forked from jenkins-x/jx
-
Notifications
You must be signed in to change notification settings - Fork 0
/
edit_userrole.go
154 lines (132 loc) · 3.5 KB
/
edit_userrole.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
package cmd
import (
"fmt"
"io"
"strings"
"github.com/jenkins-x/jx/pkg/jx/cmd/templates"
"github.com/jenkins-x/jx/pkg/kube"
"github.com/jenkins-x/jx/pkg/log"
"github.com/jenkins-x/jx/pkg/util"
"github.com/pkg/errors"
"github.com/spf13/cobra"
"gopkg.in/AlecAivazis/survey.v1/terminal"
)
var (
editUserRoleLong = templates.LongDesc(`
Edits the Roles associated with a User
`)
editUserRoleExample = templates.Examples(`
# Prompt the CLI to pick a User from the list then select which Roles to update for the user
jx edit userrole
# Update a user to a given set of roles
jx edit userrole --l mylogin -r foo -r bar
"
`)
)
// EditUserRoleOptions the options for the create spring command
type EditUserRoleOptions struct {
EditOptions
Login string
Roles []string
}
// NewCmdEditUserRole creates a command object for the "create" command
func NewCmdEditUserRole(f Factory, in terminal.FileReader, out terminal.FileWriter, errOut io.Writer) *cobra.Command {
options := &EditUserRoleOptions{
EditOptions: EditOptions{
CommonOptions: CommonOptions{
Factory: f,
In: in,
Out: out,
Err: errOut,
},
},
}
cmd := &cobra.Command{
Use: "userroles",
Short: "Edits the roles associated with a User",
Aliases: []string{"userrole"},
Long: editUserRoleLong,
Example: editUserRoleExample,
Run: func(cmd *cobra.Command, args []string) {
options.Cmd = cmd
options.Args = args
err := options.Run()
CheckErr(err)
},
}
cmd.Flags().StringVarP(&options.Login, optionLogin, "l", "", "The user login name")
cmd.Flags().StringArrayVarP(&options.Roles, "role", "r", []string{}, "The roles to set on a user")
options.addCommonFlags(cmd)
return cmd
}
// Run implements the command
func (o *EditUserRoleOptions) Run() error {
err := o.registerUserCRD()
if err != nil {
return err
}
err = o.registerEnvironmentRoleBindingCRD()
if err != nil {
return err
}
kubeClient, _, err := o.KubeClient()
if err != nil {
return err
}
jxClient, ns, err := o.JXClientAndDevNamespace()
if err != nil {
return err
}
// TODO should use the admin namespace?
users, names, err := kube.GetUsers(jxClient, ns)
if err != nil {
return err
}
name := o.Login
if name == "" {
args := o.Args
if len(args) > 0 {
name = args[0]
}
}
if name == "" {
if o.BatchMode {
return util.MissingOption(optionLogin)
}
name, err = util.PickName(names, "Pick the user to edit", o.In, o.Out, o.Err)
if err != nil {
return err
}
if name == "" {
return util.MissingOption(optionLogin)
}
}
user := users[name]
if user == nil {
return fmt.Errorf("Could not find user %s", name)
}
userKind := user.SubjectKind()
roles, roleNames, err := kube.GetTeamRoles(kubeClient, ns)
if err != nil {
return err
}
if len(roleNames) == 0 {
log.Warnf("No Team roles for team %s\n", ns)
return nil
}
userRoles := o.Roles
if !o.BatchMode && len(userRoles) == 0 {
userRoles, err = util.PickNames(roleNames, "Roles for user: "+name, o.In, o.Out, o.Err)
if err != nil {
return err
}
}
rolesText := strings.Join(userRoles, ", ")
log.Infof("updating user %s for roles %s\n", name, rolesText)
err = kube.UpdateUserRoles(kubeClient, jxClient, ns, userKind, name, userRoles, roles)
if err != nil {
return errors.Wrapf(err, "Failed to update user roles for user %s kind %s and roles %s", name, userKind, rolesText)
}
log.Infof("Updated roles for user: %s kind: %s roles: %s\n", util.ColorInfo(name), util.ColorInfo(userKind), util.ColorInfo(rolesText))
return nil
}