@gradientedge/cdk-utils 10.6.0 → 10.8.0

package/src/lib/azure/services/cosmosdb/main.ts

@@ -1,11 +1,21 @@
 import {
   DatabaseAccount,
+  getDatabaseAccountOutput,
+  getSqlResourceSqlRoleDefinitionOutput,
   ResourceIdentityType,
   SqlResourceSqlContainer,
   SqlResourceSqlDatabase,
+  SqlResourceSqlRoleAssignment,
 } from '@pulumi/azure-native/cosmosdb/index.js'
+import { Input, ResourceOptions } from '@pulumi/pulumi'
 import { CommonAzureConstruct } from '../../common/index.js'
-import { CosmosdbAccountProps, CosmosdbSqlContainerProps, CosmosdbSqlDatabaseProps } from './types.js'
+import { CosmosRoleDefinition, CosmosRoleDefinitionId } from './constants.js'
+import {
+  CosmosdbAccountProps,
+  CosmosdbSqlContainerProps,
+  CosmosdbSqlDatabaseProps,
+  SqlResourceSqlRoleAssignmentProps,
+} from './types.js'
 
 /**
  * @classdesc Provides operations on Azure CosmosDB using Pulumi
@@ -30,9 +40,15 @@ export class AzureCosmosDbManager {
    * @param id scoped id of the resource
    * @param scope scope in which this resource is defined
    * @param props cosmosdb account properties
-   * @see [Pulumi Azure Native CosmosDB Account]{@link https://www.pulumi.com/registry/packages/azure-native/api-docs/documentdb/databaseaccount/}
+   * @param resourceOptions Optional settings to control resource behaviour
+   * @see [Pulumi Azure Native CosmosDB Database Account]{@link https://www.pulumi.com/registry/packages/azure-native/api-docs/documentdb/databaseaccount/}
    */
-  public createCosmosDbAccount(id: string, scope: CommonAzureConstruct, props: CosmosdbAccountProps) {
+  public createCosmosDbAccount(
+    id: string,
+    scope: CommonAzureConstruct,
+    props: CosmosdbAccountProps,
+    resourceOptions?: ResourceOptions
+  ) {
     if (!props) throw `Props undefined for ${id}`
 
     // Get resource group name
@@ -59,7 +75,7 @@ export class AzureCosmosDbManager {
           type: ResourceIdentityType.SystemAssigned,
         },
       },
-      { parent: scope }
+      { parent: scope, ...resourceOptions }
     )
   }
 
@@ -68,9 +84,15 @@ export class AzureCosmosDbManager {
    * @param id scoped id of the resource
    * @param scope scope in which this resource is defined
    * @param props cosmosdb database properties
+   * @param resourceOptions Optional settings to control resource behaviour
    * @see [Pulumi Azure Native CosmosDB SQL Database]{@link https://www.pulumi.com/registry/packages/azure-native/api-docs/documentdb/sqlresourcesqldatabase/}
    */
-  public createCosmosDbDatabase(id: string, scope: CommonAzureConstruct, props: CosmosdbSqlDatabaseProps) {
+  public createCosmosDbDatabase(
+    id: string,
+    scope: CommonAzureConstruct,
+    props: CosmosdbSqlDatabaseProps,
+    resourceOptions?: ResourceOptions
+  ) {
     if (!props) throw `Props undefined for ${id}`
 
     // Get resource group name
@@ -90,7 +112,7 @@ export class AzureCosmosDbManager {
         ),
         resourceGroupName: resourceGroupName,
       },
-      { parent: scope }
+      { parent: scope, ...resourceOptions }
     )
   }
 
@@ -99,9 +121,15 @@ export class AzureCosmosDbManager {
    * @param id scoped id of the resource
    * @param scope scope in which this resource is defined
    * @param props cosmosdb container properties
+   * @param resourceOptions Optional settings to control resource behaviour
    * @see [Pulumi Azure Native CosmosDB SQL Container]{@link https://www.pulumi.com/registry/packages/azure-native/api-docs/documentdb/sqlresourcesqlcontainer/}
    */
-  public createCosmosDbContainer(id: string, scope: CommonAzureConstruct, props: CosmosdbSqlContainerProps) {
+  public createCosmosDbContainer(
+    id: string,
+    scope: CommonAzureConstruct,
+    props: CosmosdbSqlContainerProps,
+    resourceOptions?: ResourceOptions
+  ) {
     if (!props) throw `Props undefined for ${id}`
 
     // Get resource group name
@@ -121,7 +149,129 @@ export class AzureCosmosDbManager {
         ),
         resourceGroupName: resourceGroupName,
       },
-      { parent: scope }
+      { parent: scope, ...resourceOptions }
+    )
+  }
+
+  /**
+   * @summary Method to create a sql role assignment
+   * @param id scoped id of the resource
+   * @param scope scope in which this resource is defined
+   * @param props sql role assignment properties
+   * @param resourceOptions Optional settings to control resource behaviour
+   * @see [Pulumi Azure Native CosmosDB SQL Role Assignment]{@link https://www.pulumi.com/registry/packages/azure-native/api-docs/documentdb/sqlresourcesqlroleassignment/}
+   */
+  public createSqlResourceSqlRoleAssignment(
+    id: string,
+    scope: CommonAzureConstruct,
+    props: SqlResourceSqlRoleAssignmentProps,
+    resourceOptions?: ResourceOptions
+  ) {
+    return new SqlResourceSqlRoleAssignment(`${id}`, props, { parent: scope, ...resourceOptions })
+  }
+
+  /**
+   * @summary Method to resolve an existing cosmosdb account
+   * @param scope scope in which this resource is defined
+   * @param accountName the account name
+   * @param resourceGroupName the resource group name
+   * @param resourceOptions Optional settings to control resource behaviour
+   */
+  public resolveCosmosDbAccount(
+    scope: CommonAzureConstruct,
+    accountName: string,
+    resourceGroupName: string,
+    resourceOptions?: ResourceOptions
+  ) {
+    return getDatabaseAccountOutput({ accountName, resourceGroupName }, { parent: scope, ...resourceOptions })
+  }
+
+  /**
+   * @summary Method to resolve an existing sql role definition
+   * @param scope scope in which this resource is defined
+   * @param accountName the account name
+   * @param resourceGroupName the resource group name
+   * @param roleDefinitionId the role definition id
+   * @param resourceOptions Optional settings to control resource behaviour
+   */
+  public resolveSqlRoleDefinition(
+    scope: CommonAzureConstruct,
+    accountName: Input<string>,
+    resourceGroupName: string,
+    roleDefinitionId: string,
+    resourceOptions?: ResourceOptions
+  ) {
+    return getSqlResourceSqlRoleDefinitionOutput(
+      { accountName, resourceGroupName, roleDefinitionId },
+      { parent: scope, ...resourceOptions }
     )
   }
+
+  /**
+   * @summary Method to assign a sql role assignment
+   * @param id scoped id of the resource
+   * @param scope scope in which this resource is defined
+   * @param accountName the account name
+   * @param resourceGroupName the resource group name
+   * @param principalId the principal id to which the role is assigned to
+   * @param roleDefinitions list of role definitions to
+   * @param resourceOptions Optional settings to control resource behaviour
+   */
+  public grantSqlRoleDefinitionToAccount(
+    id: string,
+    scope: CommonAzureConstruct,
+    accountName: string,
+    resourceGroupName: string,
+    principalId: Input<string>,
+    roleDefinitions: CosmosRoleDefinition[],
+    resourceOptions?: ResourceOptions
+  ) {
+    const cosmosDbAccount = this.resolveCosmosDbAccount(scope, accountName, resourceGroupName, resourceOptions)
+
+    if (roleDefinitions.includes(CosmosRoleDefinition.CONTRIBUTOR)) {
+      const cosmosdbSqlRoleDefinitionContributor = this.resolveSqlRoleDefinition(
+        scope,
+        cosmosDbAccount.name,
+        resourceGroupName,
+        CosmosRoleDefinitionId.CONTRIBUTOR,
+        resourceOptions
+      )
+
+      this.createSqlResourceSqlRoleAssignment(
+        `${id}-cdb-ra-contributor`,
+        scope,
+        {
+          accountName: cosmosDbAccount.name,
+          resourceGroupName: resourceGroupName,
+          roleDefinitionId: cosmosdbSqlRoleDefinitionContributor.id,
+          principalId,
+          scope: cosmosDbAccount.id,
+        },
+        resourceOptions
+      )
+    }
+
+    if (roleDefinitions.includes(CosmosRoleDefinition.READER)) {
+      const cosmosdbSqlRoleDefinitionReader = this.resolveSqlRoleDefinition(
+        scope,
+        cosmosDbAccount.name,
+        resourceGroupName,
+        CosmosRoleDefinitionId.READER,
+        resourceOptions
+      )
+
+      this.createSqlResourceSqlRoleAssignment(
+        `${id}-cdb-ra-reader`,
+        scope,
+        {
+          accountName: cosmosDbAccount.name,
+          resourceGroupName: resourceGroupName,
+          roleDefinitionId: cosmosdbSqlRoleDefinitionReader.id,
+          principalId,
+          scope: cosmosDbAccount.id,
+        },
+        resourceOptions
+      )
+    }
+  }
 }

package/src/lib/azure/services/cosmosdb/types.ts

@@ -2,6 +2,7 @@ import {
   DatabaseAccountArgs,
   SqlResourceSqlContainerArgs,
   SqlResourceSqlDatabaseArgs,
+  SqlResourceSqlRoleAssignmentArgs,
 } from '@pulumi/azure-native/cosmosdb/index.js'
 
 export interface CosmosdbAccountProps extends DatabaseAccountArgs {}
@@ -9,3 +10,5 @@ export interface CosmosdbAccountProps extends DatabaseAccountArgs {}
 export interface CosmosdbSqlDatabaseProps extends SqlResourceSqlDatabaseArgs {}
 
 export interface CosmosdbSqlContainerProps extends SqlResourceSqlContainerArgs {}
+
+export interface SqlResourceSqlRoleAssignmentProps extends SqlResourceSqlRoleAssignmentArgs {}

package/src/lib/azure/services/dns/main.ts

@@ -1,4 +1,5 @@
 import { RecordSet, Zone } from '@pulumi/azure-native/dns/index.js'
+import { ResourceOptions } from '@pulumi/pulumi'
 import { CommonAzureConstruct } from '../../common/index.js'
 import { DnsARecordProps, DnsCnameRecordProps, DnsTxtRecordProps, DnsZoneProps } from './types.js'
 
@@ -25,9 +26,15 @@ export class AzureDnsManager {
    * @param id scoped id of the resource
    * @param scope scope in which this resource is defined
    * @param props dns zone properties
+   * @param resourceOptions Optional settings to control resource behaviour
    * @see [Pulumi Azure Native DNS Zone]{@link https://www.pulumi.com/registry/packages/azure-native/api-docs/network/zone/}
    */
-  public createDnsZone(id: string, scope: CommonAzureConstruct, props: DnsZoneProps) {
+  public createDnsZone(
+    id: string,
+    scope: CommonAzureConstruct,
+    props: DnsZoneProps,
+    resourceOptions?: ResourceOptions
+  ) {
     if (!props) throw `Props undefined for ${id}`
 
     // Get resource group name
@@ -51,7 +58,7 @@ export class AzureDnsManager {
           environment: scope.props.stage,
         },
       },
-      { parent: scope }
+      { parent: scope, ...resourceOptions }
     )
   }
 
@@ -60,9 +67,15 @@ export class AzureDnsManager {
    * @param id scoped id of the resource
    * @param scope scope in which this resource is defined
    * @param props dns a record properties
+   * @param resourceOptions Optional settings to control resource behaviour
    * @see [Pulumi Azure Native DNS Record Set]{@link https://www.pulumi.com/registry/packages/azure-native/api-docs/network/recordset/}
    */
-  public createDnsARecord(id: string, scope: CommonAzureConstruct, props: DnsARecordProps) {
+  public createDnsARecord(
+    id: string,
+    scope: CommonAzureConstruct,
+    props: DnsARecordProps,
+    resourceOptions?: ResourceOptions
+  ) {
     if (!props) throw `Props undefined for ${id}`
 
     return new RecordSet(
@@ -75,7 +88,7 @@ export class AzureDnsManager {
           environment: scope.props.stage,
         },
       },
-      { parent: scope }
+      { parent: scope, ...resourceOptions }
     )
   }
 
@@ -84,9 +97,15 @@ export class AzureDnsManager {
    * @param id scoped id of the resource
    * @param scope scope in which this resource is defined
    * @param props dns cname record properties
+   * @param resourceOptions Optional settings to control resource behaviour
    * @see [Pulumi Azure Native DNS Record Set]{@link https://www.pulumi.com/registry/packages/azure-native/api-docs/network/recordset/}
    */
-  public createDnsCnameRecord(id: string, scope: CommonAzureConstruct, props: DnsCnameRecordProps) {
+  public createDnsCnameRecord(
+    id: string,
+    scope: CommonAzureConstruct,
+    props: DnsCnameRecordProps,
+    resourceOptions?: ResourceOptions
+  ) {
     if (!props) throw `Props undefined for ${id}`
 
     return new RecordSet(
@@ -99,7 +118,7 @@ export class AzureDnsManager {
           environment: scope.props.stage,
         },
       },
-      { parent: scope }
+      { parent: scope, ...resourceOptions }
     )
   }
 
@@ -108,9 +127,15 @@ export class AzureDnsManager {
    * @param id scoped id of the resource
    * @param scope scope in which this resource is defined
    * @param props dns txt record properties
+   * @param resourceOptions Optional settings to control resource behaviour
    * @see [Pulumi Azure Native DNS Record Set]{@link https://www.pulumi.com/registry/packages/azure-native/api-docs/network/recordset/}
    */
-  public createDnsTxtRecord(id: string, scope: CommonAzureConstruct, props: DnsTxtRecordProps) {
+  public createDnsTxtRecord(
+    id: string,
+    scope: CommonAzureConstruct,
+    props: DnsTxtRecordProps,
+    resourceOptions?: ResourceOptions
+  ) {
     if (!props) throw `Props undefined for ${id}`
 
     return new RecordSet(
@@ -123,7 +148,7 @@ export class AzureDnsManager {
           environment: scope.props.stage,
         },
       },
-      { parent: scope }
+      { parent: scope, ...resourceOptions }
     )
   }
 }

package/src/lib/azure/services/eventgrid/main.ts

@@ -1,13 +1,13 @@
 import {
   EventDeliverySchema,
   EventSubscription,
+  GetSystemTopicResult,
   getTopicOutput,
-  GetTopicResult,
   SystemTopic,
   SystemTopicEventSubscription,
   Topic,
 } from '@pulumi/azure-native/eventgrid/index.js'
-import * as pulumi from '@pulumi/pulumi'
+import { Output, ResourceOptions } from '@pulumi/pulumi'
 import { CommonAzureConstruct } from '../../common/index.js'
 import {
   EventgridEventSubscriptionProps,
@@ -40,9 +40,15 @@ export class AzureEventgridManager {
    * @param id scoped id of the resource
    * @param scope scope in which this resource is defined
    * @param props eventgrid topic properties
+   * @param resourceOptions Optional settings to control resource behaviour
    * @see [Pulumi Azure Native Event Grid Topic]{@link https://www.pulumi.com/registry/packages/azure-native/api-docs/eventgrid/topic/}
    */
-  public createEventgridTopic(id: string, scope: CommonAzureConstruct, props: EventgridTopicProps) {
+  public createEventgridTopic(
+    id: string,
+    scope: CommonAzureConstruct,
+    props: EventgridTopicProps,
+    resourceOptions?: ResourceOptions
+  ) {
     if (!props) throw `Props undefined for ${id}`
 
     // Get resource group name
@@ -66,7 +72,7 @@ export class AzureEventgridManager {
           environment: scope.props.stage,
         },
       },
-      { parent: scope }
+      { parent: scope, ...resourceOptions }
     )
   }
 
@@ -75,9 +81,15 @@ export class AzureEventgridManager {
    * @param id scoped id of the resource
    * @param scope scope in which this resource is defined
    * @param props eventgrid topic properties
+   * @param resourceOptions Optional settings to control resource behaviour
    * @see [Pulumi Azure Native Event Grid Topic Lookup]{@link https://www.pulumi.com/registry/packages/azure-native/api-docs/eventgrid/topic/}
    */
-  public resolveEventgridTopic(id: string, scope: CommonAzureConstruct, props: ResolveEventgridTopicProps) {
+  public resolveEventgridTopic(
+    id: string,
+    scope: CommonAzureConstruct,
+    props: ResolveEventgridTopicProps,
+    resourceOptions?: ResourceOptions
+  ) {
     if (!props) throw `Props undefined for ${id}`
 
     return getTopicOutput(
@@ -90,7 +102,7 @@ export class AzureEventgridManager {
           ? scope.resourceNameFormatter.format(scope.props.resourceGroupName)
           : props.resourceGroupName,
       },
-      { parent: scope }
+      { parent: scope, ...resourceOptions }
     )
   }
 
@@ -99,9 +111,15 @@ export class AzureEventgridManager {
    * @param id scoped id of the resource
    * @param scope scope in which this resource is defined
    * @param props eventgrid subscription properties
+   * @param resourceOptions Optional settings to control resource behaviour
    * @see [Pulumi Azure Native Event Grid Event Subscription]{@link https://www.pulumi.com/registry/packages/azure-native/api-docs/eventgrid/eventsubscription/}
    */
-  public createEventgridSubscription(id: string, scope: CommonAzureConstruct, props: EventgridEventSubscriptionProps) {
+  public createEventgridSubscription(
+    id: string,
+    scope: CommonAzureConstruct,
+    props: EventgridEventSubscriptionProps,
+    resourceOptions?: ResourceOptions
+  ) {
     if (!props) throw `Props undefined for ${id}`
 
     return new EventSubscription(
@@ -118,7 +136,7 @@ export class AzureEventgridManager {
           maxDeliveryAttempts: 7,
         },
       },
-      { parent: scope }
+      { parent: scope, ...resourceOptions }
     )
   }
 
@@ -127,12 +145,17 @@ export class AzureEventgridManager {
    * @param id scoped id of the resource
    * @param scope scope in which this resource is defined
    * @param props eventgrid system topic properties
+   * @param resourceOptions Optional settings to control resource behaviour
    * @see [Pulumi Azure Native Event Grid System Topic]{@link https://www.pulumi.com/registry/packages/azure-native/api-docs/eventgrid/systemtopic/}
    */
-  public createEventgridSystemTopic(id: string, scope: CommonAzureConstruct, props: EventgridSystemTopicProps) {
+  public createEventgridSystemTopic(
+    id: string,
+    scope: CommonAzureConstruct,
+    props: EventgridSystemTopicProps,
+    resourceOptions?: ResourceOptions
+  ) {
     if (!props) throw `Props undefined for ${id}`
 
-    // Get resource group name
     const resourceGroupName = scope.props.resourceGroupName
       ? scope.resourceNameFormatter.format(scope.props.resourceGroupName)
       : props.resourceGroupName
@@ -153,7 +176,7 @@ export class AzureEventgridManager {
           environment: scope.props.stage,
         },
       },
-      { parent: scope }
+      { parent: scope, ...resourceOptions }
     )
   }
 
@@ -163,29 +186,24 @@ export class AzureEventgridManager {
    * @param scope scope in which this resource is defined
    * @param props eventgrid system topic subscription properties
    * @param systemTopic The system topic to attach this subscription to
+   * @param resourceOptions Optional settings to control resource behaviour
    * @see [Pulumi Azure Native Event Grid System Topic Event Subscription]{@link https://www.pulumi.com/registry/packages/azure-native/api-docs/eventgrid/systemtopiceventsubscription/}
    */
   public createEventgridSystemTopicEventSubscription(
     id: string,
     scope: CommonAzureConstruct,
     props: EventgridSystemTopicEventSubscriptionProps,
-    systemTopic: SystemTopic | pulumi.Output<GetTopicResult>
+    systemTopic: SystemTopic | Output<GetSystemTopicResult>,
+    resourceOptions?: ResourceOptions
   ) {
     if (!props) throw `Props undefined for ${id}`
 
-    // Get resource group name
-    const resourceGroupName = scope.props.resourceGroupName
+    let resourceGroupName = scope.props.resourceGroupName
       ? scope.resourceNameFormatter.format(scope.props.resourceGroupName)
       : props.resourceGroupName
 
     if (!resourceGroupName) throw `Resource group name undefined for ${id}`
 
-    // Extract system topic name
-    const systemTopicName =
-      systemTopic instanceof SystemTopic
-        ? systemTopic.name
-        : (systemTopic as pulumi.Output<GetTopicResult>).apply(t => t.name)
-
     return new SystemTopicEventSubscription(
       `${id}-ests`,
       {
@@ -194,10 +212,10 @@ export class AzureEventgridManager {
           props.eventSubscriptionName?.toString(),
           scope.props.resourceNameOptions?.eventGridSystemTopicEventSubscription
         ),
-        systemTopicName: systemTopicName,
-        resourceGroupName: resourceGroupName,
+        systemTopicName: systemTopic.name,
+        resourceGroupName: props.resourceGroupName ?? resourceGroupName,
       },
-      { parent: scope }
+      { parent: scope, ...resourceOptions }
     )
   }
 }