-
Notifications
You must be signed in to change notification settings - Fork 58
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
* added runner group collection and a runner group policy
- Loading branch information
1 parent
b73f153
commit 7ac8190
Showing
14 changed files
with
263 additions
and
40 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,28 @@ | ||
| package githubcollected | ||
|
|
||
| import ( | ||
| "fmt" | ||
| "github.com/google/go-github/v44/github" | ||
| ) | ||
|
|
||
| type RunnerGroup struct { | ||
| Organization ExtendedOrg `json:"organization"` | ||
| RunnerGroup *github.RunnerGroup `json:"runner_group"` | ||
| } | ||
|
|
||
| func (o RunnerGroup) ViolationEntityType() string { | ||
| return "runners group" | ||
| } | ||
|
|
||
| func (o RunnerGroup) CanonicalLink() string { | ||
| const linkTemplate = "https://github.com/organizations/%s/settings/actions/runner-groups/%d" | ||
| return fmt.Sprintf(linkTemplate, *o.Organization.Login, *o.RunnerGroup.ID) | ||
| } | ||
|
|
||
| func (o RunnerGroup) Name() string { | ||
| return *o.RunnerGroup.Name | ||
| } | ||
|
|
||
| func (o RunnerGroup) ID() int64 { | ||
| return *o.RunnerGroup.ID | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,105 @@ | ||
| package collectors | ||
|
|
||
| import ( | ||
| ghclient "github.com/Legit-Labs/legitify/internal/clients/github" | ||
| ghcollected "github.com/Legit-Labs/legitify/internal/collected/github" | ||
| "github.com/Legit-Labs/legitify/internal/common/group_waiter" | ||
| "github.com/Legit-Labs/legitify/internal/common/namespace" | ||
| "github.com/Legit-Labs/legitify/internal/common/permissions" | ||
| "github.com/google/go-github/v44/github" | ||
| "golang.org/x/net/context" | ||
| "log" | ||
| "sync" | ||
| ) | ||
|
|
||
| type runnersCollector struct { | ||
| baseCollector | ||
| client ghclient.Client | ||
| context context.Context | ||
| cache map[string][]*github.RunnerGroup | ||
| } | ||
|
|
||
| func newRunnersCollector(ctx context.Context, client ghclient.Client) collector { | ||
| c := &runnersCollector{ | ||
| client: client, | ||
| context: ctx, | ||
| cache: make(map[string][]*github.RunnerGroup), | ||
| } | ||
| initBaseCollector(&c.baseCollector, c) | ||
| return c | ||
| } | ||
|
|
||
| func (c *runnersCollector) Namespace() namespace.Namespace { | ||
| return namespace.RunnerGroup | ||
| } | ||
|
|
||
| func (c *runnersCollector) CollectMetadata() Metadata { | ||
| gw := group_waiter.New() | ||
| orgs, err := c.client.CollectOrganizations() | ||
| if err != nil { | ||
| log.Printf("failed to collection organizations %s", err) | ||
| return Metadata{} | ||
| } | ||
|
|
||
| totalCount := 0 | ||
| var mutex = &sync.RWMutex{} | ||
| for _, org := range orgs { | ||
| gw.Do(func() { | ||
| org := org | ||
| result := make([]*github.RunnerGroup, 0) | ||
| err := ghclient.PaginateResults(func(opts *github.ListOptions) (*github.Response, error) { | ||
| runners, resp, err := c.client.Client().Actions.ListOrganizationRunnerGroups(c.context, org.Name(), opts) | ||
|
|
||
| if err != nil { | ||
| log.Printf("error collecting runner groups for %s - %v", org.Name(), err) | ||
| return nil, err | ||
| } | ||
|
|
||
| result = append(result, runners.RunnerGroups...) | ||
| return resp, nil | ||
| }) | ||
|
|
||
| if err != nil { | ||
| c.issueMissingPermissions(newMissingPermission(permissions.OrgAdmin, org.Name(), | ||
| "Cannot read organization runner groups", namespace.RunnerGroup)) | ||
| } else { | ||
| mutex.Lock() | ||
| c.cache[org.Name()] = result | ||
| totalCount = totalCount + len(result) | ||
| mutex.Unlock() | ||
| } | ||
| }) | ||
| } | ||
|
|
||
| gw.Wait() | ||
| return Metadata{ | ||
| totalCount, | ||
| } | ||
| } | ||
|
|
||
| func (c *runnersCollector) Collect() subCollectorChannels { | ||
| return c.wrappedCollection(func() { | ||
| orgs, err := c.client.CollectOrganizations() | ||
|
|
||
| if err != nil { | ||
| log.Printf("failed to collect organizations %s", err) | ||
| return | ||
| } | ||
|
|
||
| for _, org := range orgs { | ||
| cached := c.cache[org.Name()] | ||
|
|
||
| for _, rg := range cached { | ||
| c.collectionChangeByOne() | ||
|
|
||
| c.collectData(org, | ||
| ghcollected.RunnerGroup{ | ||
| Organization: org, | ||
| RunnerGroup: rg, | ||
| }, | ||
| org.CanonicalLink(), | ||
| []permissions.Role{org.Role}) | ||
| } | ||
| } | ||
| }) | ||
| } |
Oops, something went wrong.