lnp-devopscli 1.0.0__py3-none-any.whl

dc_cli/groups/gl.py

@@ -0,0 +1,300 @@
+"""Grupo: dc gl - GitLab commands."""
+
+from __future__ import annotations
+
+import os
+import sys
+
+import click
+
+from ..utils.config import get_section, load_dotenv
+from ..utils.gitlab import GitLabAPI
+
+
+def _get_api() -> GitLabAPI:
+    """Retorna GitLabAPI instanciado com config + token do .env."""
+    load_dotenv()
+    gl_config = get_section("gl")
+    token = os.environ.get("GITLAB_LNP_TOKEN")
+    if not token:
+        click.echo(
+            "[ERRO] GITLAB_LNP_TOKEN nao definido.\n"
+            "  Exporte a variavel ou adicione no .env.",
+            err=True,
+        )
+        sys.exit(1)
+    return GitLabAPI(host=gl_config["host"], token=token)
+
+
+def _get_group_id(group: str | None) -> int:
+    """Resolve group_id do --group ou do default_group no config."""
+    gl_config = get_section("gl")
+    target = group or gl_config.get("default_group")
+    if not target:
+        raise click.ClickException(
+            "Nenhum grupo especificado. Use --group ou configure gl.default_group no config.yaml."
+        )
+    api = _get_api()
+    return api.resolve_group_id(target)
+
+
+def _get_project_id(project: str | None) -> int:
+    """Resolve project_id do --project ou do default_project no config."""
+    gl_config = get_section("gl")
+    target = project or gl_config.get("default_project")
+    if not target:
+        raise click.ClickException(
+            "Nenhum projeto especificado. Use --project ou configure gl.default_project no config.yaml."
+        )
+    api = _get_api()
+    return api.resolve_project_id(target)
+
+
+@click.group(name="gl")
+def gl_group():
+    """GitLab — deploy tokens, grupos e mais."""
+
+
+# ─── dc gl token ────────────────────────────────────────
+
+
+@gl_group.group(name="token")
+def token_group():
+    """Gerencia deploy tokens e project access tokens do GitLab."""
+
+
+@token_group.command(name="create")
+@click.argument("token_type")
+@click.option(
+    "--group", "-g", default=None, help="Group ID ou path (default: config.yaml)"
+)
+def token_create(token_type, group):
+    """Cria deploy token do tipo definido em config.yaml.
+
+    \b
+    Tipos disponiveis sao definidos em config.yaml (gl.token_types).
+    Exemplo: dc gl token create image-pull
+    """
+    gl_config = get_section("gl")
+    token_types = gl_config.get("token_types", {})
+
+    if token_type not in token_types:
+        available = ", ".join(token_types.keys()) if token_types else "(nenhum)"
+        raise click.ClickException(
+            f"Tipo '{token_type}' nao encontrado. Disponiveis: {available}"
+        )
+
+    token_def = token_types[token_type]
+    token_name = token_def["name"]
+    scopes = token_def["scopes"]
+
+    api = _get_api()
+    target = group or gl_config.get("default_group")
+    if not target:
+        raise click.ClickException("Nenhum grupo especificado.")
+
+    click.echo(f"[>] Resolvendo grupo '{target}'...")
+    group_id = api.resolve_group_id(target)
+    click.echo(f"    id: {group_id}")
+
+    click.echo(
+        f"[>] Criando deploy token '{token_name}' com scopes: {', '.join(scopes)}"
+    )
+    result = api.create_deploy_token(group_id, token_name, scopes)
+
+    username = result.get("username", "?")
+    token_value = result.get("token", "?")
+
+    click.echo(f"\n[OK] Deploy token criado:")
+    click.echo(f"  Username: {username}")
+    click.echo(f"  Token:    {token_value}")
+    click.echo(f"\n  Para usar no k8s:")
+    click.echo(f"  kubectl create secret docker-registry gitlab-registry \\")
+    click.echo(f"    --docker-server=registry.gitlab.com \\")
+    click.echo(f'    --docker-username="{username}" \\')
+    click.echo(f'    --docker-password="{token_value}" \\')
+    click.echo(f"    -n <namespace>")
+
+
+@token_group.command(name="list")
+@click.option(
+    "--group", "-g", default=None, help="Group ID ou path (default: config.yaml)"
+)
+def token_list(group):
+    """Lista deploy tokens existentes no grupo."""
+    api = _get_api()
+    group_id = _get_group_id(group)
+
+    click.echo(f"[>] Listando deploy tokens do grupo {group_id}...")
+    tokens = api.list_deploy_tokens(group_id)
+
+    if not tokens:
+        click.echo("[i] Nenhum deploy token encontrado.")
+        return
+
+    click.echo(f"\n{'ID':<10} {'Nome':<30} {'Username':<35} {'Scopes'}")
+    click.echo("-" * 100)
+    for t in tokens:
+        tid = t.get("id", "?")
+        name = t.get("name", "?")
+        username = t.get("username", "?")
+        scopes = ", ".join(t.get("scopes", []))
+        click.echo(f"{tid:<10} {name:<30} {username:<35} {scopes}")
+
+
+@token_group.command(name="revoke")
+@click.argument("token_id", type=int)
+@click.option(
+    "--group", "-g", default=None, help="Group ID ou path (default: config.yaml)"
+)
+@click.confirmation_option(prompt="Tem certeza que deseja revogar este token?")
+def token_revoke(token_id, group):
+    """Revoga um deploy token pelo ID."""
+    api = _get_api()
+    group_id = _get_group_id(group)
+
+    click.echo(f"[>] Revogando token {token_id} do grupo {group_id}...")
+    api.revoke_deploy_token(group_id, token_id)
+    click.echo(f"[OK] Token {token_id} revogado.")
+
+
+@token_group.command(name="create-project")
+@click.argument("token_type")
+@click.option(
+    "--project",
+    "project_arg",
+    "-p",
+    default=None,
+    help="Project ID ou path (default: config.yaml)",
+)
+def token_create_project(token_type, project_arg):
+    """Cria project access token do tipo definido em config.yaml.
+
+    \b
+    Tipos disponiveis sao definidos em config.yaml (gl.project_token_types).
+    Exemplo: dc gl token create-project tf-state
+    """
+    gl_config = get_section("gl")
+    token_types = gl_config.get("project_token_types", {})
+
+    if token_type not in token_types:
+        available = ", ".join(token_types.keys()) if token_types else "(nenhum)"
+        raise click.ClickException(
+            f"Tipo '{token_type}' nao encontrado. Disponiveis: {available}"
+        )
+
+    token_def = token_types[token_type]
+    token_name = token_def["name"]
+    scopes = token_def["scopes"]
+    access_level = token_def.get("access_level")
+    expires_at = token_def.get("expires_at")
+
+    api = _get_api()
+    target = project_arg or gl_config.get("default_project")
+    if not target:
+        raise click.ClickException("Nenhum projeto especificado.")
+
+    click.echo(f"[>] Resolvendo projeto '{target}'...")
+    project_id = api.resolve_project_id(target)
+    click.echo(f"    id: {project_id}")
+
+    click.echo(
+        f"[>] Criando project access token '{token_name}' com scopes: {', '.join(scopes)}"
+    )
+    result = api.create_project_access_token(
+        project_id,
+        token_name,
+        scopes,
+        access_level=access_level,
+        expires_at=expires_at,
+    )
+
+    token_value = result.get("token", "?")
+    username = result.get("username") or "oauth2"
+
+    click.echo("\n[OK] Project access token criado:")
+    click.echo(f"  Username: {username}")
+    click.echo(f"  Token:    {token_value}")
+    click.echo("\n  Para Terraform backend (GitLab state):")
+    click.echo(f"  TF_HTTP_USERNAME={username}")
+    click.echo(f"  TF_HTTP_PASSWORD={token_value}")
+
+
+@token_group.command(name="list-project")
+@click.option(
+    "--project",
+    "project_arg",
+    "-p",
+    default=None,
+    help="Project ID ou path (default: config.yaml)",
+)
+def token_list_project(project_arg):
+    """Lista project access tokens existentes no projeto."""
+    api = _get_api()
+    project_id = _get_project_id(project_arg)
+
+    click.echo(f"[>] Listando project access tokens do projeto {project_id}...")
+    tokens = api.list_project_access_tokens(project_id)
+
+    if not tokens:
+        click.echo("[i] Nenhum project access token encontrado.")
+        return
+
+    click.echo(f"\n{'ID':<10} {'Nome':<35} {'Scopes'}")
+    click.echo("-" * 100)
+    for t in tokens:
+        tid = t.get("id", "?")
+        name = t.get("name", "?")
+        scopes = ", ".join(t.get("scopes", []))
+        click.echo(f"{tid:<10} {name:<35} {scopes}")
+
+
+@token_group.command(name="revoke-project")
+@click.argument("token_id", type=int)
+@click.option(
+    "--project",
+    "project_arg",
+    "-p",
+    default=None,
+    help="Project ID ou path (default: config.yaml)",
+)
+@click.confirmation_option(prompt="Tem certeza que deseja revogar este project token?")
+def token_revoke_project(token_id, project_arg):
+    """Revoga um project access token pelo ID."""
+    api = _get_api()
+    project_id = _get_project_id(project_arg)
+
+    click.echo(f"[>] Revogando project token {token_id} do projeto {project_id}...")
+    api.revoke_project_access_token(project_id, token_id)
+    click.echo(f"[OK] Project token {token_id} revogado.")
+
+
+# ─── dc gl group-id ─────────────────────────────────────
+
+
+@gl_group.command(name="group-id")
+@click.argument("search")
+def group_id(search):
+    """Busca group_id pelo nome/path.
+
+    \b
+    Exemplo:
+      dc gl group-id lnp-consulting-ti
+      dc gl group-id lnp-consulting-ti/saas
+    """
+    api = _get_api()
+
+    click.echo(f"[>] Buscando grupo '{search}'...")
+    try:
+        gid = api.resolve_group_id(search)
+        click.echo(f"[OK] {search} -> id: {gid}")
+    except click.ClickException:
+        # Mostrar resultados parciais
+        groups = api.search_groups(search)
+        if groups:
+            click.echo(f"\nResultados para '{search}':")
+            for g in groups[:10]:
+                click.echo(f"  {g['full_path']:<50} id: {g['id']}")
+        else:
+            click.echo(f"[ERRO] Nenhum grupo encontrado para '{search}'.", err=True)
+            sys.exit(1)