granny-devops 0.17.2__tar.gz → 0.17.3__tar.gz

{granny_devops-0.17.2 → granny_devops-0.17.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: granny-devops
-Version: 0.17.2
+Version: 0.17.3
 Summary: Cloud tools collection -- AWS infrastructure, CDN, and DevOps automation
 Author-email: Martin Wieser <martin.wieser@pseekoo.com>
 License: MIT License

{granny_devops-0.17.2 → granny_devops-0.17.3}/granny/__init__.py

@@ -1,6 +1,6 @@
 """Granny -- Cloud tools collection for AWS infrastructure and DevOps automation."""
 
-__version__ = "0.17.2"
+__version__ = "0.17.3"
 __all__ = [
     "get_secret",
     "load_secrets_into_env",

{granny_devops-0.17.2 → granny_devops-0.17.3}/granny/cli/dns.py

@@ -145,6 +145,27 @@ def dns() -> None:
     """Provider-agnostic DNS record management."""
 
 
+@dns.command("create-zone")
+@click.argument("zone")
+@provider_option
+def create_zone_cmd(zone: str, provider: str | None) -> None:
+    """Create zone ZONE at the provider (idempotent).
+
+    Prints the assigned nameservers — point the registrar's NS records at
+    them to activate the zone. Cloudflare requires a token with the
+    account-level ``Zone: Create`` permission.
+    """
+    zone = zone.strip().rstrip(".").lower()
+    if not zone or "." not in zone:
+        raise click.UsageError(f"ZONE must be a registrable domain, got {zone!r}")
+    dns_provider = _provider_instance(provider)
+    try:
+        meta = dns_provider.create_zone(zone)
+    except NotImplementedError as exc:
+        raise click.ClickException(str(exc))
+    click.echo(json.dumps(meta, indent=2))
+
+
 @dns.command("list")
 @provider_option
 @domain_option

{granny_devops-0.17.2 → granny_devops-0.17.3}/granny/dns/base.py

@@ -33,6 +33,18 @@ class DNSProvider(ABC):
             f"{type(self).__name__} does not expose nameservers via API"
         )
 
+    def create_zone(self, zone_name: str) -> dict:
+        """Create ``zone_name`` at the provider (idempotent where supported).
+
+        Returns provider metadata for the zone — at minimum ``id``, ``name``,
+        ``status``, and ``nameservers`` (the pair the registrar must delegate
+        to). Providers whose API has no zone-creation endpoint (or where zones
+        are registrar-managed) keep this default.
+        """
+        raise NotImplementedError(
+            f"{type(self).__name__} does not support zone creation via API"
+        )
+
     @abstractmethod
     def list_records(
         self,

{granny_devops-0.17.2 → granny_devops-0.17.3}/granny/dns/cloudflare.py

@@ -71,6 +71,66 @@ class CloudflareDNSProvider(DNSProvider):
             return []
         return list(result[0].get("name_servers") or [])
 
+    def _account_id(self) -> str:
+        """Resolve the account id the token operates on.
+
+        ``GET /accounts`` needs the Account Settings read scope, which
+        zone-scoped tokens usually lack — fall back to the ``account`` stamped
+        on any zone the token can already see.
+        """
+        try:
+            body = self._request("GET", "/accounts", params={"per_page": 1})
+            result = body.get("result") or []
+            if result:
+                return result[0]["id"]
+        except RuntimeError:
+            pass
+        body = self._request("GET", "/zones", params={"per_page": 1})
+        result = body.get("result") or []
+        if not result:
+            raise RuntimeError(
+                "Cloudflare: cannot resolve account id — token sees no "
+                "accounts and no zones"
+            )
+        return result[0]["account"]["id"]
+
+    @staticmethod
+    def _zone_meta(zone: dict) -> dict:
+        return {
+            "id": zone.get("id"),
+            "name": zone.get("name"),
+            "status": zone.get("status"),
+            "nameservers": list(zone.get("name_servers") or []),
+        }
+
+    def create_zone(self, zone_name: str) -> dict:
+        """Create ``zone_name`` in the token's account (idempotent).
+
+        Requires the account-level ``Zone: Create`` token permission; without
+        it Cloudflare answers 403 ``com.cloudflare.api.account.zone.create``.
+        If the zone already exists in this account, returns it unchanged.
+        """
+        existing = self._request("GET", "/zones", params={"name": zone_name})
+        result = existing.get("result") or []
+        if result:
+            logger.info("Cloudflare: zone %s already exists", zone_name)
+            return self._zone_meta(result[0])
+        body = self._request(
+            "POST",
+            "/zones",
+            json={
+                "name": zone_name,
+                "account": {"id": self._account_id()},
+                "type": "full",
+            },
+        )
+        zone = body.get("result") or {}
+        self._zone_cache[zone_name] = zone.get("id", "")
+        logger.info(
+            "Cloudflare: created zone %s (status %s)", zone_name, zone.get("status")
+        )
+        return self._zone_meta(zone)
+
     def _fqdn(self, zone_id: str, name: str) -> str:
         # Cloudflare's record API uses full FQDN for `name`. The caller passes
         # us a short name relative to the zone, so we need the zone name to

{granny_devops-0.17.2 → granny_devops-0.17.3}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "granny-devops"
-version = "0.17.2"
+version = "0.17.3"
 description = "Cloud tools collection -- AWS infrastructure, CDN, and DevOps automation"
 readme = "README.md"
 license = { file = "LICENSE" }