elasticctl 0.10.0

Operate Elastic Security as code with a safety-first CLI for security engineers.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78

use crate::context::Context;
use crate::guard::{self, Preview, ValueListPreview};
use elasticctl_api::state::PushPlan;
use elasticctl_api::value_lists::{ContainerAction, ImportPreview};
use elasticctl_core::{Error, ErrorKind, Result};
use serde::Serialize;

pub(super) fn changed(plan: &PushPlan) -> bool {
    plan.value_lists.iter().any(|list| {
        list.container_action != ContainerAction::None
            || !list.adds.is_empty()
            || !list.removes.is_empty()
    })
}

#[derive(Serialize)]
struct PushPreview<'a> {
    #[serde(flatten)]
    target: ValueListPreview<'a, ImportPreview<'a>>,
    action: &'a str,
    details: &'a [String],
}

pub(super) fn check(ctx: &Context, plan: &PushPlan) -> Result<bool> {
    if ctx.global.json && changed(plan) {
        let lists: Vec<_> = plan.value_lists.iter().map(ImportPreview::from).collect();
        let preview = PushPreview {
            target: ValueListPreview::new(ctx, "state push", &lists),
            action: &plan.preview_action,
            details: &plan.preview_details,
        };
        eprintln!(
            "{}",
            serde_json::to_string(&preview).map_err(|error| {
                Error::new(ErrorKind::Error, format!("encoding preview: {error}"))
            })?
        );
        return Ok(ctx.global.yes);
    }
    let mut details = plan.preview_details.clone();
    for list in &plan.value_lists {
        if list.container_action == ContainerAction::None
            && list.adds.is_empty()
            && list.removes.is_empty()
        {
            continue;
        }
        let preview = ImportPreview::from(list);
        let action = match list.container_action {
            ContainerAction::Create => "create",
            ContainerAction::Update => "update",
            ContainerAction::None => "none",
        };
        details.push(format!(
            "value list {}: container: {}, {}, {} adds, {} removes; {}",
            preview.id,
            action,
            preview.phase_order,
            list.adds.len(),
            list.removes.len(),
            preview.phase_reason
        ));
        for value in &list.adds {
            details.push(format!("  + {value}"));
        }
        for value in &list.removes {
            details.push(format!("  - {value}"));
        }
    }
    Ok(guard::check(
        ctx,
        "state push",
        &Preview {
            action: plan.preview_action.clone(),
            details,
        },
    ))
}