@topgroup/diginext
Version:
A BUILD SERVER & CLI to deploy apps to any Kubernetes clusters.
48 lines (47 loc) • 2.57 kB
JavaScript
;
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
if (k2 === undefined) k2 = k;
var desc = Object.getOwnPropertyDescriptor(m, k);
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
desc = { enumerable: true, get: function() { return m[k]; } };
}
Object.defineProperty(o, k2, desc);
}) : (function(o, m, k, k2) {
if (k2 === undefined) k2 = k;
o[k2] = m[k];
}));
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
Object.defineProperty(o, "default", { enumerable: true, value: v });
}) : function(o, v) {
o["default"] = v;
});
var __importStar = (this && this.__importStar) || function (mod) {
if (mod && mod.__esModule) return mod;
var result = {};
if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
__setModuleDefault(result, mod);
return result;
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.migrateServiceAccountAndApiKey = void 0;
const migrateServiceAccountAndApiKey = async () => {
const { DB } = await Promise.resolve().then(() => __importStar(require("../modules/api/DB")));
const workspaces = (await DB.find("workspace", {}, { select: ["_id", "name"] })) || [];
// create default roles for each workspace: Admin, Moderator & Member
for (const ws of workspaces) {
// Moderator
const moderatorRole = await DB.findOne("role", { type: "moderator", workspace: ws._id }, { select: ["_id", "name"] });
// find all service accounts & API keys of this workspace and assign "moderator" role:
let sas = await DB.find("service_account", { workspaces: ws._id, roles: { $nin: [moderatorRole._id] } });
if (sas.length > 0) {
sas = await DB.update("service_account", { workspaces: ws._id }, { roles: [moderatorRole._id] });
console.log(`Workspace "${ws.name}" > Assign "moderator" role to ${sas.length} service accounts`);
}
let keys = await DB.find("api_key_user", { workspaces: ws._id, roles: { $nin: [moderatorRole._id] } });
if (keys.length > 0) {
keys = await DB.update("api_key_user", { workspaces: ws._id }, { roles: [moderatorRole._id] });
console.log(`Workspace "${ws.name}" > Assign "moderator" role to ${keys.length} API keys`);
}
}
};
exports.migrateServiceAccountAndApiKey = migrateServiceAccountAndApiKey;