qontract-reconcile 0.10.2.dev57__py3-none-any.whl → 0.10.2.dev59__py3-none-any.whl

tools/qontract_cli.py

@@ -10,7 +10,6 @@ import sys
 import tempfile
 import textwrap
 from collections import defaultdict
-from collections.abc import Callable, Mapping
 from datetime import (
     UTC,
     datetime,
@@ -20,7 +19,7 @@ from operator import itemgetter
 from pathlib import Path
 from statistics import median
 from textwrap import dedent
-from typing import Any
+from typing import TYPE_CHECKING, Any, cast
 
 import boto3
 import click
@@ -55,6 +54,7 @@ from reconcile.change_owners.bundle import NoOpFileDiffResolver
 from reconcile.change_owners.change_log_tracking import (
     BUNDLE_DIFFS_OBJ,
     ChangeLog,
+    ChangeLogItem,
 )
 from reconcile.change_owners.change_owners import (
     fetch_change_type_processors,
@@ -81,7 +81,6 @@ from reconcile.gql_definitions.app_sre_tekton_access_revalidation.roles import (
 from reconcile.gql_definitions.common.app_interface_vault_settings import (
     AppInterfaceSettingsV1,
 )
-from reconcile.gql_definitions.common.clusters import ClusterSpecROSAV1
 from reconcile.gql_definitions.fragments.aus_organization import AUSOCMOrganization
 from reconcile.gql_definitions.integrations import integrations as integrations_gql
 from reconcile.gql_definitions.maintenance import maintenances as maintenances_gql
@@ -153,7 +152,6 @@ from reconcile.utils.oc_map import (
     init_oc_map_from_clusters,
 )
 from reconcile.utils.ocm import OCM_PRODUCT_ROSA, OCMMap
-from reconcile.utils.ocm.upgrades import get_upgrade_policies
 from reconcile.utils.ocm_base_client import init_ocm_base_client
 from reconcile.utils.output import print_output
 from reconcile.utils.saasherder.models import TargetSpec
@@ -186,8 +184,13 @@ from tools.sre_checkpoints import (
     get_latest_sre_checkpoints,
 )
 
+if TYPE_CHECKING:
+    from mypy_boto3_s3.type_defs import CopySourceTypeDef
+else:
+    CopySourceTypeDef = object
 
-def output(function: Callable) -> Callable:
+
+def output(function):
     function = click.option(
         "--output",
         "-o",
@@ -198,14 +201,14 @@ def output(function: Callable) -> Callable:
     return function
 
 
-def sort(function: Callable) -> Callable:
+def sort(function):
     function = click.option(
         "--sort", "-s", help="sort output", default=True, type=bool
     )(function)
     return function
 
 
-def to_string(function: Callable) -> Callable:
+def to_string(function):
     function = click.option(
         "--to-string", help="stringify output", default=False, type=bool
     )(function)
@@ -215,14 +218,14 @@ def to_string(function: Callable) -> Callable:
 @click.group()
 @config_file
 @click.pass_context
-def root(ctx: click.Context, configfile: str) -> None:
+def root(ctx, configfile):
     ctx.ensure_object(dict)
     config.init_from_toml(configfile)
     gql.init_from_config()
 
 
 @root.result_callback()
-def exit_cli(ctx: click.Context, configfile: str) -> None:
+def exit_cli(ctx, configfile):
     GqlApiSingleton.close()
 
 
@@ -231,7 +234,7 @@ def exit_cli(ctx: click.Context, configfile: str) -> None:
 @sort
 @to_string
 @click.pass_context
-def get(ctx: click.Context, output: str, sort: bool, to_string: bool) -> None:
+def get(ctx, output, sort, to_string):
     ctx.obj["options"] = {
         "output": output,
         "sort": sort,
@@ -242,7 +245,7 @@ def get(ctx: click.Context, output: str, sort: bool, to_string: bool) -> None:
 @root.group()
 @output
 @click.pass_context
-def describe(ctx: click.Context, output: str) -> None:
+def describe(ctx, output):
     ctx.obj["options"] = {
         "output": output,
     }
@@ -250,7 +253,7 @@ def describe(ctx: click.Context, output: str) -> None:
 
 @get.command()
 @click.pass_context
-def settings(ctx: click.Context) -> None:
+def settings(ctx):
     settings = queries.get_app_interface_settings()
     columns = ["vault", "kubeBinary", "mergeRequestGateway"]
     print_output(ctx.obj["options"], [settings], columns)
@@ -259,7 +262,7 @@ def settings(ctx: click.Context) -> None:
 @get.command()
 @click.argument("name", default="")
 @click.pass_context
-def aws_accounts(ctx: click.Context, name: str) -> None:
+def aws_accounts(ctx, name):
     accounts = queries.get_aws_accounts(name=name)
     if not accounts:
         print("no aws accounts found")
@@ -271,7 +274,7 @@ def aws_accounts(ctx: click.Context, name: str) -> None:
 @get.command()
 @click.argument("name", default="")
 @click.pass_context
-def clusters(ctx: click.Context, name: str) -> None:
+def clusters(ctx, name):
     clusters = queries.get_clusters()
     if name:
         clusters = [c for c in clusters if c["name"] == name]
@@ -288,7 +291,7 @@ def clusters(ctx: click.Context, name: str) -> None:
 @get.command()
 @click.argument("name", default="")
 @click.pass_context
-def cluster_upgrades(ctx: click.Context, name: str) -> None:
+def cluster_upgrades(ctx, name):
     settings = queries.get_app_interface_settings()
 
     clusters = queries.get_clusters()
@@ -319,11 +322,12 @@ def cluster_upgrades(ctx: click.Context, name: str) -> None:
         if data.get("upgradePolicy") == "automatic":
             data["schedule"] = c["upgradePolicy"]["schedule"]
             ocm = ocm_map.get(c["name"])
-            upgrade_policy = get_upgrade_policies(ocm.ocm_api, c["spec"]["id"])
-            if upgrade_policy and len(upgrade_policy) > 0:
-                next_run = upgrade_policy[0].get("next_run")
-                if next_run:
-                    data["next_run"] = next_run
+            if ocm:
+                upgrade_policy = ocm.get_upgrade_policies(c["name"])
+                if upgrade_policy and len(upgrade_policy) > 0:
+                    next_run = upgrade_policy[0].get("next_run")
+                    if next_run:
+                        data["next_run"] = next_run
         else:
             data["upgradePolicy"] = "manual"
 
@@ -337,7 +341,7 @@ def cluster_upgrades(ctx: click.Context, name: str) -> None:
 @get.command()
 @environ(["APP_INTERFACE_STATE_BUCKET", "APP_INTERFACE_STATE_BUCKET_ACCOUNT"])
 @click.pass_context
-def version_history(ctx: click.Context) -> None:
+def version_history(ctx):
     import reconcile.aus.ocm_upgrade_scheduler as ous
 
     clusters = aus_clusters_query(query_func=gql.get_api().query).clusters or []
@@ -373,11 +377,11 @@ def version_history(ctx: click.Context) -> None:
 
 def get_upgrade_policies_data(
     org_upgrade_specs: list[OrganizationUpgradeSpec],
-    md_output: bool,
-    integration: str,
-    workload: str | None = None,
-    show_only_soaking_upgrades: bool = False,
-    by_workload: bool = False,
+    md_output,
+    integration,
+    workload=None,
+    show_only_soaking_upgrades=False,
+    by_workload=False,
 ) -> list:
     if not org_upgrade_specs:
         return []
@@ -558,12 +562,12 @@ more than 6 hours will be highlighted.
 )
 @click.pass_context
 def cluster_upgrade_policies(
-    ctx: click.Context,
-    cluster: str | None = None,
-    workload: str | None = None,
-    show_only_soaking_upgrades: bool = False,
-    by_workload: bool = False,
-) -> None:
+    ctx,
+    cluster=None,
+    workload=None,
+    show_only_soaking_upgrades=False,
+    by_workload=False,
+):
     print(
         "https://grafana.app-sre.devshift.net/d/ukLXCSwVz/aus-cluster-upgrade-overview"
     )
@@ -578,7 +582,9 @@ def inherit_version_data_text(org: AUSOCMOrganization) -> str:
 
 @get.command()
 @click.pass_context
-def ocm_fleet_upgrade_policies(ctx: click.Context) -> None:
+def ocm_fleet_upgrade_policies(
+    ctx,
+):
     from reconcile.aus.ocm_upgrade_scheduler_org import (
         OCMClusterUpgradeSchedulerOrgIntegration,
     )
@@ -611,12 +617,7 @@ def ocm_fleet_upgrade_policies(ctx: click.Context) -> None:
     help="Ignore STS clusters",
 )
 @click.pass_context
-def aus_fleet_upgrade_policies(
-    ctx: click.Context,
-    ocm_env: str | None,
-    ocm_org_ids: str | None,
-    ignore_sts_clusters: bool,
-) -> None:
+def aus_fleet_upgrade_policies(ctx, ocm_env, ocm_org_ids, ignore_sts_clusters):
     from reconcile.aus.advanced_upgrade_service import AdvancedUpgradeServiceIntegration
 
     parsed_ocm_org_ids = set(ocm_org_ids.split(",")) if ocm_org_ids else None
@@ -633,8 +634,8 @@ def aus_fleet_upgrade_policies(
 
 
 def generate_fleet_upgrade_policices_report(
-    ctx: click.Context, aus_integration: AdvancedUpgradeSchedulerBaseIntegration
-) -> None:
+    ctx, aus_integration: AdvancedUpgradeSchedulerBaseIntegration
+):
     md_output = ctx.obj["options"]["output"] == "md"
 
     org_upgrade_specs: dict[str, OrganizationUpgradeSpec] = {}
@@ -952,7 +953,7 @@ def upgrade_cluster_addon(
         )
 
 
-def has_cluster_account_access(cluster: dict[str, Any]) -> bool:
+def has_cluster_account_access(cluster: dict[str, Any]):
     spec = cluster.get("spec") or {}
     account = spec.get("account")
     return account or cluster.get("awsInfrastructureManagementAccounts") is not None
@@ -961,7 +962,7 @@ def has_cluster_account_access(cluster: dict[str, Any]) -> bool:
 @get.command()
 @click.argument("name", default="")
 @click.pass_context
-def clusters_network(ctx: click.Context, name: str) -> None:
+def clusters_network(ctx, name):
     settings = queries.get_app_interface_settings()
     clusters = [
         c
@@ -1011,6 +1012,7 @@ def clusters_network(ctx: click.Context, name: str) -> None:
             ]
         with AWSApi(1, [account], settings=settings, init_users=False) as aws_api:
             vpc_id, _, _, _ = aws_api.get_cluster_vpc_details(account)
+            assert vpc_id
             cluster["vpc_id"] = vpc_id
             egress_ips = aws_api.get_cluster_nat_gateways_egress_ips(account, vpc_id)
             cluster["egress_ips"] = ", ".join(sorted(egress_ips))
@@ -1023,7 +1025,7 @@ def clusters_network(ctx: click.Context, name: str) -> None:
 
 @get.command()
 @click.pass_context
-def network_reservations(ctx: click.Context) -> None:
+def network_reservations(ctx) -> None:
     from reconcile.typed_queries.reserved_networks import get_networks
 
     columns = [
@@ -1036,10 +1038,11 @@ def network_reservations(ctx: click.Context) -> None:
     ]
     network_table = []
 
-    def md_link(url: str) -> str:
+    def md_link(url) -> str:
         if ctx.obj["options"]["output"] == "md":
             return f"[{url}]({url})"
-        return url
+        else:
+            return url
 
     for network in get_networks():
         parentAddress = "none"
@@ -1080,7 +1083,7 @@ def network_reservations(ctx: click.Context) -> None:
     default=24,
 )
 @click.pass_context
-def cidr_blocks(ctx: click.Context, for_cluster: int, mask: int) -> None:
+def cidr_blocks(ctx, for_cluster: int, mask: int) -> None:
     import ipaddress
 
     from reconcile.typed_queries.aws_vpcs import get_aws_vpcs
@@ -1206,7 +1209,7 @@ def ocm_aws_infrastructure_access_switch_role_links_data() -> list[dict]:
 
 @get.command()
 @click.pass_context
-def ocm_aws_infrastructure_access_switch_role_links_flat(ctx: click.Context) -> None:
+def ocm_aws_infrastructure_access_switch_role_links_flat(ctx):
     results = ocm_aws_infrastructure_access_switch_role_links_data()
     columns = ["cluster", "user_arn", "access_level", "switch_role_link"]
     print_output(ctx.obj["options"], results, columns)
@@ -1214,11 +1217,11 @@ def ocm_aws_infrastructure_access_switch_role_links_flat(ctx: click.Context) ->
 
 @get.command()
 @click.pass_context
-def ocm_aws_infrastructure_access_switch_role_links(ctx: click.Context) -> None:
+def ocm_aws_infrastructure_access_switch_role_links(ctx):
     if ctx.obj["options"]["output"] != "md":
         raise Exception(f"Unupported output: {ctx.obj['options']['output']}")
     results = ocm_aws_infrastructure_access_switch_role_links_data()
-    by_user: dict = {}
+    by_user = {}
     for r in results:
         by_user.setdefault(r["user"], []).append(r)
     columns = ["cluster", "source_login", "access_level", "switch_role_link"]
@@ -1232,7 +1235,7 @@ def ocm_aws_infrastructure_access_switch_role_links(ctx: click.Context) -> None:
 
 @get.command()
 @click.pass_context
-def clusters_aws_account_ids(ctx: click.Context) -> None:
+def clusters_aws_account_ids(ctx):
     settings = queries.get_app_interface_settings()
     clusters = [c for c in queries.get_clusters() if c.get("ocm") is not None]
     ocm_map = OCMMap(clusters=clusters, settings=settings)
@@ -1262,7 +1265,7 @@ def clusters_aws_account_ids(ctx: click.Context) -> None:
 @root.command()
 @click.argument("account_name")
 @click.pass_context
-def user_credentials_migrate_output(ctx: click.Context, account_name: str) -> None:
+def user_credentials_migrate_output(ctx, account_name) -> None:
     accounts = queries.get_state_aws_accounts()
     state = init_state(integration="account-notifier")
     skip_accounts, appsre_pgp_key, _ = tfu.get_reencrypt_settings()
@@ -1304,7 +1307,7 @@ def user_credentials_migrate_output(ctx: click.Context, account_name: str) -> No
 
 @get.command()
 @click.pass_context
-def aws_route53_zones(ctx: click.Context) -> None:
+def aws_route53_zones(ctx):
     zones = queries.get_dns_zones()
 
     results = []
@@ -1327,7 +1330,7 @@ def aws_route53_zones(ctx: click.Context) -> None:
 @click.argument("cluster_name")
 @click.option("--cluster-admin/--no-cluster-admin", default=False)
 @click.pass_context
-def bot_login(ctx: click.Context, cluster_name: str, cluster_admin: bool) -> None:
+def bot_login(ctx, cluster_name, cluster_admin):
     settings = queries.get_app_interface_settings()
     secret_reader = SecretReader(settings=settings)
     clusters = queries.get_clusters()
@@ -1350,7 +1353,7 @@ def bot_login(ctx: click.Context, cluster_name: str, cluster_admin: bool) -> Non
 )
 @click.argument("org_name")
 @click.pass_context
-def ocm_login(ctx: click.Context, org_name: str) -> None:
+def ocm_login(ctx, org_name):
     settings = queries.get_app_interface_settings()
     secret_reader = SecretReader(settings=settings)
     ocms = [
@@ -1377,7 +1380,7 @@ def ocm_login(ctx: click.Context, org_name: str) -> None:
 )
 @click.argument("account_name")
 @click.pass_context
-def aws_creds(ctx: click.Context, account_name: str) -> None:
+def aws_creds(ctx, account_name):
     settings = queries.get_app_interface_settings()
     secret_reader = SecretReader(settings=settings)
     accounts = queries.get_aws_accounts(name=account_name)
@@ -1420,14 +1423,8 @@ def aws_creds(ctx: click.Context, account_name: str) -> None:
 )
 @click.pass_context
 def copy_tfstate(
-    ctx: click.Context,
-    source_bucket: str,
-    source_object_path: str,
-    account_uid: str,
-    rename: str | None,
-    region: str | None,
-    force: bool,
-) -> None:
+    ctx, source_bucket, source_object_path, account_uid, rename, region, force
+):
     settings = queries.get_app_interface_settings()
     secret_reader = SecretReader(settings=settings)
     accounts = queries.get_aws_accounts(uid=account_uid, terraform_state=True)
@@ -1448,6 +1445,7 @@ def copy_tfstate(
         )
         return
 
+    dest_filename = ""
     if rename:
         dest_filename = rename.removesuffix(".tfstate")
     else:
@@ -1459,10 +1457,13 @@ def copy_tfstate(
     with AWSApi(1, accounts, settings, secret_reader) as aws:
         session = aws.get_session(account["name"])
         s3_client = aws.get_session_client(session, "s3", region)
-        copy_source = {
-            "Bucket": source_bucket,
-            "Key": source_object_path,
-        }
+        copy_source = cast(
+            CopySourceTypeDef,
+            {
+                "Bucket": source_bucket,
+                "Key": source_object_path,
+            },
+        )
 
         dest_pretty_path = f"s3://{dest_bucket}/{dest_key}"
         # check if dest already exists
@@ -1505,26 +1506,20 @@ def copy_tfstate(
 @get.command(short_help='obtain "rosa create cluster" command by cluster name')
 @click.argument("cluster_name")
 @click.pass_context
-def rosa_create_cluster_command(ctx: click.Context, cluster_name: str) -> None:
+def rosa_create_cluster_command(ctx, cluster_name):
     clusters = [c for c in get_clusters() if c.name == cluster_name]
-    if not clusters:
+    try:
+        cluster = clusters[0]
+    except IndexError:
         print(f"{cluster_name} not found.")
         sys.exit(1)
-    cluster = clusters[0]
 
-    if (
-        not cluster.spec
-        or cluster.spec.product != OCM_PRODUCT_ROSA
-        or not isinstance(cluster.spec, ClusterSpecROSAV1)
-    ):
+    if cluster.spec.product != OCM_PRODUCT_ROSA:
         print("must be a rosa cluster.")
         sys.exit(1)
 
     settings = queries.get_app_interface_settings()
     account = cluster.spec.account
-    if not account:
-        print("account not found.")
-        sys.exit(1)
 
     if account.billing_account:
         billing_account = account.billing_account.uid
@@ -1534,19 +1529,6 @@ def rosa_create_cluster_command(ctx: click.Context, cluster_name: str) -> None:
         ) as aws_api:
             billing_account = aws_api.get_organization_billing_account(account.name)
 
-    if not cluster.spec.oidc_endpoint_url:
-        print("oidc_endpoint_url not set.")
-        sys.exit(1)
-    if not cluster.spec.subnet_ids:
-        print("subnet_ids not set.")
-        sys.exit(1)
-    if not cluster.network:
-        print("network not set.")
-        sys.exit(1)
-    if not cluster.machine_pools:
-        print("machine_pools not set.")
-        sys.exit(1)
-
     print(
         " ".join([
             "rosa create cluster",
@@ -1600,9 +1582,7 @@ def rosa_create_cluster_command(ctx: click.Context, cluster_name: str) -> None:
 @click.argument("jumphost_hostname", required=False)
 @click.argument("cluster_name", required=False)
 @click.pass_context
-def sshuttle_command(
-    ctx: click.Context, jumphost_hostname: str | None, cluster_name: str | None
-) -> None:
+def sshuttle_command(ctx, jumphost_hostname: str | None, cluster_name: str | None):
     jumphosts_query_data = queries.get_jumphosts(hostname=jumphost_hostname)
     jumphosts = jumphosts_query_data.jumphosts or []
     for jh in jumphosts:
@@ -1624,9 +1604,7 @@ def sshuttle_command(
 @click.argument("instance_name")
 @click.argument("job_name")
 @click.pass_context
-def jenkins_job_vault_secrets(
-    ctx: click.Context, instance_name: str, job_name: str
-) -> None:
+def jenkins_job_vault_secrets(ctx, instance_name: str, job_name: str) -> None:
     secret_reader = SecretReader(queries.get_secret_reader_settings())
     jjb: JJB = init_jjb(secret_reader, instance_name, config_name=None, print_only=True)
     jobs = jjb.get_all_jobs([job_name], instance_name)[instance_name]
@@ -1651,7 +1629,7 @@ def jenkins_job_vault_secrets(
 @get.command()
 @click.argument("name", default="")
 @click.pass_context
-def namespaces(ctx: click.Context, name: str) -> None:
+def namespaces(ctx, name):
     namespaces = queries.get_namespaces()
     if name:
         namespaces = [ns for ns in namespaces if ns["name"] == name]
@@ -1663,7 +1641,7 @@ def namespaces(ctx: click.Context, name: str) -> None:
     print_output(ctx.obj["options"], namespaces, columns)
 
 
-def add_resource(item: dict, resource: Mapping, columns: list[str]) -> None:
+def add_resource(item, resource, columns):
     provider = resource["provider"]
     if provider not in columns:
         columns.append(provider)
@@ -1674,11 +1652,11 @@ def add_resource(item: dict, resource: Mapping, columns: list[str]) -> None:
 
 @get.command
 @click.pass_context
-def cluster_openshift_resources(ctx: click.Context) -> None:
+def cluster_openshift_resources(ctx):
     gqlapi = gql.get_api()
     namespaces = gqlapi.query(orb.NAMESPACES_QUERY)["namespaces"]
     columns = ["name", "total"]
-    results: dict = {}
+    results = {}
     for ns_info in namespaces:
         cluster_name = ns_info["cluster"]["name"]
         item = {"name": cluster_name, "total": 0}
@@ -1699,10 +1677,10 @@ def cluster_openshift_resources(ctx: click.Context) -> None:
 
 @get.command
 @click.pass_context
-def aws_terraform_resources(ctx: click.Context) -> None:
+def aws_terraform_resources(ctx):
     namespaces = tfr.get_namespaces()
     columns = ["name", "total"]
-    results: dict = {}
+    results = {}
     for ns_info in namespaces:
         specs = (
             get_external_resource_specs(
@@ -1754,7 +1732,7 @@ def rds_region(
 
 @get.command
 @click.pass_context
-def rds(ctx: click.Context) -> None:
+def rds(ctx):
     namespaces = tfr.get_namespaces()
     accounts = {a["name"]: a for a in queries.get_aws_accounts()}
     results = []
@@ -1832,7 +1810,7 @@ You can view the source of this Markdown to extract the JSON data.
 
 @get.command
 @click.pass_context
-def rds_recommendations(ctx: click.Context) -> None:
+def rds_recommendations(ctx):
     IGNORED_STATUSES = ("resolved",)
     IGNORED_SEVERITIES = ("informational",)
 
@@ -1881,23 +1859,23 @@ def rds_recommendations(ctx: click.Context) -> None:
             with AWSApi(1, [account], settings=settings, init_users=False) as aws:
                 try:
                     data = aws.describe_rds_recommendations(account_name, region)
-                    recommendations = data.get("DBRecommendations", [])
+                    db_recommendations = data.get("DBRecommendations", [])
                 except Exception as e:
                     logging.error(f"Error describing RDS recommendations: {e}")
                     continue
 
                 # Add field ResourceName infered from ResourceArn
                 recommendations = [
-                    {**rec, "ResourceName": rec["ResourceArn"].split(":")[-1]}
-                    for rec in recommendations
+                    {
+                        **rec,
+                        "ResourceName": rec["ResourceArn"].split(":")[-1],
+                        # The Description field has \n that are causing issues with the markdown table
+                        "Description": rec["Description"].replace("\n", " "),
+                    }
+                    for rec in db_recommendations
                     if rec.get("Status") not in IGNORED_STATUSES
                     and rec.get("Severity") not in IGNORED_SEVERITIES
                 ]
-                # The Description field has \n that are causing issues with the markdown table
-                recommendations = [
-                    {**rec, "Description": rec["Description"].replace("\n", " ")}
-                    for rec in recommendations
-                ]
                 # If we have no recommendations to show, skip
                 if not recommendations:
                     continue
@@ -1911,7 +1889,7 @@ def rds_recommendations(ctx: click.Context) -> None:
 
 @get.command()
 @click.pass_context
-def products(ctx: click.Context) -> None:
+def products(ctx):
     products = queries.get_products()
     columns = ["name", "description"]
     print_output(ctx.obj["options"], products, columns)
@@ -1920,7 +1898,7 @@ def products(ctx: click.Context) -> None:
 @describe.command()
 @click.argument("name")
 @click.pass_context
-def product(ctx: click.Context, name: str) -> None:
+def product(ctx, name):
     products = queries.get_products()
     products = [p for p in products if p["name"].lower() == name.lower()]
     if len(products) != 1:
@@ -1935,7 +1913,7 @@ def product(ctx: click.Context, name: str) -> None:
 
 @get.command()
 @click.pass_context
-def environments(ctx: click.Context) -> None:
+def environments(ctx):
     environments = queries.get_environments()
     columns = ["name", "description", "product.name"]
     # TODO(mafriedm): fix this
@@ -1947,7 +1925,7 @@ def environments(ctx: click.Context) -> None:
 @describe.command()
 @click.argument("name")
 @click.pass_context
-def environment(ctx: click.Context, name: str) -> None:
+def environment(ctx, name):
     environments = queries.get_environments()
     environments = [e for e in environments if e["name"].lower() == name.lower()]
     if len(environments) != 1:
@@ -1965,7 +1943,7 @@ def environment(ctx: click.Context, name: str) -> None:
 
 @get.command()
 @click.pass_context
-def services(ctx: click.Context) -> None:
+def services(ctx):
     apps = queries.get_apps()
     columns = ["name", "path", "onboardingStatus"]
     print_output(ctx.obj["options"], apps, columns)
@@ -1973,15 +1951,17 @@ def services(ctx: click.Context) -> None:
 
 @get.command()
 @click.pass_context
-def repos(ctx: click.Context) -> None:
+def repos(ctx):
     repos = queries.get_repos()
-    print_output(ctx.obj["options"], [{"url": r} for r in repos], ["url"])
+    repos = [{"url": r} for r in repos]
+    columns = ["url"]
+    print_output(ctx.obj["options"], repos, columns)
 
 
 @get.command()
 @click.argument("org_username")
 @click.pass_context
-def roles(ctx: click.Context, org_username: str) -> None:
+def roles(ctx, org_username):
     users = queries.get_roles()
     users = [u for u in users if u["org_username"] == org_username]
 
@@ -1992,7 +1972,7 @@ def roles(ctx: click.Context, org_username: str) -> None:
     user = users[0]
 
     # type, name, resource, [ref]
-    roles: dict[tuple[str, str, str], set[str]] = defaultdict(set)
+    roles: dict[(str, str, str), set] = defaultdict(set)
 
     for role in user["roles"]:
         role_name = role["path"]
@@ -2046,7 +2026,7 @@ def roles(ctx: click.Context, org_username: str) -> None:
 @get.command()
 @click.argument("org_username", default="")
 @click.pass_context
-def users(ctx: click.Context, org_username: str) -> None:
+def users(ctx, org_username):
     users = queries.get_users()
     if org_username:
         users = [u for u in users if u["org_username"] == org_username]
@@ -2057,7 +2037,7 @@ def users(ctx: click.Context, org_username: str) -> None:
 
 @get.command()
 @click.pass_context
-def integrations(ctx: click.Context) -> None:
+def integrations(ctx):
     environments = queries.get_integrations()
     columns = ["name", "description"]
     print_output(ctx.obj["options"], environments, columns)
@@ -2065,7 +2045,7 @@ def integrations(ctx: click.Context) -> None:
 
 @get.command()
 @click.pass_context
-def quay_mirrors(ctx: click.Context) -> None:
+def quay_mirrors(ctx):
     apps = queries.get_quay_repos()
 
     mirrors = []
@@ -2103,9 +2083,7 @@ def quay_mirrors(ctx: click.Context) -> None:
 @click.argument("kind")
 @click.argument("name")
 @click.pass_context
-def root_owner(
-    ctx: click.Context, cluster: str, namespace: str, kind: str, name: str
-) -> None:
+def root_owner(ctx, cluster, namespace, kind, name):
     settings = queries.get_app_interface_settings()
     clusters = [c for c in queries.get_clusters(minimal=True) if c["name"] == cluster]
     oc_map = OC_Map(
@@ -2135,9 +2113,7 @@ def root_owner(
 @click.argument("aws_account")
 @click.argument("identifier")
 @click.pass_context
-def service_owners_for_rds_instance(
-    ctx: click.Context, aws_account: str, identifier: str
-) -> None:
+def service_owners_for_rds_instance(ctx, aws_account, identifier):
     namespaces = queries.get_namespaces()
     service_owners = []
     for namespace_info in namespaces:
@@ -2159,7 +2135,7 @@ def service_owners_for_rds_instance(
 
 @get.command()
 @click.pass_context
-def sre_checkpoints(ctx: click.Context) -> None:
+def sre_checkpoints(ctx):
     apps = queries.get_apps()
 
     parent_apps = {app["parentApp"]["path"] for app in apps if app.get("parentApp")}
@@ -2183,14 +2159,13 @@ def sre_checkpoints(ctx: click.Context) -> None:
 
 @get.command()
 @click.pass_context
-def app_interface_merge_queue(ctx: click.Context) -> None:
+def app_interface_merge_queue(ctx):
     import reconcile.gitlab_housekeeping as glhk
 
     settings = queries.get_app_interface_settings()
     instance = queries.get_gitlab_instance()
     gl = GitLabApi(instance, project_url=settings["repoUrl"], settings=settings)
-    state = init_state(integration=glhk.QONTRACT_INTEGRATION)
-    merge_requests = glhk.get_merge_requests(True, gl, state=state)
+    merge_requests = glhk.get_merge_requests(True, gl, state=None)
 
     columns = [
         "id",
@@ -2225,7 +2200,7 @@ def app_interface_merge_queue(ctx: click.Context) -> None:
 
 @get.command()
 @click.pass_context
-def app_interface_review_queue(ctx: click.Context) -> None:
+def app_interface_review_queue(ctx) -> None:
     import reconcile.gitlab_housekeeping as glhk
 
     settings = queries.get_app_interface_settings()
@@ -2242,7 +2217,7 @@ def app_interface_review_queue(ctx: click.Context) -> None:
         "labels",
     ]
 
-    def get_mrs(repo: str, url: str) -> list[dict[str, str]]:
+    def get_mrs(repo, url) -> list[dict[str, str]]:
         gl = GitLabApi(instance, project_url=url, settings=settings)
         merge_requests = gl.get_merge_requests(state=MRState.OPENED)
         try:
@@ -2263,7 +2238,7 @@ def app_interface_review_queue(ctx: click.Context) -> None:
             }:
                 continue
 
-            labels = mr.attributes.get("labels")
+            labels = mr.attributes.get("labels") or []
             if glhk.is_good_to_merge(labels):
                 continue
             if "stale" in labels:
@@ -2337,7 +2312,7 @@ def app_interface_review_queue(ctx: click.Context) -> None:
 
 @get.command()
 @click.pass_context
-def app_interface_open_selfserviceable_mr_queue(ctx: click.Context) -> None:
+def app_interface_open_selfserviceable_mr_queue(ctx):
     settings = queries.get_app_interface_settings()
     instance = queries.get_gitlab_instance()
     gl = GitLabApi(instance, project_url=settings["repoUrl"], settings=settings)
@@ -2358,7 +2333,7 @@ def app_interface_open_selfserviceable_mr_queue(ctx: click.Context) -> None:
             continue
 
         # skip stale or non self serviceable MRs
-        labels = mr.attributes.get("labels")
+        labels = mr.attributes.get("labels", [])
         if "stale" in labels:
             continue
         if SELF_SERVICEABLE not in labels and SAAS_FILE_UPDATE not in labels:
@@ -2400,7 +2375,7 @@ def app_interface_open_selfserviceable_mr_queue(ctx: click.Context) -> None:
 
 @get.command()
 @click.pass_context
-def change_types(ctx: click.Context) -> None:
+def change_types(ctx) -> None:
     """List all change types."""
     change_types = fetch_change_type_processors(gql.get_api(), NoOpFileDiffResolver())
 
@@ -2425,7 +2400,7 @@ def change_types(ctx: click.Context) -> None:
 
 @get.command()
 @click.pass_context
-def app_interface_merge_history(ctx: click.Context) -> None:
+def app_interface_merge_history(ctx):
     settings = queries.get_app_interface_settings()
     instance = queries.get_gitlab_instance()
     gl = GitLabApi(instance, project_url=settings["repoUrl"], settings=settings)
@@ -2447,7 +2422,7 @@ def app_interface_merge_history(ctx: click.Context) -> None:
             "id": f"[{mr.iid}]({mr.web_url})",
             "title": mr.title,
             "merged_at": mr.merged_at,
-            "labels": ", ".join(mr.attributes.get("labels")),
+            "labels": ", ".join(mr.attributes.get("labels", [])),
         }
         merge_queue_data.append(item)
 
@@ -2462,7 +2437,7 @@ def app_interface_merge_history(ctx: click.Context) -> None:
 )
 @use_jump_host()
 @click.pass_context
-def selectorsyncset_managed_resources(ctx: click.Context, use_jump_host: bool) -> None:
+def selectorsyncset_managed_resources(ctx, use_jump_host):
     vault_settings = get_app_interface_vault_settings()
     secret_reader = create_secret_reader(use_vault=vault_settings.vault)
     clusters = get_clusters()
@@ -2520,9 +2495,7 @@ def selectorsyncset_managed_resources(ctx: click.Context, use_jump_host: bool) -
 )
 @use_jump_host()
 @click.pass_context
-def selectorsyncset_managed_hypershift_resources(
-    ctx: click.Context, use_jump_host: bool
-) -> None:
+def selectorsyncset_managed_hypershift_resources(ctx, use_jump_host):
     vault_settings = get_app_interface_vault_settings()
     secret_reader = create_secret_reader(use_vault=vault_settings.vault)
     clusters = get_clusters()
@@ -2600,12 +2573,7 @@ def selectorsyncset_managed_hypershift_resources(
     default=os.environ.get("QONTRACT_CLI_EC2_JENKINS_WORKER_AWS_REGION", "us-east-1"),
 )
 @click.pass_context
-def ec2_jenkins_workers(
-    ctx: click.Context,
-    aws_access_key_id: str,
-    aws_secret_access_key: str,
-    aws_region: str,
-) -> None:
+def ec2_jenkins_workers(ctx, aws_access_key_id, aws_secret_access_key, aws_region):
     """Prints a list of jenkins workers and their status."""
     if not aws_access_key_id or not aws_secret_access_key:
         raise click.ClickException(
@@ -2652,9 +2620,9 @@ def ec2_jenkins_workers(
             url = ""
             for t in instance.tags:
                 if t.get("Key") == "os":
-                    os = t["Value"]
+                    os = t.get("Value")
                 if t.get("Key") == "jenkins_controller":
-                    url = f"https://{t['Value'].replace('-', '.')}.devshift.net/computer/{instance.id}"
+                    url = f"https://{t.get('Value').replace('-', '.')}.devshift.net/computer/{instance.id}"
             image = ec2.Image(instance.image_id)
             commit_url = ""
             for t in image.tags:
@@ -2681,7 +2649,7 @@ def ec2_jenkins_workers(
 @get.command()
 @click.argument("status-board-instance")
 @click.pass_context
-def slo_document_services(ctx: click.Context, status_board_instance: str) -> None:
+def slo_document_services(ctx, status_board_instance):
     """Print SLO Documents Services"""
     columns = [
         "slo_doc_name",
@@ -2710,7 +2678,7 @@ def slo_document_services(ctx: click.Context, status_board_instance: str) -> Non
     slodocs = []
     for slodoc in get_slo_documents():
         products = [ns.namespace.environment.product.name for ns in slodoc.namespaces]
-        for slo in slodoc.slos or []:
+        for slo in slodoc.slos:
             for product in products:
                 if slodoc.app.parent_app:
                     app = f"{slodoc.app.parent_app.name}-{slodoc.app.name}"
@@ -2736,7 +2704,7 @@ def slo_document_services(ctx: click.Context, status_board_instance: str) -> Non
                     "target_unit": slo.slo_target_unit,
                     "window": slo.slo_parameters.window,
                     "statusBoardService": f"{product}/{slodoc.app.name}/{slo.name}",
-                    "statusBoardEnabled": "statusBoard" in (slodoc.labels or {}),
+                    "statusBoardEnabled": "statusBoard" in slodoc.labels,
                 }
                 slodocs.append(item)
 
@@ -2746,7 +2714,7 @@ def slo_document_services(ctx: click.Context, status_board_instance: str) -> Non
 @get.command()
 @click.argument("file_path")
 @click.pass_context
-def alerts(ctx: click.Context, file_path: str) -> None:
+def alerts(ctx, file_path):
     BIG_NUMBER = 10
 
     def sort_by_threshold(item: dict[str, str]) -> int:
@@ -2820,7 +2788,7 @@ def alerts(ctx: click.Context, file_path: str) -> None:
 @get.command()
 @click.pass_context
 @thread_pool_size(default=5)
-def aws_cost_report(ctx: click.Context, thread_pool_size: int) -> None:
+def aws_cost_report(ctx, thread_pool_size):
     command = AwsCostReportCommand.create(thread_pool_size=thread_pool_size)
     print(command.execute())
 
@@ -2828,7 +2796,7 @@ def aws_cost_report(ctx: click.Context, thread_pool_size: int) -> None:
 @get.command()
 @click.pass_context
 @thread_pool_size(default=5)
-def openshift_cost_report(ctx: click.Context, thread_pool_size: int) -> None:
+def openshift_cost_report(ctx, thread_pool_size):
     command = OpenShiftCostReportCommand.create(thread_pool_size=thread_pool_size)
     print(command.execute())
 
@@ -2836,9 +2804,7 @@ def openshift_cost_report(ctx: click.Context, thread_pool_size: int) -> None:
 @get.command()
 @click.pass_context
 @thread_pool_size(default=5)
-def openshift_cost_optimization_report(
-    ctx: click.Context, thread_pool_size: int
-) -> None:
+def openshift_cost_optimization_report(ctx, thread_pool_size):
     command = OpenShiftCostOptimizationReportCommand.create(
         thread_pool_size=thread_pool_size
     )
@@ -2847,7 +2813,7 @@ def openshift_cost_optimization_report(
 
 @get.command()
 @click.pass_context
-def osd_component_versions(ctx: click.Context) -> None:
+def osd_component_versions(ctx):
     osd_environments = [
         e["name"] for e in queries.get_environments() if e["product"]["name"] == "OSDv4"
     ]
@@ -2883,7 +2849,7 @@ def osd_component_versions(ctx: click.Context) -> None:
 
 @get.command()
 @click.pass_context
-def maintenances(ctx: click.Context) -> None:
+def maintenances(ctx):
     now = datetime.now(UTC)
     maintenances = maintenances_gql.query(gql.get_api().query).maintenances or []
     data = [
@@ -2946,7 +2912,7 @@ class MigrationStatusCount:
 
 @get.command()
 @click.pass_context
-def hcp_migration_status(ctx: click.Context) -> None:
+def hcp_migration_status(ctx):
     counts: dict[str, MigrationStatusCount] = {}
     total_count = MigrationStatusCount("total")
     saas_files = get_saas_files()
@@ -2985,7 +2951,7 @@ def hcp_migration_status(ctx: click.Context) -> None:
 
 @get.command()
 @click.pass_context
-def systems_and_tools(ctx: click.Context) -> None:
+def systems_and_tools(ctx):
     print(
         f"This report is obtained from app-interface Graphql endpoint available at: {config.get_config()['graphql']['server']}"
     )
@@ -2999,7 +2965,7 @@ def systems_and_tools(ctx: click.Context) -> None:
     "--environment_name", default="production", help="environment to get logs from"
 )
 @click.pass_context
-def logs(ctx: click.Context, integration_name: str, environment_name: str) -> None:
+def logs(ctx, integration_name: str, environment_name: str):
     integrations = [
         i
         for i in integrations_gql.query(query_func=gql.get_api().query).integrations
@@ -3038,7 +3004,7 @@ def logs(ctx: click.Context, integration_name: str, environment_name: str) -> No
 
 @get.command
 @click.pass_context
-def jenkins_jobs(ctx: click.Context) -> None:
+def jenkins_jobs(ctx):
     jenkins_configs = queries.get_jenkins_configs()
 
     # stats dicts
@@ -3108,9 +3074,9 @@ You can view the source of this Markdown to extract the JSON data.
 
 @get.command
 @click.pass_context
-def container_image_details(ctx: click.Context) -> None:
+def container_image_details(ctx):
     apps = get_apps_quay_repos_escalation_policies()
-    data: list[dict[str, str | list[str]]] = []
+    data: list[dict[str, str]] = []
     for app in apps:
         app_name = f"{app.parent_app.name}/{app.name}" if app.parent_app else app.name
         ep_channels = app.escalation_policy.channels
@@ -3122,7 +3088,7 @@ def container_image_details(ctx: click.Context) -> None:
                 if repo.mirror:
                     continue
                 repository = f"quay.io/{org_name}/{repo.name}"
-                item: dict[str, str | list[str]] = {
+                item = {
                     "app": app_name,
                     "repository": repository,
                     "email": email,
@@ -3135,25 +3101,27 @@ def container_image_details(ctx: click.Context) -> None:
 
 @get.command
 @click.pass_context
-def change_log_tracking(ctx: click.Context) -> None:
+def change_log_tracking(ctx):
     repo_url = get_app_interface_repo_url()
     change_types = fetch_change_type_processors(gql.get_api(), NoOpFileDiffResolver())
     state = init_state(integration=cl.QONTRACT_INTEGRATION)
     change_log = ChangeLog(**state.get(BUNDLE_DIFFS_OBJ))
     data: list[dict[str, str]] = []
-    for change_log_item in change_log.items:
+    for item in change_log.items:
+        change_log_item = ChangeLogItem(**item)
         commit = change_log_item.commit
         covered_change_types_descriptions = [
             ct.description
             for ct in change_types
             if ct.name in change_log_item.change_types
         ]
-        data.append({
+        item = {
             "commit": f"[{commit[:7]}]({repo_url}/commit/{commit})",
             "merged_at": change_log_item.merged_at,
             "apps": ", ".join(change_log_item.apps),
             "changes": ", ".join(covered_change_types_descriptions),
-        })
+        }
+        data.append(item)
 
     # TODO(mafriedm): Fix this
     ctx.obj["options"]["sort"] = False
@@ -3164,7 +3132,7 @@ def change_log_tracking(ctx: click.Context) -> None:
 @root.group(name="set")
 @output
 @click.pass_context
-def set_command(ctx: click.Context, output: str) -> None:
+def set_command(ctx, output):
     ctx.obj["output"] = output
 
 
@@ -3173,9 +3141,7 @@ def set_command(ctx: click.Context, output: str) -> None:
 @click.argument("usergroup")
 @click.argument("username")
 @click.pass_context
-def slack_usergroup(
-    ctx: click.Context, workspace: str, usergroup: str, username: str
-) -> None:
+def slack_usergroup(ctx, workspace, usergroup, username):
     """Update users in a slack usergroup.
     Use an org_username as the username.
     To empty a slack usergroup, pass '' (empty string) as the username.
@@ -3183,8 +3149,6 @@ def slack_usergroup(
     settings = queries.get_app_interface_settings()
     slack = slackapi_from_queries("qontract-cli")
     ugid = slack.get_usergroup_id(usergroup)
-    if not ugid:
-        raise click.ClickException(f"Usergroup {usergroup} not found.")
     if username:
         mail_address = settings["smtp"]["mailAddress"]
         users = [slack.get_user_id_by_name(username, mail_address)]
@@ -3193,17 +3157,33 @@ def slack_usergroup(
     slack.update_usergroup_users(ugid, users)
 
 
+@set_command.command()
+@click.argument("org_name")
+@click.argument("cluster_name")
+@click.pass_context
+def cluster_admin(ctx, org_name, cluster_name):
+    settings = queries.get_app_interface_settings()
+    ocms = [
+        o for o in queries.get_openshift_cluster_managers() if o["name"] == org_name
+    ]
+    ocm_map = OCMMap(ocms=ocms, settings=settings)
+    ocm = ocm_map[org_name]
+    enabled = ocm.is_cluster_admin_enabled(cluster_name)
+    if not enabled:
+        ocm.enable_cluster_admin(cluster_name)
+
+
 @root.group()
 @environ(["APP_INTERFACE_STATE_BUCKET"])
 @click.pass_context
-def state(ctx: click.Context) -> None:
+def state(ctx):
     pass
 
 
 @state.command()
 @click.argument("integration", default="")
 @click.pass_context
-def ls(ctx: click.Context, integration: str) -> None:
+def ls(ctx, integration):
     state = init_state(integration=integration)
     keys = state.ls()
     # if integration in not defined the 2th token will be the integration name
@@ -3224,7 +3204,7 @@ def ls(ctx: click.Context, integration: str) -> None:
 @click.argument("integration")
 @click.argument("key")
 @click.pass_context
-def state_get(ctx: click.Context, integration: str, key: str) -> None:
+def state_get(ctx, integration, key):
     state = init_state(integration=integration)
     value = state.get(key)
     print(value)
@@ -3234,7 +3214,7 @@ def state_get(ctx: click.Context, integration: str, key: str) -> None:
 @click.argument("integration")
 @click.argument("key")
 @click.pass_context
-def add(ctx: click.Context, integration: str, key: str) -> None:
+def add(ctx, integration, key):
     state = init_state(integration=integration)
     state.add(key)
 
@@ -3244,7 +3224,7 @@ def add(ctx: click.Context, integration: str, key: str) -> None:
 @click.argument("key")
 @click.argument("value")
 @click.pass_context
-def state_set(ctx: click.Context, integration: str, key: str, value: str) -> None:
+def state_set(ctx, integration, key, value):
     state = init_state(integration=integration)
     state.add(key, value=value, force=True)
 
@@ -3253,7 +3233,7 @@ def state_set(ctx: click.Context, integration: str, key: str, value: str) -> Non
 @click.argument("integration")
 @click.argument("key")
 @click.pass_context
-def rm(ctx: click.Context, integration: str, key: str) -> None:
+def rm(ctx, integration, key):
     state = init_state(integration=integration)
     state.rm(key)
 
@@ -3261,7 +3241,7 @@ def rm(ctx: click.Context, integration: str, key: str) -> None:
 @root.group()
 @environ(["APP_INTERFACE_STATE_BUCKET"])
 @click.pass_context
-def early_exit_cache(ctx: click.Context) -> None:
+def early_exit_cache(ctx):
     pass
 
 
@@ -3297,13 +3277,13 @@ def early_exit_cache(ctx: click.Context) -> None:
 )
 @click.pass_context
 def early_exit_cache_head(
-    ctx: click.Context,
-    integration: str,
-    integration_version: str,
-    dry_run: bool,
-    cache_source: str,
-    shard: str,
-) -> None:
+    ctx,
+    integration,
+    integration_version,
+    dry_run,
+    cache_source,
+    shard,
+):
     with EarlyExitCache.build() as cache:
         cache_key = CacheKey(
             integration=integration,
@@ -3349,13 +3329,13 @@ def early_exit_cache_head(
 )
 @click.pass_context
 def early_exit_cache_get(
-    ctx: click.Context,
-    integration: str,
-    integration_version: str,
-    dry_run: bool,
-    cache_source: str,
-    shard: str,
-) -> None:
+    ctx,
+    integration,
+    integration_version,
+    dry_run,
+    cache_source,
+    shard,
+):
     with EarlyExitCache.build() as cache:
         cache_key = CacheKey(
             integration=integration,
@@ -3432,18 +3412,18 @@ def early_exit_cache_get(
 )
 @click.pass_context
 def early_exit_cache_set(
-    ctx: click.Context,
-    integration: str,
-    integration_version: str,
-    dry_run: bool,
-    cache_source: str,
-    shard: str,
-    payload: str,
-    log_output: str,
-    applied_count: int,
-    ttl: int,
-    latest_cache_source_digest: str,
-) -> None:
+    ctx,
+    integration,
+    integration_version,
+    dry_run,
+    cache_source,
+    shard,
+    payload,
+    log_output,
+    applied_count,
+    ttl,
+    latest_cache_source_digest,
+):
     with EarlyExitCache.build() as cache:
         cache_key = CacheKey(
             integration=integration,
@@ -3492,13 +3472,13 @@ def early_exit_cache_set(
 )
 @click.pass_context
 def early_exit_cache_delete(
-    ctx: click.Context,
-    integration: str,
-    integration_version: str,
-    dry_run: bool,
-    cache_source_digest: str,
-    shard: str,
-) -> None:
+    ctx,
+    integration,
+    integration_version,
+    dry_run,
+    cache_source_digest,
+    shard,
+):
     with EarlyExitCache.build() as cache:
         cache_key_with_digest = CacheKeyWithDigest(
             integration=integration,
@@ -3529,33 +3509,25 @@ def early_exit_cache_delete(
     type=click.Choice(["config", "vault"]),
 )
 @click.pass_context
-def template(
-    ctx: click.Context,
-    cluster: str,
-    namespace: str,
-    kind: str,
-    name: str,
-    path: str,
-    secret_reader: str,
-) -> None:
+def template(ctx, cluster, namespace, kind, name, path, secret_reader):
     gqlapi = gql.get_api()
     namespaces = gqlapi.query(orb.NAMESPACES_QUERY)["namespaces"]
-    namespaces_info = [
+    namespace_info = [
         n
         for n in namespaces
         if n["cluster"]["name"] == cluster and n["name"] == namespace
     ]
-    if len(namespaces_info) != 1:
+    if len(namespace_info) != 1:
         print(f"{cluster}/{namespace} error")
         sys.exit(1)
 
-    namespace_info = namespaces_info[0]
     settings = queries.get_app_interface_settings()
     settings["vault"] = secret_reader == "vault"
 
     if path and path.startswith("resources"):
         path = path.replace("resources", "", 1)
 
+    [namespace_info] = namespace_info
     ob.aggregate_shared_resources(namespace_info, "openshiftResources")
     openshift_resources = namespace_info.get("openshiftResources")
     for r in openshift_resources:
@@ -3596,9 +3568,7 @@ def template(
     type=click.Choice(["config", "vault"]),
 )
 @click.pass_context
-def run_prometheus_test(
-    ctx: click.Context, path: str, cluster: str, namespace: str, secret_reader: str
-) -> None:
+def run_prometheus_test(ctx, path, cluster, namespace, secret_reader):
     """Run prometheus tests for the rule associated with the test in the PATH from given
     CLUSTER/NAMESPACE"""
 
@@ -3684,17 +3654,17 @@ def run_prometheus_test(
 )
 @click.pass_context
 def alert_to_receiver(
-    ctx: click.Context,
-    cluster: str,
-    namespace: str,
-    rules_path: str,
-    alert_name: str,
-    alertmanager_secret_path: str,
-    alertmanager_namespace: str,
-    alertmanager_secret_key: str,
-    secret_reader: str,
-    additional_label: list[str],
-) -> None:
+    ctx,
+    cluster,
+    namespace,
+    rules_path,
+    alert_name,
+    alertmanager_secret_path,
+    alertmanager_namespace,
+    alertmanager_secret_key,
+    secret_reader,
+    additional_label,
+):
     additional_labels = {}
     for al in additional_label:
         try:
@@ -3786,12 +3756,12 @@ def alert_to_receiver(
             print(f"Cannot find alert {alert_name} in rules {rules_path}")
             sys.exit(1)
 
-    for label in alert_labels:
-        result = amtool.config_routes_test(am_config, label)
+    for al in alert_labels:
+        result = amtool.config_routes_test(am_config, al)
         if not result:
             print(f"Error running amtool: {result}")
             sys.exit(1)
-        print("|".join([label["alertname"], str(result)]))
+        print("|".join([al["alertname"], str(result)]))
 
 
 @root.command()
@@ -3799,12 +3769,7 @@ def alert_to_receiver(
 @click.option("--saas-file-name", default=None, help="saas-file to act on.")
 @click.option("--env-name", default=None, help="environment to use for parameters.")
 @click.pass_context
-def saas_dev(
-    ctx: click.Context,
-    app_name: str | None = None,
-    saas_file_name: str | None = None,
-    env_name: str | None = None,
-) -> None:
+def saas_dev(ctx, app_name=None, saas_file_name=None, env_name=None) -> None:
     if not env_name:
         print("env-name must be defined")
         return
@@ -3852,7 +3817,7 @@ def saas_dev(
 @click.option("--app-name", default=None, help="app to act on.")
 @click.pass_context
 def saas_targets(
-    ctx: click.Context, saas_file_name: str | None = None, app_name: str | None = None
+    ctx, saas_file_name: str | None = None, app_name: str | None = None
 ) -> None:
     """Resolve namespaceSelectors and print all resulting targets of a saas file."""
     console = Console()
@@ -3916,7 +3881,7 @@ def saas_targets(
     default="json",
     type=click.Choice(["json", "yaml"]),
 )
-def query(output: str, query: str) -> None:
+def query(output, query):
     """Run a raw GraphQL query"""
     gqlapi = gql.get_api()
     result = gqlapi.query(query)
@@ -3930,7 +3895,7 @@ def query(output: str, query: str) -> None:
 @root.command()
 @click.argument("cluster")
 @click.argument("query")
-def promquery(cluster: str, query: str) -> None:
+def promquery(cluster, query):
     """Run a PromQL query"""
     config_data = config.get_config()
     auth = {"path": config_data["promql-auth"]["secret_path"], "field": "token"}
@@ -3981,13 +3946,8 @@ def promquery(cluster: str, query: str) -> None:
     default=False,
 )
 def sre_checkpoint_metadata(
-    app_path: str,
-    parent_ticket: str,
-    jiraboard: str,
-    jiradef: str,
-    create_parent_ticket: bool,
-    dry_run: bool,
-) -> None:
+    app_path, parent_ticket, jiraboard, jiradef, create_parent_ticket, dry_run
+):
     """Check an app path for checkpoint-related metadata."""
     data = queries.get_app_metadata(app_path)
     settings = queries.get_app_interface_settings()
@@ -4026,13 +3986,8 @@ def sre_checkpoint_metadata(
     required=True,
 )
 def gpg_encrypt(
-    vault_path: str,
-    vault_secret_version: str,
-    file_path: str,
-    openshift_path: str,
-    output: str,
-    for_user: str,
-) -> None:
+    vault_path, vault_secret_version, file_path, openshift_path, output, for_user
+):
     """
     Encrypt the specified secret (local file, vault or openshift) with a
     given users gpg key. This is intended for easily sharing secrets with
@@ -4055,7 +4010,7 @@ def gpg_encrypt(
 @click.option("--channel", help="the channel that state is part of")
 @click.option("--sha", help="the commit sha we want state for")
 @environ(["APP_INTERFACE_STATE_BUCKET"])
-def get_promotion_state(channel: str, sha: str) -> None:
+def get_promotion_state(channel: str, sha: str):
     from tools.saas_promotion_state.saas_promotion_state import (
         SaasPromotionState,
     )
@@ -4080,7 +4035,7 @@ def get_promotion_state(channel: str, sha: str) -> None:
 @click.option("--sha", help="the commit sha we want state for")
 @click.option("--publisher-id", help="the publisher id we want state for")
 @environ(["APP_INTERFACE_STATE_BUCKET"])
-def mark_promotion_state_successful(channel: str, sha: str, publisher_id: str) -> None:
+def mark_promotion_state_successful(channel: str, sha: str, publisher_id: str):
     from tools.saas_promotion_state.saas_promotion_state import (
         SaasPromotionState,
     )
@@ -4104,9 +4059,7 @@ def mark_promotion_state_successful(channel: str, sha: str, publisher_id: str) -
     help="filesystem path to a local app-interface repo",
     default=os.environ.get("APP_INTERFACE_PATH", None),
 )
-def test_change_type(
-    change_type_name: str, role_name: str, app_interface_path: str
-) -> None:
+def test_change_type(change_type_name: str, role_name: str, app_interface_path: str):
     from reconcile.change_owners import tester
 
     # tester.test_change_type(change_type_name, datafile_path)
@@ -4115,7 +4068,7 @@ def test_change_type(
 
 @root.group()
 @click.pass_context
-def sso_client(ctx: click.Context) -> None:
+def sso_client(ctx):
     """SSO client commands"""
 
 
@@ -4151,7 +4104,7 @@ def sso_client(ctx: click.Context) -> None:
 )
 @click.pass_context
 def create(
-    ctx: click.Context,
+    ctx,
     client_name: str,
     contact_email: str,
     keycloak_instance_vault_path: str,
@@ -4185,7 +4138,7 @@ def create(
 @sso_client.command()
 @click.argument("sso-client-vault-secret-path", required=True)
 @click.pass_context
-def remove(ctx: click.Context, sso_client_vault_secret_path: str) -> None:
+def remove(ctx, sso_client_vault_secret_path: str):
     """Remove an existing SSO client"""
     vault_settings = get_app_interface_vault_settings()
     secret_reader = create_secret_reader(use_vault=vault_settings.vault)
@@ -4232,12 +4185,8 @@ def remove(ctx: click.Context, sso_client_vault_secret_path: str) -> None:
 )
 @click.pass_context
 def external_resources(
-    ctx: click.Context,
-    provision_provider: str,
-    provisioner: str,
-    provider: str,
-    identifier: str,
-) -> None:
+    ctx, provision_provider: str, provisioner: str, provider: str, identifier: str
+):
     """External resources commands"""
     ctx.obj["provision_provider"] = provision_provider
     ctx.obj["provisioner"] = provisioner
@@ -4249,7 +4198,7 @@ def external_resources(
 
 @external_resources.command()
 @click.pass_context
-def get_input(ctx: click.Context) -> None:
+def get_input(ctx):
     """Gets the input data for an external resource asset. Input data is what is used
     in the Reconciliation Job to manage the resource."""
     erv2cli = Erv2Cli(
@@ -4264,7 +4213,7 @@ def get_input(ctx: click.Context) -> None:
 
 @external_resources.command()
 @click.pass_context
-def request_reconciliation(ctx: click.Context) -> None:
+def request_reconciliation(ctx):
     """Marks a resource as it needs to get reconciled. The itegration will reconcile the resource at
     its next iteration."""
     erv2cli = Erv2Cli(
@@ -4291,7 +4240,7 @@ def request_reconciliation(ctx: click.Context) -> None:
     default=False,
 )
 @click.pass_context
-def migrate(ctx: click.Context, dry_run: bool, skip_build: bool) -> None:
+def migrate(ctx, dry_run: bool, skip_build: bool) -> None:
     """Migrate an existing external resource managed by terraform-resources to ERv2.
 
 
@@ -4397,7 +4346,7 @@ def migrate(ctx: click.Context, dry_run: bool, skip_build: bool) -> None:
 @external_resources.command()
 @binary(["docker"])
 @click.pass_context
-def debug_shell(ctx: click.Context) -> None:
+def debug_shell(ctx) -> None:
     """Enter an ERv2 debug shell to manually migrate resources."""
     # use a temporary directory in $HOME. The MacOS colima default configuration allows docker mounts from $HOME.
     with tempfile.TemporaryDirectory(dir=Path.home(), prefix="erv2-debug.") as _tempdir:
@@ -4436,7 +4385,7 @@ def debug_shell(ctx: click.Context) -> None:
     prompt=True,
 )
 @click.pass_context
-def force_unlock(ctx: click.Context, lock_id: str) -> None:
+def force_unlock(ctx, lock_id: str) -> None:
     """Manually unlock the ERv2 terraform state."""
     # use a temporary directory in $HOME. The MacOS colima default configuration allows docker mounts from $HOME.
     with tempfile.TemporaryDirectory(
@@ -4477,14 +4426,14 @@ def force_unlock(ctx: click.Context, lock_id: str) -> None:
 @click.option("--include-pattern", help="Only include images that match this pattern")
 @click.pass_context
 def container_images(
-    ctx: click.Context,
-    cluster_name: str,
-    namespace_name: str,
-    thread_pool_size: int,
-    use_jump_host: bool,
-    exclude_pattern: str,
-    include_pattern: str,
-) -> None:
+    ctx,
+    cluster_name,
+    namespace_name,
+    thread_pool_size,
+    use_jump_host,
+    exclude_pattern,
+    include_pattern,
+):
     from tools.cli_commands.container_images_report import get_all_pods_images
 
     results = get_all_pods_images(
@@ -4531,7 +4480,7 @@ You can view the source of this Markdown to extract the JSON data.
 @get.command(help="Get all app tekton pipelines providers roles and users")
 @click.argument("app-name")
 @click.pass_context
-def tekton_roles_and_users(ctx: click.Context, app_name: str) -> None:
+def tekton_roles_and_users(ctx, app_name):
     pp_namespaces = {
         p.namespace.path
         for p in get_tekton_pipeline_providers()
@@ -4558,7 +4507,6 @@ def tekton_roles_and_users(ctx: click.Context, app_name: str) -> None:
                 if not seen:
                     seen = True
 
-                    users: str | list[str]
                     if ctx.obj["options"]["output"] == "table":
                         users = ", ".join([u.org_username for u in r.users])
                     else:
@@ -4578,7 +4526,7 @@ def tekton_roles_and_users(ctx: click.Context, app_name: str) -> None:
 )
 @click.argument("aws-account")
 @click.pass_context
-def log_group_usage(ctx: click.Context, aws_account: str) -> None:
+def log_group_usage(ctx, aws_account):
     accounts = queries.get_aws_accounts(name=aws_account)
     if not accounts:
         print("no aws account found with that name")
@@ -4588,7 +4536,7 @@ def log_group_usage(ctx: click.Context, aws_account: str) -> None:
     settings = queries.get_app_interface_settings()
     secret_reader = SecretReader(settings=settings)
     columns = ["log_group", "stored_bytes", "retention_days"]
-    results: list[dict[str, str]] = []
+    results = []
 
     with AWSApi(1, [account], settings, secret_reader) as aws:
         session = aws.get_session(account["name"])