@dataroadinc/setup-auth
Version:
CLI tool and programmatic API for automated OAuth setup across cloud platforms
69 lines (68 loc) • 3.81 kB
TypeScript
export declare const REQUIRED_SERVICES: {
readonly RESOURCE_MANAGER: "cloudresourcemanager.googleapis.com";
readonly SERVICE_USAGE: "serviceusage.googleapis.com";
readonly IAM: "iam.googleapis.com";
readonly CREDENTIALS: "iamcredentials.googleapis.com";
readonly ORG_POLICY: "orgpolicy.googleapis.com";
readonly OAUTH2: "oauth2.googleapis.com";
readonly IAP: "iap.googleapis.com";
readonly BILLING: "cloudbilling.googleapis.com";
readonly ACCESS_CONTEXT_MANAGER: "accesscontextmanager.googleapis.com";
readonly SERVICE_MANAGEMENT: "servicemanagement.googleapis.com";
};
export declare const PUBLIC_SERVICES: readonly ["oauth2.googleapis.com"];
export declare const GLOBAL_PERMISSIONS: {
readonly LIST_ORGANIZATIONS: "resourcemanager.organizations.list";
readonly LIST_FOLDERS: "resourcemanager.folders.list";
readonly CREATE_PROJECT: "resourcemanager.projects.create";
readonly LIST_BILLING_ACCOUNTS: "billing.accounts.list";
};
export declare const ORGANIZATION_PERMISSIONS: {
readonly GET_ORGANIZATION: "resourcemanager.organizations.get";
readonly UPDATE_ORGANIZATION: "resourcemanager.organizations.update";
readonly GET_IAM_POLICY: "resourcemanager.organizations.getIamPolicy";
readonly SET_IAM_POLICY: "resourcemanager.organizations.setIamPolicy";
readonly LIST_PROJECTS: "resourcemanager.projects.list";
readonly PROJECTS_SET_IAM_POLICY: "resourcemanager.projects.setIamPolicy";
readonly ORG_POLICY_GET: "orgpolicy.policy.get";
readonly ORG_POLICY_SET: "orgpolicy.policy.set";
};
export declare const PROJECT_PERMISSIONS: {
readonly GET_PROJECT: "resourcemanager.projects.get";
readonly UPDATE_PROJECT: "resourcemanager.projects.update";
readonly GET_IAM_POLICY: "resourcemanager.projects.getIamPolicy";
readonly SET_IAM_POLICY: "resourcemanager.projects.setIamPolicy";
readonly ENABLE_SERVICE: "serviceusage.services.enable";
readonly GET_SERVICE: "serviceusage.services.get";
readonly LIST_SERVICES: "serviceusage.services.list";
readonly USE_SERVICE: "serviceusage.services.use";
};
export declare const ORGANIZATION_ROLES: {
readonly OWNER: "roles/owner";
readonly EDITOR: "roles/editor";
readonly VIEWER: "roles/viewer";
readonly ORG_ADMIN: "roles/resourcemanager.organizationAdmin";
readonly FOLDER_ADMIN: "roles/resourcemanager.folderAdmin";
readonly PROJECT_CREATOR: "roles/resourcemanager.projectCreator";
readonly BILLING_ADMIN: "roles/billing.admin";
readonly ORG_POLICY_ADMIN: "roles/orgpolicy.policyAdmin";
};
export declare const PROJECT_ROLES: {
readonly OWNER: "roles/owner";
readonly EDITOR: "roles/editor";
readonly VIEWER: "roles/viewer";
readonly SERVICE_USAGE_ADMIN: "roles/serviceusage.serviceUsageAdmin";
readonly SERVICE_USAGE_CONSUMER: "roles/serviceusage.serviceUsageConsumer";
readonly SERVICE_ACCOUNT_ADMIN: "roles/iam.serviceAccountAdmin";
readonly SERVICE_ACCOUNT_USER: "roles/iam.serviceAccountUser";
readonly SERVICE_ACCOUNT_KEY_ADMIN: "roles/iam.serviceAccountKeyAdmin";
readonly IAP_SETTINGS_ADMIN: "roles/iap.settingsAdmin";
readonly IAP_SECURED_USER: "roles/iap.securedUser";
readonly SERVICE_MANAGEMENT_ADMIN: "roles/servicemanagement.admin";
readonly LOGGING_WRITER: "roles/logging.logWriter";
};
export type OrganizationRole = (typeof ORGANIZATION_ROLES)[keyof typeof ORGANIZATION_ROLES];
export type ProjectRole = (typeof PROJECT_ROLES)[keyof typeof PROJECT_ROLES];
export type OrganizationPermission = (typeof ORGANIZATION_PERMISSIONS)[keyof typeof ORGANIZATION_PERMISSIONS];
export type ProjectPermission = (typeof PROJECT_PERMISSIONS)[keyof typeof PROJECT_PERMISSIONS];
export type GlobalPermission = (typeof GLOBAL_PERMISSIONS)[keyof typeof GLOBAL_PERMISSIONS];