71 lines
2.0 KiB
Python
71 lines
2.0 KiB
Python
|
#!/usr/bin/env python3
|
||
|
|
"""
|
||
|
|
Extract all Azure role names from rbacLookup.bicep and generate Python code
|
||
|
|
for _KNOWN_ENUMS in modules.py.
|
||
|
|
|
||
|
|
Usage:
|
||
|
|
python3 scripts/extract_roles_from_rbaclookup.py /path/to/rbacLookup.bicep
|
||
|
|
"""
|
||
|
|
|
||
|
|
import re
|
||
|
|
import sys
|
||
|
|
from pathlib import Path
|
||
|
|
|
||
|
|
|
||
|
|
def extract_role_names(bicep_file: Path) -> list[str]:
|
||
|
|
"""Extract all role names from the rbacLookup.bicep var roles = {...} block."""
|
||
|
|
content = bicep_file.read_text()
|
||
|
|
|
||
|
|
# Find the "var roles = {" block
|
||
|
|
roles_match = re.search(r'@export\(\)\s*var\s+roles\s*=\s*\{(.+?)\n\}', content, re.DOTALL)
|
||
|
|
if not roles_match:
|
||
|
|
raise ValueError("Could not find 'var roles = {' block in Bicep file")
|
||
|
|
|
||
|
|
roles_block = roles_match.group(1)
|
||
|
|
|
||
|
|
# Extract all role names (keys before the colon)
|
||
|
|
# Pattern: " ROLE_NAME: 'guid'"
|
||
|
|
role_names = re.findall(r'^\s+([A-Z_]+):', roles_block, re.MULTILINE)
|
||
|
|
|
||
|
|
return sorted(role_names)
|
||
|
|
|
||
|
|
|
||
|
|
def generate_python_code(role_names: list[str]) -> str:
|
||
|
|
"""Generate Python code for _KNOWN_ENUMS["roles"]."""
|
||
|
|
lines = ['_KNOWN_ENUMS = {']
|
||
|
|
lines.append(' "roles": [')
|
||
|
|
|
||
|
|
for role in role_names:
|
||
|
|
lines.append(f' "{role}",')
|
||
|
|
|
||
|
|
lines.append(' ],')
|
||
|
|
lines.append(' "roleDefinitionIds": [ # alias for roles')
|
||
|
|
|
||
|
|
for role in role_names:
|
||
|
|
lines.append(f' "{role}",')
|
||
|
|
|
||
|
|
lines.append(' ],')
|
||
|
|
lines.append('}')
|
||
|
|
|
||
|
|
return '\n'.join(lines)
|
||
|
|
|
||
|
|
|
||
|
|
if __name__ == "__main__":
|
||
|
|
if len(sys.argv) < 2:
|
||
|
|
print("Usage: extract_roles_from_rbaclookup.py /path/to/rbacLookup.bicep", file=sys.stderr)
|
||
|
|
sys.exit(1)
|
||
|
|
|
||
|
|
bicep_path = Path(sys.argv[1])
|
||
|
|
if not bicep_path.exists():
|
||
|
|
print(f"Error: File not found: {bicep_path}", file=sys.stderr)
|
||
|
|
sys.exit(1)
|
||
|
|
|
||
|
|
try:
|
||
|
|
roles = extract_role_names(bicep_path)
|
||
|
|
print(f"# Extracted {len(roles)} roles from {bicep_path.name}")
|
||
|
|
print(f"# Generated: {Path(__file__).name}\n")
|
||
|
|
print(generate_python_code(roles))
|
||
|
|
except Exception as e:
|
||
|
|
print(f"Error: {e}", file=sys.stderr)
|
||
|
|
sys.exit(1)
|