GSI - Employe Self Service Mobile
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 

151 lines
6.1 KiB

"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
exports.setInvokerUpdate = exports.setInvokerCreate = exports.getIamPolicy = exports.setIamPolicy = exports.replaceService = exports.serviceIsResolved = exports.updateService = exports.getService = exports.gcpIds = exports.LOCATION_LABEL = void 0;
const apiv2_1 = require("../apiv2");
const error_1 = require("../error");
const api_1 = require("../api");
const proto = require("./proto");
const throttler_1 = require("../throttler/throttler");
const logger_1 = require("../logger");
const API_VERSION = "v1";
const client = new apiv2_1.Client({
urlPrefix: api_1.runOrigin,
auth: true,
apiVersion: API_VERSION,
});
exports.LOCATION_LABEL = "cloud.googleapis.com/location";
function gcpIds(service) {
var _a;
return {
serviceId: service.metadata.name,
projectNumber: service.metadata.namespace,
region: ((_a = service.metadata.labels) === null || _a === void 0 ? void 0 : _a[exports.LOCATION_LABEL]) || "unknown-region",
};
}
exports.gcpIds = gcpIds;
async function getService(name) {
try {
const response = await client.get(name);
return response.body;
}
catch (err) {
throw new error_1.FirebaseError(`Failed to fetch Run service ${name}`, {
original: err,
});
}
}
exports.getService = getService;
async function updateService(name, service) {
delete service.status;
service = await exports.replaceService(name, service);
let retry = 0;
while (!exports.serviceIsResolved(service)) {
await (0, throttler_1.backoff)(retry, 2, 30);
retry = retry + 1;
service = await exports.getService(name);
}
return service;
}
exports.updateService = updateService;
function serviceIsResolved(service) {
var _a, _b, _c, _d, _e;
if (((_a = service.status) === null || _a === void 0 ? void 0 : _a.observedGeneration) !== service.metadata.generation) {
logger_1.logger.debug(`Service ${service.metadata.name} is not resolved because` +
`observed generation ${(_b = service.status) === null || _b === void 0 ? void 0 : _b.observedGeneration} does not ` +
`match spec generation ${service.metadata.generation}`);
return false;
}
const readyCondition = (_d = (_c = service.status) === null || _c === void 0 ? void 0 : _c.conditions) === null || _d === void 0 ? void 0 : _d.find((condition) => {
return condition.type === "Ready";
});
if ((readyCondition === null || readyCondition === void 0 ? void 0 : readyCondition.status) === "Unknown") {
logger_1.logger.debug(`Waiting for service ${service.metadata.name} to be ready. ` +
`Status is ${JSON.stringify((_e = service.status) === null || _e === void 0 ? void 0 : _e.conditions)}`);
return false;
}
else if ((readyCondition === null || readyCondition === void 0 ? void 0 : readyCondition.status) === "True") {
return true;
}
logger_1.logger.debug(`Service ${service.metadata.name} has unexpected ready status ${JSON.stringify(readyCondition)}. It may have failed rollout.`);
throw new error_1.FirebaseError(`Unexpected Status ${readyCondition === null || readyCondition === void 0 ? void 0 : readyCondition.status} for service ${service.metadata.name}`);
}
exports.serviceIsResolved = serviceIsResolved;
async function replaceService(name, service) {
try {
const response = await client.put(name, service);
return response.body;
}
catch (err) {
throw new error_1.FirebaseError(`Failed to replace Run service ${name}`, {
original: err,
});
}
}
exports.replaceService = replaceService;
async function setIamPolicy(name, policy, httpClient = client) {
try {
await httpClient.post(`${name}:setIamPolicy`, {
policy,
updateMask: proto.fieldMasks(policy).join(","),
});
}
catch (err) {
throw new error_1.FirebaseError(`Failed to set the IAM Policy on the Service ${name}`, {
original: err,
});
}
}
exports.setIamPolicy = setIamPolicy;
async function getIamPolicy(serviceName, httpClient = client) {
try {
const response = await httpClient.get(`${serviceName}:getIamPolicy`);
return response.body;
}
catch (err) {
throw new error_1.FirebaseError(`Failed to get the IAM Policy on the Service ${serviceName}`, {
original: err,
});
}
}
exports.getIamPolicy = getIamPolicy;
async function setInvokerCreate(projectId, serviceName, invoker, httpClient = client) {
if (invoker.length === 0) {
throw new error_1.FirebaseError("Invoker cannot be an empty array");
}
const invokerMembers = proto.getInvokerMembers(invoker, projectId);
const invokerRole = "roles/run.invoker";
const bindings = [{ role: invokerRole, members: invokerMembers }];
const policy = {
bindings: bindings,
etag: "",
version: 3,
};
await setIamPolicy(serviceName, policy, httpClient);
}
exports.setInvokerCreate = setInvokerCreate;
async function setInvokerUpdate(projectId, serviceName, invoker, httpClient = client) {
var _a;
if (invoker.length === 0) {
throw new error_1.FirebaseError("Invoker cannot be an empty array");
}
const invokerMembers = proto.getInvokerMembers(invoker, projectId);
const invokerRole = "roles/run.invoker";
const currentPolicy = await getIamPolicy(serviceName, httpClient);
const currentInvokerBinding = (_a = currentPolicy.bindings) === null || _a === void 0 ? void 0 : _a.find((binding) => binding.role === invokerRole);
if (currentInvokerBinding &&
JSON.stringify(currentInvokerBinding.members.sort()) === JSON.stringify(invokerMembers.sort())) {
return;
}
const bindings = (currentPolicy.bindings || []).filter((binding) => binding.role !== invokerRole);
bindings.push({
role: invokerRole,
members: invokerMembers,
});
const policy = {
bindings: bindings,
etag: currentPolicy.etag || "",
version: 3,
};
await setIamPolicy(serviceName, policy, httpClient);
}
exports.setInvokerUpdate = setInvokerUpdate;