cloud_terrastodon_entrypoint 0.34.0

Main entrypoint for the Cloud Terrastodon CLI
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63

use cloud_terrastodon_azure::prelude::create_role_assignment;
use cloud_terrastodon_azure::prelude::fetch_all_resources;
use cloud_terrastodon_azure::prelude::fetch_all_role_definitions;
use cloud_terrastodon_azure::prelude::fetch_all_users;
use cloud_terrastodon_user_input::Choice;
use cloud_terrastodon_user_input::PickerTui;
use eyre::Result;
use itertools::Itertools;
use tracing::info;

pub async fn create_role_assignment_menu() -> Result<()> {
    info!("Fetching role definition list");
    let role_definitions = fetch_all_role_definitions().await?;
    let role_definitions = PickerTui::new().set_header("Roles to assign").pick_many(
        role_definitions.into_iter().map(|r| Choice {
            key: r.display_name.to_owned(),
            value: r,
        }),
    )?;

    info!("Fetching principals");
    let users = fetch_all_users().await?;
    let principals = PickerTui::new()
        .set_header(format!(
            "Assigning {}",
            role_definitions.iter().map(|r| &r.display_name).join(", ")
        ))
        .pick_many(users.into_iter().map(|u| Choice {
            key: format!("{} {:64} {}", u.id, u.display_name, u.user_principal_name),
            value: u,
        }))?;

    info!("Fetching resources");
    let resources = fetch_all_resources().await?;
    let resources = PickerTui::new()
        .set_header(format!(
            "Assigning: {} TO {}",
            role_definitions.iter().map(|r| &r.display_name).join(", "),
            principals.iter().map(|p| &p.display_name).join(", ")
        ))
        .pick_many(resources.into_iter().map(|resource| Choice {
            key: resource.id.to_string(),
            value: resource,
        }))?;

    let mut total = 0;
    for res in resources {
        for role in &role_definitions {
            for principal in &principals {
                info!(
                    "Assigning {} to {} on {}",
                    role.display_name, principal.user_principal_name, res.id
                );
                create_role_assignment(&res.id, &role.id, &principal.id).await?;
                total += 1;
            }
        }
    }

    info!("Successfully created {total} role assignments.");

    Ok(())
}