Commitca23abe

authored

feat(provisioner): add support for workspace_owner_rbac_roles (#16407)

Part ofcoder/terraform-provider-coder#330Adds support for the coder_workspace_owner.rbac_roles attribute

1 parentfc2815c commitca23abeCopy full SHA for ca23abe

File tree

+521

-341

lines changed

+521

-341

lines changed

Lines changed: 14 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -594,6 +594,19 @@ func (s *server) acquireProtoJob(ctx context.Context, job database.ProvisionerJo`
`594`	`594`	`})`
`595`	`595`	`}`
`596`	`596`
	`597`	`+roles,err:=s.Database.GetAuthorizationUserRoles(ctx,owner.ID)`
	`598`	`+iferr!=nil {`
	`599`	`+returnnil,failJob(fmt.Sprintf("get owner authorization roles: %s",err))`
	`600`	`+}`
	`601`	`+ownerRbacRoles:= []*sdkproto.Role{}`
	`602`	`+for_,role:=rangeroles.Roles {`
	`603`	`+ifs.OrganizationID==uuid.Nil {`
	`604`	`+ownerRbacRoles=append(ownerRbacRoles,&sdkproto.Role{Name:role,OrgId:""})`
	`605`	`+continue`
	`606`	`+}`
	`607`	`+ownerRbacRoles=append(ownerRbacRoles,&sdkproto.Role{Name:role,OrgId:s.OrganizationID.String()})`
	`608`	`+}`
	`609`	`+`
`597`	`610`	`protoJob.Type=&proto.AcquiredJob_WorkspaceBuild_{`
`598`	`611`	`WorkspaceBuild:&proto.AcquiredJob_WorkspaceBuild{`
`599`	`612`	`WorkspaceBuildId:workspaceBuild.ID.String(),`
`@@ -621,6 +634,7 @@ func (s *server) acquireProtoJob(ctx context.Context, job database.ProvisionerJo`
`621`	`634`	`WorkspaceOwnerSshPrivateKey:ownerSSHPrivateKey,`
`622`	`635`	`WorkspaceBuildId:workspaceBuild.ID.String(),`
`623`	`636`	`WorkspaceOwnerLoginType:string(owner.LoginType),`
	`637`	`+WorkspaceOwnerRbacRoles:ownerRbacRoles,`
`624`	`638`	`},`
`625`	`639`	`LogLevel:input.LogLevel,`
`626`	`640`	`},`

Lines changed: 1 addition & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -377,6 +377,7 @@ func TestAcquireJob(t *testing.T) {`
`377`	`377`	`WorkspaceOwnerSshPrivateKey:sshKey.PrivateKey,`
`378`	`378`	`WorkspaceBuildId:build.ID.String(),`
`379`	`379`	`WorkspaceOwnerLoginType:string(user.LoginType),`
	`380`	`+WorkspaceOwnerRbacRoles: []*sdkproto.Role{{Name:"member",OrgId:pd.OrganizationID.String()}},`
`380`	`381`	`},`
`381`	`382`	`},`
`382`	`383`	`})`

Lines changed: 6 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -242,6 +242,11 @@ func provisionEnv(`
`242`	`242`	`returnnil,xerrors.Errorf("marshal owner groups: %w",err)`
`243`	`243`	`}`
`244`	`244`
	`245`	`+ownerRbacRoles,err:=json.Marshal(metadata.GetWorkspaceOwnerRbacRoles())`
	`246`	`+iferr!=nil {`
	`247`	`+returnnil,xerrors.Errorf("marshal owner rbac roles: %w",err)`
	`248`	`+}`
	`249`	`+`
`245`	`250`	`env=append(env,`
`246`	`251`	`"CODER_AGENT_URL="+metadata.GetCoderUrl(),`
`247`	`252`	`"CODER_WORKSPACE_TRANSITION="+strings.ToLower(metadata.GetWorkspaceTransition().String()),`
`@@ -254,6 +259,7 @@ func provisionEnv(`
`254`	`259`	`"CODER_WORKSPACE_OWNER_SSH_PUBLIC_KEY="+metadata.GetWorkspaceOwnerSshPublicKey(),`
`255`	`260`	`"CODER_WORKSPACE_OWNER_SSH_PRIVATE_KEY="+metadata.GetWorkspaceOwnerSshPrivateKey(),`
`256`	`261`	`"CODER_WORKSPACE_OWNER_LOGIN_TYPE="+metadata.GetWorkspaceOwnerLoginType(),`
	`262`	`+"CODER_WORKSPACE_OWNER_RBAC_ROLES="+string(ownerRbacRoles),`
`257`	`263`	`"CODER_WORKSPACE_ID="+metadata.GetWorkspaceId(),`
`258`	`264`	`"CODER_WORKSPACE_OWNER_ID="+metadata.GetWorkspaceOwnerId(),`
`259`	`265`	`"CODER_WORKSPACE_OWNER_SESSION_TOKEN="+metadata.GetWorkspaceOwnerSessionToken(),`

Lines changed: 47 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -764,6 +764,53 @@ func TestProvision(t *testing.T) {`
`764`	`764`	`}},`
`765`	`765`	`},`
`766`	`766`	`},`
	`767`	`+{`
	`768`	`+Name:"workspace-owner-rbac-roles",`
	`769`	`+SkipReason:"field will be added in provider version 2.2.0",`
	`770`	`+Files:map[string]string{`
	`771`	+"main.tf":`terraform {
	`772`	`+required_providers {`
	`773`	`+ coder = {`
	`774`	`+source = "coder/coder"`
	`775`	`+version = "2.2.0"`
	`776`	`+ }`
	`777`	`+}`
	`778`	`+}`
	`779`	`+`
	`780`	`+resource "null_resource" "example" {}`
	`781`	`+data "coder_workspace_owner" "me" {}`
	`782`	`+resource "coder_metadata" "example" {`
	`783`	`+resource_id = null_resource.example.id`
	`784`	`+item {`
	`785`	`+key = "rbac_roles_name"`
	`786`	`+value = data.coder_workspace_owner.me.rbac_roles[0].name`
	`787`	`+}`
	`788`	`+item {`
	`789`	`+key = "rbac_roles_org_id"`
	`790`	`+value = data.coder_workspace_owner.me.rbac_roles[0].org_id`
	`791`	`+}`
	`792`	`+}`
	`793`	+`,
	`794`	`+},`
	`795`	`+Request:&proto.PlanRequest{`
	`796`	`+Metadata:&proto.Metadata{`
	`797`	`+WorkspaceOwnerRbacRoles: []*proto.Role{{Name:"member",OrgId:""}},`
	`798`	`+},`
	`799`	`+},`
	`800`	`+Response:&proto.PlanComplete{`
	`801`	`+Resources: []*proto.Resource{{`
	`802`	`+Name:"example",`
	`803`	`+Type:"null_resource",`
	`804`	`+Metadata: []*proto.Resource_Metadata{{`
	`805`	`+Key:"rbac_roles_name",`
	`806`	`+Value:"member",`
	`807`	`+}, {`
	`808`	`+Key:"rbac_roles_org_id",`
	`809`	`+Value:"",`
	`810`	`+}},`
	`811`	`+}},`
	`812`	`+},`
	`813`	`+},`
`767`	`814`	`}`
`768`	`815`
`769`	`816`	`for_,testCase:=rangetestCases {`

Comments

(0)