You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
61 lines
2.8 KiB
61 lines
2.8 KiB
"use strict";
|
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
exports.command = void 0;
|
|
const command_1 = require("../command");
|
|
const projectUtils_1 = require("../projectUtils");
|
|
const secretManager_1 = require("../gcp/secretManager");
|
|
const prompt_1 = require("../prompt");
|
|
const utils_1 = require("../utils");
|
|
const secrets = require("../functions/secrets");
|
|
const backend = require("../deploy/functions/backend");
|
|
exports.command = new command_1.Command("functions:secrets:destroy <KEY>[@version]")
|
|
.description("Destroy a secret. Defaults to destroying the latest version.")
|
|
.withForce("Destroys a secret without confirmation.")
|
|
.action(async (key, options) => {
|
|
const projectId = (0, projectUtils_1.needProjectId)(options);
|
|
const projectNumber = await (0, projectUtils_1.needProjectNumber)(options);
|
|
const haveBackend = await backend.existingBackend({ projectId });
|
|
let [name, version] = key.split("@");
|
|
if (!version) {
|
|
version = "latest";
|
|
}
|
|
const sv = await (0, secretManager_1.getSecretVersion)(projectId, name, version);
|
|
if (sv.state === "DESTROYED") {
|
|
(0, utils_1.logBullet)(`Secret ${sv.secret.name}@${version} is already destroyed. Nothing to do.`);
|
|
return;
|
|
}
|
|
const boundEndpoints = backend
|
|
.allEndpoints(haveBackend)
|
|
.filter((e) => secrets.inUse({ projectId, projectNumber }, sv.secret, e));
|
|
if (boundEndpoints.length > 0) {
|
|
const endpointsMsg = boundEndpoints
|
|
.map((e) => `${e.id}[${e.platform}](${e.region})`)
|
|
.join("\t\n");
|
|
(0, utils_1.logWarning)(`Secret ${name}@${version} is currently in use by following functions:\n\t${endpointsMsg}`);
|
|
if (!options.force) {
|
|
(0, utils_1.logWarning)("Refusing to destroy secret in use. Use -f to destroy the secret anyway.");
|
|
return;
|
|
}
|
|
}
|
|
if (!options.force) {
|
|
const confirm = await (0, prompt_1.promptOnce)({
|
|
name: "destroy",
|
|
type: "confirm",
|
|
default: true,
|
|
message: `Are you sure you want to destroy ${sv.secret.name}@${sv.versionId}`,
|
|
}, options);
|
|
if (!confirm) {
|
|
return;
|
|
}
|
|
}
|
|
await (0, secretManager_1.destroySecretVersion)(projectId, name, version);
|
|
(0, utils_1.logBullet)(`Destroyed secret version ${name}@${sv.versionId}`);
|
|
const secret = await (0, secretManager_1.getSecret)(projectId, name);
|
|
if (secrets.isFirebaseManaged(secret)) {
|
|
const versions = await (0, secretManager_1.listSecretVersions)(projectId, name);
|
|
if (versions.filter((v) => v.state === "ENABLED").length === 0) {
|
|
(0, utils_1.logBullet)(`No active secret versions left. Destroying secret ${name}`);
|
|
await (0, secretManager_1.deleteSecret)(projectId, name);
|
|
}
|
|
}
|
|
});
|