code flowcore iam edit role my-role -t my-tenant"
186
+ ],
171
187
  "flags": {
172
188
  "profile": {
173
189
  "description": "Specify the configuration profile to use",
@@ -176,14 +192,6 @@
176
192
  "multiple": false,
177
193
  "type": "option"
178
194
  },
179
- "json": {
180
- "char": "j",
181
- "description": "json output",
182
- "name": "json",
183
- "required": false,
184
- "allowNo": false,
185
- "type": "boolean"
186
- },
187
195
  "tenant": {
188
196
  "char": "t",
189
197
  "description": "tenant",
@@ -192,19 +200,11 @@
192
200
  "hasDynamicHelp": false,
193
201
  "multiple": false,
194
202
  "type": "option"
195
- },
196
- "yes": {
197
- "char": "y",
198
- "description": "yes to all",
199
- "name": "yes",
200
- "required": false,
201
- "allowNo": false,
202
- "type": "boolean"
203
203
  }
204
204
  },
205
205
  "hasDynamicHelp": false,
206
206
  "hiddenAliases": [],
207
- "id": "delete:role",
207
+ "id": "edit:role",
208
208
  "pluginAlias": "@flowcore/cli-plugin-iam",
209
209
  "pluginName": "@flowcore/cli-plugin-iam",
210
210
  "pluginType": "core",
@@ -214,7 +214,7 @@
214
214
  "relativePath": [
215
215
  "dist",
216
216
  "commands",
217
- "delete",
217
+ "edit",
218
218
  "role.js"
219
219
  ]
220
220
  },
@@ -341,5 +341,5 @@
341
341
  ]
342
342
  }
343
343
  },
344
- "version": "1.6.0"
344
+ "version": "1.7.0"
345
345
  }
package/package.json CHANGED
@@ -91,7 +91,7 @@
91
91
  "version": "oclif readme && git add README.md",
92
92
  "update-schema": "rover graph introspect https://graph.api.flowcore.io/graphql -o schema.gql"
93
93
  },
94
- "version": "1.6.0",
94
+ "version": "1.7.0",
95
95
  "bugs": "https://github.com/flowcore-io/cli-plugin-iam/issues",
96
96
  "keywords": [
97
97
  "oclif"