granny-devops 0.17.3__tar.gz → 0.18.0__tar.gz

{granny_devops-0.17.3 → granny_devops-0.18.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: granny-devops
-Version: 0.17.3
+Version: 0.18.0
 Summary: Cloud tools collection -- AWS infrastructure, CDN, and DevOps automation
 Author-email: Martin Wieser <martin.wieser@pseekoo.com>
 License: MIT License
@@ -215,9 +215,11 @@ Common keys:
 | Provider | Variables |
 |---|---|
 | Bunny | `BUNNY_API_KEY` (+ `BUNNY_API_KEY_<CUSTOMER>` for multi-account) |
+| Airtable | `AIRTABLE_API_KEY` |
 | Cloudflare | `CLOUDFLARE_API_TOKEN` |
 | Hetzner | `HETZNER_S3_ACCESS_KEY`, `HETZNER_S3_SECRET_KEY`, `HETZNER_DNS_API_TOKEN` |
 | Scaleway | `SCW_ACCESS_KEY`, `SCW_SECRET_KEY`, `SCW_DEFAULT_PROJECT_ID` |
+| Knative FaaS API | `OBACHAN_API_KEY`, `OBACHAN_API_BASE_URL` |
 | Mailjet | `MAILJET_API_KEY`, `MAILJET_SECRET_KEY` |
 | deSEC | `DESEC_API_TOKEN` |
 | ClouDNS | `CLOUDNS_AUTH_ID`/`_PASSWORD` (or `_SUB_AUTH_ID`/`_SUB_AUTH_USER`) |
@@ -286,11 +288,30 @@ granny cloudflare d1 create my-app
 granny cloudflare r2 create my-app-media
 granny cloudflare site provision my-app --secret-from-vault MAILJET_API_KEY
 
+# Airtable endpoint maintenance
+granny airtable bases
+granny airtable tables --base app123
+granny airtable find-text --base app123 --table Config --contains old.example.com
+granny airtable replace-text --base app123 --table Config \
+  --field Endpoint --old old.example.com --new new.example.com       # dry run
+granny airtable replace-text --base app123 --table Config \
+  --field Endpoint --old old.example.com --new new.example.com --apply --confirm
+
 # Multi-arch Docker builds with deterministic tags
 granny docker build-base --image myapp-base --hash-file requirements.txt
 
 # Scaleway FaaS
 granny serverless deploy my-fn --source-dir ./dist --namespace my-app
+granny serverless delete-function my-fn --namespace my-app --yes
+
+# Knative FaaS control API (`granny faas` is an alias)
+granny knative list
+granny knative deploy my-fn --image registry.example.com/my-fn:latest \
+  --env LOG_LEVEL=info --min-scale 0 --max-scale 5
+granny knative scale my-fn --max-scale 10
+granny knative logs my-fn --tail 100
+granny knative invoke my-fn --method POST --path /process --body '{"job": 42}'
+granny knative remove my-fn --yes
 
 # Mailjet + WorkMail
 granny email mailjet setup-dns example.com
@@ -381,8 +402,9 @@ granny indexing google https://example.com/job-posting --action URL_UPDATED
 | CDN | Bunny |
 | Edge scripting | Bunny |
 | Object storage | AWS S3, Bunny Storage, Hetzner S3 |
-| Serverless functions | Scaleway FaaS, Scaleway Containers |
+| Serverless functions | Scaleway FaaS, Scaleway Containers, Knative FaaS control API |
 | Workers / KV / D1 / R2 | Cloudflare |
+| Record search and endpoint maintenance | Airtable |
 | Email send infra | Mailjet, AWS SES, AWS WorkMail |
 | AWS inventory | VPCs, Lambdas |
 | Cross-cloud inventory | GPU instances + reservations, credit balances, MTD spend + forecast (AWS, GCP, Azure) |
@@ -419,6 +441,7 @@ load_secrets_into_env()
 ```
 granny/
   cli/           Click command groups (granny <group> <verb>)
+  airtable/     Airtable record search and endpoint maintenance
   analyze/      Cross-cloud inventory (AWS, GCP, Azure)
   authentik/    Authentik admin
   azure/        Azure account, ARM deployments, Cognitive, App Service, VMs, RBAC roles, quota
@@ -432,12 +455,14 @@ granny/
   elk/          Elasticsearch / Kibana security user management
   email/        Mailjet, WorkMail, SES forwarding
   indexing/     IndexNow + Google Indexing API
+  knative/      Knative FaaS control API client
   serverless/   Scaleway FaaS
   storage/      Object storage (AWS / Bunny / Hetzner)
 ```
 
 ## Where to look next
 
+- [`CHANGELOG.md`](CHANGELOG.md) — release history and notable changes.
 - [`Project_Guidelines.md`](Project_Guidelines.md) — contributor toolchain,
   conventions, extension checklists, release flow.
 - [`AGENTS.md`](AGENTS.md) — instructions for AI coding agents working

{granny_devops-0.17.3 → granny_devops-0.18.0}/README.md

@@ -81,9 +81,11 @@ Common keys:
 | Provider | Variables |
 |---|---|
 | Bunny | `BUNNY_API_KEY` (+ `BUNNY_API_KEY_<CUSTOMER>` for multi-account) |
+| Airtable | `AIRTABLE_API_KEY` |
 | Cloudflare | `CLOUDFLARE_API_TOKEN` |
 | Hetzner | `HETZNER_S3_ACCESS_KEY`, `HETZNER_S3_SECRET_KEY`, `HETZNER_DNS_API_TOKEN` |
 | Scaleway | `SCW_ACCESS_KEY`, `SCW_SECRET_KEY`, `SCW_DEFAULT_PROJECT_ID` |
+| Knative FaaS API | `OBACHAN_API_KEY`, `OBACHAN_API_BASE_URL` |
 | Mailjet | `MAILJET_API_KEY`, `MAILJET_SECRET_KEY` |
 | deSEC | `DESEC_API_TOKEN` |
 | ClouDNS | `CLOUDNS_AUTH_ID`/`_PASSWORD` (or `_SUB_AUTH_ID`/`_SUB_AUTH_USER`) |
@@ -152,11 +154,30 @@ granny cloudflare d1 create my-app
 granny cloudflare r2 create my-app-media
 granny cloudflare site provision my-app --secret-from-vault MAILJET_API_KEY
 
+# Airtable endpoint maintenance
+granny airtable bases
+granny airtable tables --base app123
+granny airtable find-text --base app123 --table Config --contains old.example.com
+granny airtable replace-text --base app123 --table Config \
+  --field Endpoint --old old.example.com --new new.example.com       # dry run
+granny airtable replace-text --base app123 --table Config \
+  --field Endpoint --old old.example.com --new new.example.com --apply --confirm
+
 # Multi-arch Docker builds with deterministic tags
 granny docker build-base --image myapp-base --hash-file requirements.txt
 
 # Scaleway FaaS
 granny serverless deploy my-fn --source-dir ./dist --namespace my-app
+granny serverless delete-function my-fn --namespace my-app --yes
+
+# Knative FaaS control API (`granny faas` is an alias)
+granny knative list
+granny knative deploy my-fn --image registry.example.com/my-fn:latest \
+  --env LOG_LEVEL=info --min-scale 0 --max-scale 5
+granny knative scale my-fn --max-scale 10
+granny knative logs my-fn --tail 100
+granny knative invoke my-fn --method POST --path /process --body '{"job": 42}'
+granny knative remove my-fn --yes
 
 # Mailjet + WorkMail
 granny email mailjet setup-dns example.com
@@ -247,8 +268,9 @@ granny indexing google https://example.com/job-posting --action URL_UPDATED
 | CDN | Bunny |
 | Edge scripting | Bunny |
 | Object storage | AWS S3, Bunny Storage, Hetzner S3 |
-| Serverless functions | Scaleway FaaS, Scaleway Containers |
+| Serverless functions | Scaleway FaaS, Scaleway Containers, Knative FaaS control API |
 | Workers / KV / D1 / R2 | Cloudflare |
+| Record search and endpoint maintenance | Airtable |
 | Email send infra | Mailjet, AWS SES, AWS WorkMail |
 | AWS inventory | VPCs, Lambdas |
 | Cross-cloud inventory | GPU instances + reservations, credit balances, MTD spend + forecast (AWS, GCP, Azure) |
@@ -285,6 +307,7 @@ load_secrets_into_env()
 ```
 granny/
   cli/           Click command groups (granny <group> <verb>)
+  airtable/     Airtable record search and endpoint maintenance
   analyze/      Cross-cloud inventory (AWS, GCP, Azure)
   authentik/    Authentik admin
   azure/        Azure account, ARM deployments, Cognitive, App Service, VMs, RBAC roles, quota
@@ -298,12 +321,14 @@ granny/
   elk/          Elasticsearch / Kibana security user management
   email/        Mailjet, WorkMail, SES forwarding
   indexing/     IndexNow + Google Indexing API
+  knative/      Knative FaaS control API client
   serverless/   Scaleway FaaS
   storage/      Object storage (AWS / Bunny / Hetzner)
 ```
 
 ## Where to look next
 
+- [`CHANGELOG.md`](CHANGELOG.md) — release history and notable changes.
 - [`Project_Guidelines.md`](Project_Guidelines.md) — contributor toolchain,
   conventions, extension checklists, release flow.
 - [`AGENTS.md`](AGENTS.md) — instructions for AI coding agents working

{granny_devops-0.17.3 → granny_devops-0.18.0}/granny/__init__.py

@@ -1,6 +1,6 @@
 """Granny -- Cloud tools collection for AWS infrastructure and DevOps automation."""
 
-__version__ = "0.17.3"
+__version__ = "0.18.0"
 __all__ = [
     "get_secret",
     "load_secrets_into_env",

granny_devops-0.18.0/granny/airtable/__init__.py

@@ -0,0 +1,5 @@
+"""Airtable API helpers."""
+
+from granny.airtable.client import AirtableClient
+
+__all__ = ["AirtableClient"]

granny_devops-0.18.0/granny/airtable/client.py

@@ -0,0 +1,113 @@
+"""Small Airtable Web API client used by the granny CLI."""
+from __future__ import annotations
+
+from dataclasses import dataclass
+from typing import Any, Iterable
+from urllib.parse import quote
+
+import requests
+
+from granny.credentials import get_secret
+
+
+@dataclass
+class AirtableClient:
+    api_key: str
+    api_base: str = "https://api.airtable.com/v0"
+    meta_base: str = "https://api.airtable.com/v0/meta"
+
+    @classmethod
+    def from_environment(cls) -> "AirtableClient":
+        api_key = get_secret("AIRTABLE_API_KEY")
+        if not api_key:
+            raise RuntimeError("AIRTABLE_API_KEY is not configured")
+        return cls(api_key=api_key)
+
+    def _request(self, method: str, url: str, **kwargs: Any) -> dict[str, Any]:
+        headers = dict(kwargs.pop("headers", {}) or {})
+        headers.setdefault("Authorization", f"Bearer {self.api_key}")
+        if method.upper() in {"POST", "PATCH", "PUT"}:
+            headers.setdefault("Content-Type", "application/json")
+        resp = requests.request(method, url, headers=headers, timeout=60, **kwargs)
+        if not resp.ok:
+            raise RuntimeError(f"Airtable API error {resp.status_code}: {resp.text[:1000]}")
+        if not resp.content:
+            return {}
+        return resp.json()
+
+    def list_bases(self) -> list[dict[str, Any]]:
+        return list(self._request("GET", f"{self.meta_base}/bases").get("bases", []))
+
+    def list_tables(self, base_id: str) -> list[dict[str, Any]]:
+        return list(self._request("GET", f"{self.meta_base}/bases/{base_id}/tables").get("tables", []))
+
+    def iter_records(
+        self,
+        base_id: str,
+        table: str,
+        *,
+        fields: Iterable[str] | None = None,
+        page_size: int = 100,
+    ):
+        table_path = quote(table, safe="")
+        url = f"{self.api_base}/{base_id}/{table_path}"
+        params: list[tuple[str, str | int]] = [("pageSize", page_size)]
+        for field in fields or ():
+            params.append(("fields[]", field))
+        while True:
+            data = self._request("GET", url, params=params)
+            yield from data.get("records", [])
+            offset = data.get("offset")
+            if not offset:
+                break
+            params = [(k, v) for k, v in params if k != "offset"] + [("offset", offset)]
+
+    def update_record(self, base_id: str, table: str, record_id: str, fields: dict[str, Any]) -> dict[str, Any]:
+        table_path = quote(table, safe="")
+        return self._request(
+            "PATCH",
+            f"{self.api_base}/{base_id}/{table_path}/{record_id}",
+            json={"fields": fields},
+        )
+
+
+def field_contains(value: Any, needle: str) -> bool:
+    return needle in _stringify(value)
+
+
+def replace_in_value(value: Any, old: str, new: str) -> tuple[Any, bool]:
+    """Return value with string occurrences replaced, preserving container shape."""
+    if isinstance(value, str):
+        replaced = value.replace(old, new)
+        return replaced, replaced != value
+    if isinstance(value, list):
+        changed = False
+        out = []
+        for item in value:
+            replaced, item_changed = replace_in_value(item, old, new)
+            out.append(replaced)
+            changed = changed or item_changed
+        return out, changed
+    if isinstance(value, dict):
+        changed = False
+        out = {}
+        for key, item in value.items():
+            replaced, item_changed = replace_in_value(item, old, new)
+            out[key] = replaced
+            changed = changed or item_changed
+        return out, changed
+    return value, False
+
+
+def _stringify(value: Any) -> str:
+    if value is None:
+        return ""
+    if isinstance(value, str):
+        return value
+    if isinstance(value, (int, float, bool)):
+        return str(value)
+    if isinstance(value, list):
+        return "\n".join(_stringify(item) for item in value)
+    if isinstance(value, dict):
+        return "\n".join(f"{key}: {_stringify(item)}" for key, item in value.items())
+    return str(value)

granny_devops-0.18.0/granny/cli/airtable.py

@@ -0,0 +1,107 @@
+"""Airtable operational helpers."""
+from __future__ import annotations
+
+import json
+
+import click
+
+from granny.airtable.client import AirtableClient, field_contains, replace_in_value
+
+
+@click.group()
+def airtable() -> None:
+    """Inspect and update Airtable records."""
+
+
+@airtable.command("bases")
+def list_bases() -> None:
+    """List accessible Airtable bases."""
+    client = AirtableClient.from_environment()
+    for base in client.list_bases():
+        click.echo(f"{base.get('id')}\t{base.get('name')}")
+
+
+@airtable.command("tables")
+@click.option("--base", "base_id", required=True, help="Airtable base id (app...).")
+def list_tables(base_id: str) -> None:
+    """List tables in a base."""
+    client = AirtableClient.from_environment()
+    for table in client.list_tables(base_id):
+        click.echo(f"{table.get('id')}\t{table.get('name')}")
+
+
+@airtable.command("find-text")
+@click.option("--base", "base_id", required=True, help="Airtable base id (app...).")
+@click.option("--table", required=True, help="Table name or table id.")
+@click.option("--contains", "needle", required=True, help="Text/URL fragment to search for.")
+@click.option("--field", "fields", multiple=True, help="Limit search to field(s). Repeatable.")
+@click.option("--json", "as_json", is_flag=True, help="Emit JSON lines.")
+def find_text(base_id: str, table: str, needle: str, fields: tuple[str, ...], as_json: bool) -> None:
+    """Find records whose field values contain text.
+
+    This can find old webhook/API endpoints in record fields, button URL fields,
+    or config tables. Airtable automations/scripts themselves are not exposed by
+    the public Web API; export/edit those manually if they are not represented in
+    records.
+    """
+    client = AirtableClient.from_environment()
+    matches = 0
+    for record in client.iter_records(base_id, table, fields=fields or None):
+        record_fields = record.get("fields", {})
+        haystack = fields or tuple(record_fields.keys())
+        hit_fields = [name for name in haystack if field_contains(record_fields.get(name), needle)]
+        if not hit_fields:
+            continue
+        matches += 1
+        payload = {"id": record.get("id"), "fields": hit_fields}
+        if as_json:
+            click.echo(json.dumps(payload, ensure_ascii=False))
+        else:
+            click.echo(f"{record.get('id')}\t{','.join(hit_fields)}")
+    if matches == 0:
+        click.echo("no matches", err=True)
+
+
+@airtable.command("replace-text")
+@click.option("--base", "base_id", required=True, help="Airtable base id (app...).")
+@click.option("--table", required=True, help="Table name or table id.")
+@click.option("--old", required=True, help="Old text/URL fragment.")
+@click.option("--new", required=True, help="Replacement text/URL fragment.")
+@click.option("--field", "fields", multiple=True, required=True, help="Field(s) to update. Repeatable.")
+@click.option("--dry-run/--apply", default=True, help="Preview changes unless --apply is used.")
+@click.option("--confirm", is_flag=True, help="Required with --apply.")
+def replace_text(
+    base_id: str,
+    table: str,
+    old: str,
+    new: str,
+    fields: tuple[str, ...],
+    dry_run: bool,
+    confirm: bool,
+) -> None:
+    """Replace old endpoint text in selected Airtable record fields."""
+    if not dry_run and not confirm:
+        raise click.UsageError("--apply requires --confirm")
+
+    client = AirtableClient.from_environment()
+    scanned = changed = updated = 0
+    for record in client.iter_records(base_id, table, fields=fields):
+        scanned += 1
+        record_fields = record.get("fields", {})
+        update: dict[str, object] = {}
+        for field in fields:
+            if field not in record_fields:
+                continue
+            value, did_change = replace_in_value(record_fields[field], old, new)
+            if did_change:
+                update[field] = value
+        if not update:
+            continue
+        changed += 1
+        click.echo(f"{record.get('id')}\t{','.join(update.keys())}")
+        if not dry_run:
+            client.update_record(base_id, table, record["id"], update)
+            updated += 1
+
+    mode = "dry-run" if dry_run else "applied"
+    click.echo(f"{mode}: scanned={scanned} changed={changed} updated={updated}")