INSIGHTS-290 Call Team Bulk endpoint from cli (#203)

* Added support to manage insights teams

* Added support to manage insights teams

* Added support to manage insights teams

* Fixed issues

* Fixed issues

* Code refactoring

* Fixed issues

pkg/cli/push.go

@@ -23,10 +23,12 @@ import (
 
 var pushDir string
 var pushDryRun bool
+var pushDeleteNonProvidedTeams bool
 
 func init() {
 	pushCmd.PersistentFlags().StringVarP(&pushDir, "push-directory", "d", ".", "Directory of content to push to Insights.")
-	pushCmd.PersistentFlags().BoolVarP(&pushDryRun, "dry-run", "z", false, "Explain what would be pushed to Insights, without making changes.")
+	pushCmd.PersistentFlags().BoolVarP(&pushDryRun, "dry-run", "z", false, "Explains what would be pushed to Insights, without making changes.")
+	pushCmd.PersistentFlags().BoolVarP(&pushDeleteNonProvidedTeams, "delete", "x", false, "Deletes teams that are not provided in the push directory.")
 	rootCmd.AddCommand(pushCmd)
 }
 

pkg/cli/push_teams.go

@@ -0,0 +1,41 @@
+// Copyright 2024 FairwindsOps Inc
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package cli
+
+import (
+	"github.com/fairwindsops/insights-cli/pkg/teams"
+	"github.com/sirupsen/logrus"
+	"github.com/spf13/cobra"
+)
+
+func init() {
+	pushCmd.AddCommand(pushTeamsCmd)
+}
+
+var pushTeamsCmd = &cobra.Command{
+	Use:    "teams",
+	Short:  "Push teams configuration.",
+	Long:   "Push teams configuration to Insights for user permissions management.",
+	PreRun: validateAndLoadInsightsAPIConfigWrapper,
+	Run: func(cmd *cobra.Command, args []string) {
+		org := configurationObject.Options.Organization
+		host := configurationObject.Options.Hostname
+		err := teams.PushTeams(pushDir, org, insightsToken, host, pushDeleteNonProvidedTeams, pushDryRun)
+		if err != nil {
+			logrus.Fatalf("Unable to push teams configuration: %v", err)
+		}
+		logrus.Infoln("Push succeeded.")
+	},
+}

pkg/teams/teams.go

@@ -0,0 +1,110 @@
+// Copyright 2024 FairwindsOps Inc //
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+// Package policies provides an interface to Insights policy settings and
+// enforcement.
+package teams
+
+import (
+	"errors"
+	"fmt"
+	"net/http"
+	"os"
+
+	"github.com/imroc/req"
+	"github.com/sirupsen/logrus"
+	"gopkg.in/yaml.v2"
+
+	cliversion "github.com/fairwindsops/insights-cli/pkg/version"
+)
+
+const teamsPutURLFormat = "%s/v0/organizations/%s/teams-bulk"
+
+type TeamInput struct {
+	Clusters               []string `json:"clusters" yaml:"clusters"`
+	DisallowedClusters     []string `json:"disallowedClusters" yaml:"disallowedClusters"`
+	DisallowedNamespaces   []string `json:"disallowedNamespaces" yaml:"disallowedNamespaces"`
+	DisallowedRepositories []string `json:"disallowedRepositories" yaml:"disallowedRepositories"`
+	Name                   string   `json:"name" yaml:"name"`
+	Namespaces             []string `json:"namespaces" yaml:"namespaces"`
+	Repositories           []string `json:"repositories" yaml:"repositories"`
+}
+
+func PostTeams(teamInput []TeamInput, deleteNonProvidedTeams bool, org, token, hostName string) error {
+	url := fmt.Sprintf(teamsPutURLFormat, hostName, org)
+	if deleteNonProvidedTeams {
+		url += "?deleteNonProvidedTeams=true"
+	}
+	teamInputYaml, err := yaml.Marshal(teamInput)
+	if err != nil {
+		return err
+	}
+	resp, err := req.Post(url, getHeaders(token), teamInputYaml)
+	if err != nil {
+		return err
+	}
+	if resp.Response().StatusCode != http.StatusOK {
+		return fmt.Errorf("invalid HTTP response %d %s", resp.Response().StatusCode, string(resp.Bytes()))
+	}
+	return nil
+}
+
+func PushTeams(pushDir, org, insightsToken, host string, deleteNonProvidedTeams, dryrun bool) error {
+	if pushDir == "" {
+		return errors.New("pushDir cannot be empty")
+	}
+	teamsFileName := pushDir + "/teams.yaml"
+	logrus.Infof("Pushing teams configuration from %s", teamsFileName)
+	_, err := os.Stat(teamsFileName)
+	if err != nil {
+		return err
+	}
+	teamsFile, err := os.Open(teamsFileName)
+	if err != nil {
+		return err
+	}
+	defer teamsFile.Close()
+	teams := []TeamInput{}
+	err = yaml.NewDecoder(teamsFile).Decode(&teams)
+	if err != nil {
+		return err
+	}
+	if dryrun {
+		logrus.Infof("Dry run: Would have pushed the following teams configuration:")
+		for _, team := range teams {
+			logrus.Infof("Team: %s", team.Name)
+			logrus.Infof("  Clusters: %v", team.Clusters)
+			logrus.Infof("  Namespaces: %v", team.Namespaces)
+			logrus.Infof("  Repositories: %v", team.Repositories)
+			logrus.Infof("  DisallowedClusters: %v", team.DisallowedClusters)
+			logrus.Infof("  DisallowedNamespaces: %v", team.DisallowedNamespaces)
+			logrus.Infof("  DisallowedRepositories: %v", team.DisallowedRepositories)
+		}
+		return nil
+	}
+	err = PostTeams(teams, deleteNonProvidedTeams, org, insightsToken, host)
+	if err != nil {
+		return err
+	}
+	logrus.Debugln("Done pushing teams configuration")
+	return nil
+}
+
+func getHeaders(token string) req.Header {
+	return req.Header{
+		"Content-Type":            "application/yaml",
+		"X-Fairwinds-CLI-Version": cliversion.GetVersion(),
+		"Authorization":           fmt.Sprintf("Bearer %s", token),
+		"Accept":                  "application/json",
+	}
+}