Class: Util

Inherits:
Object
  • Object
show all
Defined in:
lib/terraorg/model/util.rb

Overview

Copyright 2019-2020 LiveRamp Holdings, Inc.

Licensed under the Apache License, Version 2.0 (the “License”); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an “AS IS” BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Class Method Summary collapse

Class Method Details

.gsuite_group_tf(name, domain, persons, description) ⇒ Object

Take a list of Persons and generate a gsuite_group containing all of those members with expected organizational settings.



25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
 
# File 'lib/terraorg/model/util.rb', line 25

def self.gsuite_group_tf(name, domain, persons, description)
  email = "#{name}@#{domain}"
  tf = <<-TERRAFORM
# G Suite group for #{email}
resource "gsuite_group" "#{name}" {
email = "#{email}"
name  = "#{name}"
description = "#{description}"
}

resource "gsuite_group_settings" "#{name}" {
email = gsuite_group.#{name}.email
who_can_discover_group = "ALL_IN_DOMAIN_CAN_DISCOVER"
who_can_view_membership = "ALL_IN_DOMAIN_CAN_VIEW"
who_can_leave_group = "NONE_CAN_LEAVE"
who_can_join = "INVITED_CAN_JOIN"
who_can_post_message = "ALL_IN_DOMAIN_CAN_POST"
}

resource "gsuite_group_members" "#{name}" {
group_email = gsuite_group.#{name}.email
TERRAFORM

  # Add a member block for everyone
  # downcase is used as internal G Suite representation is always lowercase
  # this avoids unnecessary state churn
  persons.each do |p|
    tf += <<-TERRAFORM
member {
  email = "#{p.email.downcase}"
  role = "MEMBER"
}
TERRAFORM
  end

  tf += "\n}"
  tf
end

.persons_tf(persons) ⇒ Object

Take a list of Persons and turn it into a newline delimited, comma separated array definition suitable for inclusion in terraform. Each line contains an okta id and a comment indicating the person’s name.



19
20
21
 
# File 'lib/terraorg/model/util.rb', line 19

def self.persons_tf(persons)
  "[\n" + persons.map { |p| "    \"#{p.okta_id}\", # #{p.name}" }.join("\n") + "\n]\n"
end