Apr 7, 2025 · Mar 12, 2025 · Mar 13, 2025 · Mar 13, 2025 · Mar 13, 2025 · Mar 13, 2025
diff --git a/coderd/database/dbauthz/dbauthz.go b/coderd/database/dbauthz/dbauthz.go

 "cdr.dev/slog"

 "github.com/coder/coder/v2/coderd/prebuilds"
 "github.com/coder/coder/v2/coderd/rbac/policy"
 "github.com/coder/coder/v2/coderd/rbac/rolestore"

 }),
 Scope: rbac.ScopeAll,
 }.WithCachedASTValue()

 subjectPrebuildsOrchestrator = rbac.Subject{
 FriendlyName: "Prebuilds Orchestrator",
 ID:           prebuilds.OwnerID.String(),
 Roles: rbac.Roles([]rbac.Role{
 {
 Identifier:  rbac.RoleIdentifier{Name: "prebuilds-orchestrator"},
 DisplayName: "Coder",
 Site: rbac.Permissions(map[string][]policy.Action{
 // May use template, read template-related info, & insert template-related resources (preset prebuilds).
 rbac.ResourceTemplate.Type: {policy.ActionRead, policy.ActionUpdate, policy.ActionUse},
 // May CRUD workspaces, and start/stop them.
 rbac.ResourceWorkspace.Type: {
 policy.ActionCreate, policy.ActionDelete, policy.ActionRead, policy.ActionUpdate,
 policy.ActionWorkspaceStart, policy.ActionWorkspaceStop,
 },
 }),
 },
 }),
 Scope: rbac.ScopeAll,
 }.WithCachedASTValue()
 )

 // AsProvisionerd returns a context with an actor that has permissions required
 return context.WithValue(ctx, authContextKey{}, subjectSystemReadProvisionerDaemons)
 }

 // AsPrebuildsOrchestrator returns a context with an actor that has permissions
 // to read orchestrator workspace prebuilds.
 func AsPrebuildsOrchestrator(ctx context.Context) context.Context {
 return context.WithValue(ctx, authContextKey{}, subjectPrebuildsOrchestrator)
 }

 var AsRemoveActor = rbac.Subject{
 ID: "remove-actor",
 }
 return q.db.BulkMarkNotificationMessagesSent(ctx, arg)
 }

 func (q *querier) ClaimPrebuild(ctx context.Context, newOwnerID database.ClaimPrebuildParams) (database.ClaimPrebuildRow, error) {
 if err := q.authorizeContext(ctx, policy.ActionUpdate, rbac.ResourceWorkspace); err != nil {
 return database.ClaimPrebuildRow{
 ID: uuid.Nil,
 }, err
 }
 return q.db.ClaimPrebuild(ctx, newOwnerID)
 }

 func (q *querier) CleanTailnetCoordinators(ctx context.Context) error {
 if err := q.authorizeContext(ctx, policy.ActionDelete, rbac.ResourceTailnetCoordinator); err != nil {
 return err
 return q.db.GetParameterSchemasByJobID(ctx, jobID)
 }

 func (q *querier) GetPrebuildMetrics(ctx context.Context) ([]database.GetPrebuildMetricsRow, error) {
 if err := q.authorizeContext(ctx, policy.ActionRead, rbac.ResourceTemplate); err != nil {
 return nil, err
 }
 return q.db.GetPrebuildMetrics(ctx)
 }

 func (q *querier) GetPrebuildsInProgress(ctx context.Context) ([]database.GetPrebuildsInProgressRow, error) {
 if err := q.authorizeContext(ctx, policy.ActionRead, rbac.ResourceTemplate); err != nil {
 return nil, err
 }
 return q.db.GetPrebuildsInProgress(ctx)
 }

 func (q *querier) GetPresetByWorkspaceBuildID(ctx context.Context, workspaceID uuid.UUID) (database.TemplateVersionPreset, error) {
 if err := q.authorizeContext(ctx, policy.ActionRead, rbac.ResourceTemplate); err != nil {
 return database.TemplateVersionPreset{}, err
 return q.db.GetPresetParametersByTemplateVersionID(ctx, templateVersionID)
 }

 func (q *querier) GetPresetsBackoff(ctx context.Context, lookback time.Time) ([]database.GetPresetsBackoffRow, error) {
 if err := q.authorizeContext(ctx, policy.ActionRead, rbac.ResourceTemplate); err != nil {
 return nil, err
 }
 return q.db.GetPresetsBackoff(ctx, lookback)
 }

 func (q *querier) GetPresetsByTemplateVersionID(ctx context.Context, templateVersionID uuid.UUID) ([]database.TemplateVersionPreset, error) {
 // An actor can read template version presets if they can read the related template version.
 _, err := q.GetTemplateVersionByID(ctx, templateVersionID)
 // can read the job.
 _, err := q.GetWorkspaceBuildByJobID(ctx, id)
 if err != nil {
 return database.ProvisionerJob{}, err
 return database.ProvisionerJob{},xerrors.Errorf("fetch related workspace build: %w",err)
 }
 case database.ProvisionerJobTypeTemplateVersionDryRun, database.ProvisionerJobTypeTemplateVersionImport:
 // Authorized call to get template version.
 _, err := authorizedTemplateVersionFromJob(ctx, q, job)
 if err != nil {
 return database.ProvisionerJob{}, err
 return database.ProvisionerJob{},xerrors.Errorf("fetch related template version: %w",err)
 }
 default:
 return database.ProvisionerJob{}, xerrors.Errorf("unknown job type: %q", job.Type)
 return q.db.GetReplicasUpdatedAfter(ctx, updatedAt)
 }

 func (q *querier) GetRunningPrebuilds(ctx context.Context) ([]database.GetRunningPrebuildsRow, error) {
 if err := q.authorizeContext(ctx, policy.ActionRead, rbac.ResourceTemplate); err != nil {
 return nil, err
 }
 return q.db.GetRunningPrebuilds(ctx)
 }

 func (q *querier) GetRuntimeConfig(ctx context.Context, key string) (string, error) {
 if err := q.authorizeContext(ctx, policy.ActionRead, rbac.ResourceSystem); err != nil {
 return "", err
 return q.db.GetTemplateParameterInsights(ctx, arg)
 }

 func (q *querier) GetTemplatePresetsWithPrebuilds(ctx context.Context, templateID uuid.NullUUID) ([]database.GetTemplatePresetsWithPrebuildsRow, error) {
 // Although this fetches presets. It filters them by prebuilds and is only of use to the prebuild system.
 // As such, we authorize this in line with other prebuild queries, not with other preset queries.

 if err := q.authorizeContext(ctx, policy.ActionRead, rbac.ResourceTemplate); err != nil {
 return nil, err
 }
 return q.db.GetTemplatePresetsWithPrebuilds(ctx, templateID)
 }

 func (q *querier) GetTemplateUsageStats(ctx context.Context, arg database.GetTemplateUsageStatsParams) ([]database.TemplateUsageStat, error) {
 if err := q.authorizeTemplateInsights(ctx, arg.TemplateIDs); err != nil {
 return nil, err
 return q.db.InsertPresetParameters(ctx, arg)
 }

 func (q *querier) InsertPresetPrebuild(ctx context.Context, arg database.InsertPresetPrebuildParams) (database.TemplateVersionPresetPrebuild, error) {
 if err := q.authorizeContext(ctx, policy.ActionCreate, rbac.ResourceSystem); err != nil {
 return database.TemplateVersionPresetPrebuild{}, err
 }
 return q.db.InsertPresetPrebuild(ctx, arg)
 }

 // TODO: We need to create a ProvisionerJob resource type
 func (q *querier) InsertProvisionerJob(ctx context.Context, arg database.InsertProvisionerJobParams) (database.ProvisionerJob, error) {
 // if err := q.authorizeContext(ctx, policy.ActionCreate, rbac.ResourceSystem); err != nil {
diff --git a/coderd/database/dbauthz/dbauthz_test.go b/coderd/database/dbauthz/dbauthz_test.go
 })

 check.Args(database.OrganizationMembersParams{
 OrganizationID:uuid.UUID{},
 UserID:uuid.UUID{},
 OrganizationID:o.ID,
 UserID:u.ID,
 }).Asserts(
 mem, policy.ActionRead,
 )
 }))
 }

 func (s *MethodTestSuite) TestPrebuilds() {
 s.Run("ClaimPrebuild", s.Subtest(func(db database.Store, check *expects) {
 check.Args(database.ClaimPrebuildParams{}).
 Asserts(rbac.ResourceWorkspace, policy.ActionUpdate).
 ErrorsWithInMemDB(dbmem.ErrUnimplemented).
 ErrorsWithPG(sql.ErrNoRows)
 }))
 s.Run("GetPrebuildMetrics", s.Subtest(func(_ database.Store, check *expects) {
 check.Args().
 Asserts(rbac.ResourceTemplate, policy.ActionRead).
 ErrorsWithInMemDB(dbmem.ErrUnimplemented)
 }))
 s.Run("GetPrebuildsInProgress", s.Subtest(func(_ database.Store, check *expects) {
 check.Args().
 Asserts(rbac.ResourceTemplate, policy.ActionRead).
 ErrorsWithInMemDB(dbmem.ErrUnimplemented)
 }))
 s.Run("GetPresetsBackoff", s.Subtest(func(_ database.Store, check *expects) {
 check.Args(time.Time{}).
 Asserts(rbac.ResourceTemplate, policy.ActionRead).
 ErrorsWithInMemDB(dbmem.ErrUnimplemented)
 }))
 s.Run("GetRunningPrebuilds", s.Subtest(func(_ database.Store, check *expects) {
 check.Args().
 Asserts(rbac.ResourceTemplate, policy.ActionRead).
 ErrorsWithInMemDB(dbmem.ErrUnimplemented)
 }))
 s.Run("GetTemplatePresetsWithPrebuilds", s.Subtest(func(db database.Store, check *expects) {
 user := dbgen.User(s.T(), db, database.User{})
 check.Args(uuid.NullUUID{UUID: user.ID, Valid: true}).
 Asserts(rbac.ResourceTemplate, policy.ActionRead).
 ErrorsWithInMemDB(dbmem.ErrUnimplemented)
 }))
 s.Run("InsertPresetPrebuild", s.Subtest(func(db database.Store, check *expects) {
 org := dbgen.Organization(s.T(), db, database.Organization{})
 user := dbgen.User(s.T(), db, database.User{})
 template := dbgen.Template(s.T(), db, database.Template{
 CreatedBy:      user.ID,
 OrganizationID: org.ID,
 })
 templateVersion := dbgen.TemplateVersion(s.T(), db, database.TemplateVersion{
 TemplateID:     uuid.NullUUID{UUID: template.ID, Valid: true},
 OrganizationID: org.ID,
 CreatedBy:      user.ID,
 })
 preset := dbgen.Preset(s.T(), db, database.InsertPresetParams{
 Name:              coderdtest.RandomName(s.T()),
 TemplateVersionID: templateVersion.ID,
 })
 check.Args(database.InsertPresetPrebuildParams{
 ID:               uuid.New(),
 PresetID:         preset.ID,
 DesiredInstances: 1,
 }).
 Asserts(rbac.ResourceSystem, policy.ActionCreate).
 ErrorsWithInMemDB(dbmem.ErrUnimplemented)
 }))
 }

 func (s *MethodTestSuite) TestOAuth2ProviderApps() {
 s.Run("GetOAuth2ProviderApps", s.Subtest(func(db database.Store, check *expects) {
 apps := []database.OAuth2ProviderApp{
diff --git a/coderd/database/dbgen/dbgen.go b/coderd/database/dbgen/dbgen.go
 return item
 }

 func Preset(t testing.TB, db database.Store, seed database.InsertPresetParams) database.TemplateVersionPreset {
 preset, err := db.InsertPreset(genCtx, database.InsertPresetParams{
 TemplateVersionID: takeFirst(seed.TemplateVersionID, uuid.New()),
 Name:              takeFirst(seed.Name, testutil.GetRandomName(t)),
 CreatedAt:         takeFirst(seed.CreatedAt, dbtime.Now()),
 })
 require.NoError(t, err, "insert preset")
 return preset
 }

 func PresetParameter(t testing.TB, db database.Store, seed database.InsertPresetParametersParams) []database.TemplateVersionPresetParameter {
 parameters, err := db.InsertPresetParameters(genCtx, database.InsertPresetParametersParams{
 TemplateVersionPresetID: takeFirst(seed.TemplateVersionPresetID, uuid.New()),
 Names:                   takeFirstSlice(seed.Names, []string{testutil.GetRandomName(t)}),
 Values:                  takeFirstSlice(seed.Values, []string{testutil.GetRandomName(t)}),
 })

 require.NoError(t, err, "insert preset parameters")
 return parameters
 }

 func PresetPrebuild(t testing.TB, db database.Store, seed database.InsertPresetPrebuildParams) database.TemplateVersionPresetPrebuild {
 prebuild, err := db.InsertPresetPrebuild(genCtx, database.InsertPresetPrebuildParams{
 ID:                  takeFirst(seed.ID, uuid.New()),
 PresetID:            takeFirst(seed.PresetID, uuid.New()),
 DesiredInstances:    takeFirst(seed.DesiredInstances, 1),
 InvalidateAfterSecs: 0,
 })
 require.NoError(t, err, "insert preset prebuild")
 return prebuild
 }

 func provisionerJobTiming(t testing.TB, db database.Store, seed database.ProvisionerJobTiming) database.ProvisionerJobTiming {
 timing, err := db.InsertProvisionerJobTimings(genCtx, database.InsertProvisionerJobTimingsParams{
 JobID:     takeFirst(seed.JobID, uuid.New()),
diff --git a/coderd/database/dbmem/dbmem.go b/coderd/database/dbmem/dbmem.go
 return int64(len(arg.IDs)), nil
 }

 func (*FakeQuerier) ClaimPrebuild(_ context.Context, _ database.ClaimPrebuildParams) (database.ClaimPrebuildRow, error) {
 return database.ClaimPrebuildRow{}, ErrUnimplemented
 }

 func (*FakeQuerier) CleanTailnetCoordinators(_ context.Context) error {
 return ErrUnimplemented
 }
 return parameters, nil
 }

 func (*FakeQuerier) GetPrebuildMetrics(_ context.Context) ([]database.GetPrebuildMetricsRow, error) {
 return nil, ErrUnimplemented
 }

 func (*FakeQuerier) GetPrebuildsInProgress(_ context.Context) ([]database.GetPrebuildsInProgressRow, error) {
 return nil, ErrUnimplemented
 }

 func (q *FakeQuerier) GetPresetByWorkspaceBuildID(_ context.Context, workspaceBuildID uuid.UUID) (database.TemplateVersionPreset, error) {
 q.mutex.RLock()
 defer q.mutex.RUnlock()
 return parameters, nil
 }

 func (*FakeQuerier) GetPresetsBackoff(_ context.Context, _ time.Time) ([]database.GetPresetsBackoffRow, error) {
 return nil, ErrUnimplemented
 }

 func (q *FakeQuerier) GetPresetsByTemplateVersionID(_ context.Context, templateVersionID uuid.UUID) ([]database.TemplateVersionPreset, error) {
 q.mutex.RLock()
 defer q.mutex.RUnlock()
 return replicas, nil
 }

 func (*FakeQuerier) GetRunningPrebuilds(_ context.Context) ([]database.GetRunningPrebuildsRow, error) {
 return nil, ErrUnimplemented
 }

 func (q *FakeQuerier) GetRuntimeConfig(_ context.Context, key string) (string, error) {
 q.mutex.Lock()
 defer q.mutex.Unlock()
 return rows, nil
 }

 func (*FakeQuerier) GetTemplatePresetsWithPrebuilds(_ context.Context, _ uuid.NullUUID) ([]database.GetTemplatePresetsWithPrebuildsRow, error) {
 return nil, ErrUnimplemented
 }

 func (q *FakeQuerier) GetTemplateUsageStats(_ context.Context, arg database.GetTemplateUsageStatsParams) ([]database.TemplateUsageStat, error) {
 err := validateDatabaseType(arg)
 if err != nil {
 return presetParameters, nil
 }

 func (*FakeQuerier) InsertPresetPrebuild(_ context.Context, arg database.InsertPresetPrebuildParams) (database.TemplateVersionPresetPrebuild, error) {
 err := validateDatabaseType(arg)
 if err != nil {
 return database.TemplateVersionPresetPrebuild{}, err
 }

 return database.TemplateVersionPresetPrebuild{}, ErrUnimplemented
 }

 func (q *FakeQuerier) InsertProvisionerJob(_ context.Context, arg database.InsertProvisionerJobParams) (database.ProvisionerJob, error) {
 if err := validateDatabaseType(arg); err != nil {
 return database.ProvisionerJob{}, err
Original file line number	Diff line number	Diff line change
Expand Up		@@ -18,6 +18,7 @@ import (

		"cdr.dev/slog"

		"github.com/coder/coder/v2/coderd/prebuilds"
		"github.com/coder/coder/v2/coderd/rbac/policy"
		"github.com/coder/coder/v2/coderd/rbac/rolestore"

Expand DownExpand Up		@@ -358,6 +359,27 @@ var (
		}),
		Scope: rbac.ScopeAll,
		}.WithCachedASTValue()

		subjectPrebuildsOrchestrator = rbac.Subject{
		FriendlyName: "Prebuilds Orchestrator",
		ID: prebuilds.OwnerID.String(),
		Roles: rbac.Roles([]rbac.Role{
		{
		Identifier: rbac.RoleIdentifier{Name: "prebuilds-orchestrator"},
		DisplayName: "Coder",
		Site: rbac.Permissions(map[string][]policy.Action{
		// May use template, read template-related info, & insert template-related resources (preset prebuilds).
		rbac.ResourceTemplate.Type: {policy.ActionRead, policy.ActionUpdate, policy.ActionUse},
		// May CRUD workspaces, and start/stop them.
		rbac.ResourceWorkspace.Type: {
		policy.ActionCreate, policy.ActionDelete, policy.ActionRead, policy.ActionUpdate,
		policy.ActionWorkspaceStart, policy.ActionWorkspaceStop,
		},
		}),
		},
		}),
		Scope: rbac.ScopeAll,
		}.WithCachedASTValue()
		)

		// AsProvisionerd returns a context with an actor that has permissions required
Expand DownExpand Up		@@ -412,6 +434,12 @@ func AsSystemReadProvisionerDaemons(ctx context.Context) context.Context {
		return context.WithValue(ctx, authContextKey{}, subjectSystemReadProvisionerDaemons)
		}

		// AsPrebuildsOrchestrator returns a context with an actor that has permissions
		// to read orchestrator workspace prebuilds.
		func AsPrebuildsOrchestrator(ctx context.Context) context.Context {
		return context.WithValue(ctx, authContextKey{}, subjectPrebuildsOrchestrator)
		}

		var AsRemoveActor = rbac.Subject{
		ID: "remove-actor",
		}
Expand DownExpand Up		@@ -1106,6 +1134,15 @@ func (q *querier) BulkMarkNotificationMessagesSent(ctx context.Context, arg data
		return q.db.BulkMarkNotificationMessagesSent(ctx, arg)
		}

		func (q *querier) ClaimPrebuild(ctx context.Context, newOwnerID database.ClaimPrebuildParams) (database.ClaimPrebuildRow, error) {
		if err := q.authorizeContext(ctx, policy.ActionUpdate, rbac.ResourceWorkspace); err != nil {
		return database.ClaimPrebuildRow{
		ID: uuid.Nil,
		}, err
		}
		return q.db.ClaimPrebuild(ctx, newOwnerID)
		}

		func (q *querier) CleanTailnetCoordinators(ctx context.Context) error {
		if err := q.authorizeContext(ctx, policy.ActionDelete, rbac.ResourceTailnetCoordinator); err != nil {
		return err
Expand DownExpand Up		@@ -2020,6 +2057,20 @@ func (q *querier) GetParameterSchemasByJobID(ctx context.Context, jobID uuid.UUI
		return q.db.GetParameterSchemasByJobID(ctx, jobID)
		}

		func (q *querier) GetPrebuildMetrics(ctx context.Context) ([]database.GetPrebuildMetricsRow, error) {
		if err := q.authorizeContext(ctx, policy.ActionRead, rbac.ResourceTemplate); err != nil {
		return nil, err
		}
		return q.db.GetPrebuildMetrics(ctx)
		}

		func (q *querier) GetPrebuildsInProgress(ctx context.Context) ([]database.GetPrebuildsInProgressRow, error) {
		if err := q.authorizeContext(ctx, policy.ActionRead, rbac.ResourceTemplate); err != nil {
		return nil, err
		}
		return q.db.GetPrebuildsInProgress(ctx)
		}

		func (q *querier) GetPresetByWorkspaceBuildID(ctx context.Context, workspaceID uuid.UUID) (database.TemplateVersionPreset, error) {
		if err := q.authorizeContext(ctx, policy.ActionRead, rbac.ResourceTemplate); err != nil {
		return database.TemplateVersionPreset{}, err
Expand All		@@ -2037,6 +2088,13 @@ func (q *querier) GetPresetParametersByTemplateVersionID(ctx context.Context, te
		return q.db.GetPresetParametersByTemplateVersionID(ctx, templateVersionID)
		}

		func (q *querier) GetPresetsBackoff(ctx context.Context, lookback time.Time) ([]database.GetPresetsBackoffRow, error) {
		if err := q.authorizeContext(ctx, policy.ActionRead, rbac.ResourceTemplate); err != nil {
		return nil, err
		}
		return q.db.GetPresetsBackoff(ctx, lookback)
		}

		func (q *querier) GetPresetsByTemplateVersionID(ctx context.Context, templateVersionID uuid.UUID) ([]database.TemplateVersionPreset, error) {
		// An actor can read template version presets if they can read the related template version.
		_, err := q.GetTemplateVersionByID(ctx, templateVersionID)
Expand DownExpand Up		@@ -2088,13 +2146,13 @@ func (q *querier) GetProvisionerJobByID(ctx context.Context, id uuid.UUID) (data
		// can read the job.
		_, err := q.GetWorkspaceBuildByJobID(ctx, id)
		if err != nil {
		return database.ProvisionerJob{}, err
		return database.ProvisionerJob{},xerrors.Errorf("fetch related workspace build: %w",err)
		}
		case database.ProvisionerJobTypeTemplateVersionDryRun, database.ProvisionerJobTypeTemplateVersionImport:
		// Authorized call to get template version.
		_, err := authorizedTemplateVersionFromJob(ctx, q, job)
		if err != nil {
		return database.ProvisionerJob{}, err
		return database.ProvisionerJob{},xerrors.Errorf("fetch related template version: %w",err)
		}
		default:
		return database.ProvisionerJob{}, xerrors.Errorf("unknown job type: %q", job.Type)
Expand DownExpand Up		@@ -2187,6 +2245,13 @@ func (q *querier) GetReplicasUpdatedAfter(ctx context.Context, updatedAt time.Ti
		return q.db.GetReplicasUpdatedAfter(ctx, updatedAt)
		}

		func (q *querier) GetRunningPrebuilds(ctx context.Context) ([]database.GetRunningPrebuildsRow, error) {
		if err := q.authorizeContext(ctx, policy.ActionRead, rbac.ResourceTemplate); err != nil {
		return nil, err
		}
		return q.db.GetRunningPrebuilds(ctx)
		}

		func (q *querier) GetRuntimeConfig(ctx context.Context, key string) (string, error) {
		if err := q.authorizeContext(ctx, policy.ActionRead, rbac.ResourceSystem); err != nil {
		return "", err
Expand DownExpand Up		@@ -2311,6 +2376,16 @@ func (q *querier) GetTemplateParameterInsights(ctx context.Context, arg database
		return q.db.GetTemplateParameterInsights(ctx, arg)
		}

		func (q *querier) GetTemplatePresetsWithPrebuilds(ctx context.Context, templateID uuid.NullUUID) ([]database.GetTemplatePresetsWithPrebuildsRow, error) {
		// Although this fetches presets. It filters them by prebuilds and is only of use to the prebuild system.
		// As such, we authorize this in line with other prebuild queries, not with other preset queries.

		if err := q.authorizeContext(ctx, policy.ActionRead, rbac.ResourceTemplate); err != nil {
		return nil, err
		}
		return q.db.GetTemplatePresetsWithPrebuilds(ctx, templateID)
		}

		func (q *querier) GetTemplateUsageStats(ctx context.Context, arg database.GetTemplateUsageStatsParams) ([]database.TemplateUsageStat, error) {
		if err := q.authorizeTemplateInsights(ctx, arg.TemplateIDs); err != nil {
		return nil, err
Expand DownExpand Up		@@ -3235,6 +3310,13 @@ func (q *querier) InsertPresetParameters(ctx context.Context, arg database.Inser
		return q.db.InsertPresetParameters(ctx, arg)
		}

		func (q *querier) InsertPresetPrebuild(ctx context.Context, arg database.InsertPresetPrebuildParams) (database.TemplateVersionPresetPrebuild, error) {
		if err := q.authorizeContext(ctx, policy.ActionCreate, rbac.ResourceSystem); err != nil {
		return database.TemplateVersionPresetPrebuild{}, err
		}
		return q.db.InsertPresetPrebuild(ctx, arg)
		}

		// TODO: We need to create a ProvisionerJob resource type
		func (q *querier) InsertProvisionerJob(ctx context.Context, arg database.InsertProvisionerJobParams) (database.ProvisionerJob, error) {
		// if err := q.authorizeContext(ctx, policy.ActionCreate, rbac.ResourceSystem); err != nil {
Expand Down
Original file line number	Diff line number	Diff line change
Expand Up		@@ -979,8 +979,8 @@ func (s *MethodTestSuite) TestOrganization() {
		})

		check.Args(database.OrganizationMembersParams{
		OrganizationID:uuid.UUID{},
		UserID:uuid.UUID{},
		OrganizationID:o.ID,
		UserID:u.ID,
		}).Asserts(
		mem, policy.ActionRead,
		)
Expand DownExpand Up		@@ -4642,6 +4642,65 @@ func (s *MethodTestSuite) TestNotifications() {
		}))
		}

		func (s *MethodTestSuite) TestPrebuilds() {
		s.Run("ClaimPrebuild", s.Subtest(func(db database.Store, check *expects) {
		check.Args(database.ClaimPrebuildParams{}).
		Asserts(rbac.ResourceWorkspace, policy.ActionUpdate).
		ErrorsWithInMemDB(dbmem.ErrUnimplemented).
		ErrorsWithPG(sql.ErrNoRows)
		}))
		s.Run("GetPrebuildMetrics", s.Subtest(func(_ database.Store, check *expects) {
		check.Args().
		Asserts(rbac.ResourceTemplate, policy.ActionRead).
		ErrorsWithInMemDB(dbmem.ErrUnimplemented)
		}))
		s.Run("GetPrebuildsInProgress", s.Subtest(func(_ database.Store, check *expects) {
		check.Args().
		Asserts(rbac.ResourceTemplate, policy.ActionRead).
		ErrorsWithInMemDB(dbmem.ErrUnimplemented)
		}))
		s.Run("GetPresetsBackoff", s.Subtest(func(_ database.Store, check *expects) {
		check.Args(time.Time{}).
		Asserts(rbac.ResourceTemplate, policy.ActionRead).
		ErrorsWithInMemDB(dbmem.ErrUnimplemented)
		}))
		s.Run("GetRunningPrebuilds", s.Subtest(func(_ database.Store, check *expects) {
		check.Args().
		Asserts(rbac.ResourceTemplate, policy.ActionRead).
		ErrorsWithInMemDB(dbmem.ErrUnimplemented)
		}))
		s.Run("GetTemplatePresetsWithPrebuilds", s.Subtest(func(db database.Store, check *expects) {
		user := dbgen.User(s.T(), db, database.User{})
		check.Args(uuid.NullUUID{UUID: user.ID, Valid: true}).
		Asserts(rbac.ResourceTemplate, policy.ActionRead).
		ErrorsWithInMemDB(dbmem.ErrUnimplemented)
		}))
		s.Run("InsertPresetPrebuild", s.Subtest(func(db database.Store, check *expects) {
		org := dbgen.Organization(s.T(), db, database.Organization{})
		user := dbgen.User(s.T(), db, database.User{})
		template := dbgen.Template(s.T(), db, database.Template{
		CreatedBy: user.ID,
		OrganizationID: org.ID,
		})
		templateVersion := dbgen.TemplateVersion(s.T(), db, database.TemplateVersion{
		TemplateID: uuid.NullUUID{UUID: template.ID, Valid: true},
		OrganizationID: org.ID,
		CreatedBy: user.ID,
		})
		preset := dbgen.Preset(s.T(), db, database.InsertPresetParams{
		Name: coderdtest.RandomName(s.T()),
		TemplateVersionID: templateVersion.ID,
		})
		check.Args(database.InsertPresetPrebuildParams{
		ID: uuid.New(),
		PresetID: preset.ID,
		DesiredInstances: 1,
		}).
		Asserts(rbac.ResourceSystem, policy.ActionCreate).
		ErrorsWithInMemDB(dbmem.ErrUnimplemented)
		}))
		}

		func (s *MethodTestSuite) TestOAuth2ProviderApps() {
		s.Run("GetOAuth2ProviderApps", s.Subtest(func(db database.Store, check *expects) {
		apps := []database.OAuth2ProviderApp{
Expand Down
Original file line number	Diff line number	Diff line change
Expand Up		@@ -1158,6 +1158,38 @@ func TelemetryItem(t testing.TB, db database.Store, seed database.TelemetryItem)
		return item
		}

		func Preset(t testing.TB, db database.Store, seed database.InsertPresetParams) database.TemplateVersionPreset {
		preset, err := db.InsertPreset(genCtx, database.InsertPresetParams{
		TemplateVersionID: takeFirst(seed.TemplateVersionID, uuid.New()),
		Name: takeFirst(seed.Name, testutil.GetRandomName(t)),
		CreatedAt: takeFirst(seed.CreatedAt, dbtime.Now()),
		})
		require.NoError(t, err, "insert preset")
		return preset
		}

		func PresetParameter(t testing.TB, db database.Store, seed database.InsertPresetParametersParams) []database.TemplateVersionPresetParameter {
		parameters, err := db.InsertPresetParameters(genCtx, database.InsertPresetParametersParams{
		TemplateVersionPresetID: takeFirst(seed.TemplateVersionPresetID, uuid.New()),
		Names: takeFirstSlice(seed.Names, []string{testutil.GetRandomName(t)}),
		Values: takeFirstSlice(seed.Values, []string{testutil.GetRandomName(t)}),
		})

		require.NoError(t, err, "insert preset parameters")
		return parameters
		}

		func PresetPrebuild(t testing.TB, db database.Store, seed database.InsertPresetPrebuildParams) database.TemplateVersionPresetPrebuild {
		prebuild, err := db.InsertPresetPrebuild(genCtx, database.InsertPresetPrebuildParams{
		ID: takeFirst(seed.ID, uuid.New()),
		PresetID: takeFirst(seed.PresetID, uuid.New()),
		DesiredInstances: takeFirst(seed.DesiredInstances, 1),
		InvalidateAfterSecs: 0,
		})
		require.NoError(t, err, "insert preset prebuild")
		return prebuild
		}

		func provisionerJobTiming(t testing.TB, db database.Store, seed database.ProvisionerJobTiming) database.ProvisionerJobTiming {
		timing, err := db.InsertProvisionerJobTimings(genCtx, database.InsertProvisionerJobTimingsParams{
		JobID: takeFirst(seed.JobID, uuid.New()),
Expand Down
Original file line number	Diff line number	Diff line change
Expand Up		@@ -1714,6 +1714,10 @@ func (*FakeQuerier) BulkMarkNotificationMessagesSent(_ context.Context, arg data
		return int64(len(arg.IDs)), nil
		}

		func (*FakeQuerier) ClaimPrebuild(_ context.Context, _ database.ClaimPrebuildParams) (database.ClaimPrebuildRow, error) {
		return database.ClaimPrebuildRow{}, ErrUnimplemented
		}

		func (*FakeQuerier) CleanTailnetCoordinators(_ context.Context) error {
		return ErrUnimplemented
		}
Expand DownExpand Up		@@ -4023,6 +4027,14 @@ func (q *FakeQuerier) GetParameterSchemasByJobID(_ context.Context, jobID uuid.U
		return parameters, nil
		}

		func (*FakeQuerier) GetPrebuildMetrics(_ context.Context) ([]database.GetPrebuildMetricsRow, error) {
		return nil, ErrUnimplemented
		}

		func (*FakeQuerier) GetPrebuildsInProgress(_ context.Context) ([]database.GetPrebuildsInProgressRow, error) {
		return nil, ErrUnimplemented
		}

		func (q *FakeQuerier) GetPresetByWorkspaceBuildID(_ context.Context, workspaceBuildID uuid.UUID) (database.TemplateVersionPreset, error) {
		q.mutex.RLock()
		defer q.mutex.RUnlock()
Expand DownExpand Up		@@ -4065,6 +4077,10 @@ func (q *FakeQuerier) GetPresetParametersByTemplateVersionID(_ context.Context,
		return parameters, nil
		}

		func (*FakeQuerier) GetPresetsBackoff(_ context.Context, _ time.Time) ([]database.GetPresetsBackoffRow, error) {
		return nil, ErrUnimplemented
		}

		func (q *FakeQuerier) GetPresetsByTemplateVersionID(_ context.Context, templateVersionID uuid.UUID) ([]database.TemplateVersionPreset, error) {
		q.mutex.RLock()
		defer q.mutex.RUnlock()
Expand DownExpand Up		@@ -4728,6 +4744,10 @@ func (q *FakeQuerier) GetReplicasUpdatedAfter(_ context.Context, updatedAt time.
		return replicas, nil
		}

		func (*FakeQuerier) GetRunningPrebuilds(_ context.Context) ([]database.GetRunningPrebuildsRow, error) {
		return nil, ErrUnimplemented
		}

		func (q *FakeQuerier) GetRuntimeConfig(_ context.Context, key string) (string, error) {
		q.mutex.Lock()
		defer q.mutex.Unlock()
Expand DownExpand Up		@@ -5767,6 +5787,10 @@ func (q *FakeQuerier) GetTemplateParameterInsights(ctx context.Context, arg data
		return rows, nil
		}

		func (*FakeQuerier) GetTemplatePresetsWithPrebuilds(_ context.Context, _ uuid.NullUUID) ([]database.GetTemplatePresetsWithPrebuildsRow, error) {
		return nil, ErrUnimplemented
		}

		func (q *FakeQuerier) GetTemplateUsageStats(_ context.Context, arg database.GetTemplateUsageStatsParams) ([]database.TemplateUsageStat, error) {
		err := validateDatabaseType(arg)
		if err != nil {
Expand DownExpand Up		@@ -8542,6 +8566,15 @@ func (q *FakeQuerier) InsertPresetParameters(_ context.Context, arg database.Ins
		return presetParameters, nil
		}

		func (*FakeQuerier) InsertPresetPrebuild(_ context.Context, arg database.InsertPresetPrebuildParams) (database.TemplateVersionPresetPrebuild, error) {
		err := validateDatabaseType(arg)
		if err != nil {
		return database.TemplateVersionPresetPrebuild{}, err
		}

		return database.TemplateVersionPresetPrebuild{}, ErrUnimplemented
		}

		func (q *FakeQuerier) InsertProvisionerJob(_ context.Context, arg database.InsertProvisionerJobParams) (database.ProvisionerJob, error) {
		if err := validateDatabaseType(arg); err != nil {
		return database.ProvisionerJob{}, err
Expand Down