initial

2026-02-24 12:29:58 +00:00
commit 3fad287a29
58 changed files with 3999 additions and 0 deletions
--- a/ts/opsserver/handlers/secrets.handler.ts
+++ b/ts/opsserver/handlers/secrets.handler.ts
@@ -0,0 +1,85 @@
+import * as plugins from '../../plugins.ts';
+import type { OpsServer } from '../classes.opsserver.ts';
+import * as interfaces from '../../../ts_interfaces/index.ts';
+import { requireValidIdentity } from '../helpers/guards.ts';
+
+export class SecretsHandler {
+  public typedrouter = new plugins.typedrequest.TypedRouter();
+
+  constructor(private opsServerRef: OpsServer) {
+    this.opsServerRef.typedrouter.addTypedRouter(this.typedrouter);
+    this.registerHandlers();
+  }
+
+  private registerHandlers(): void {
+    // Get secrets
+    this.typedrouter.addTypedHandler(
+      new plugins.typedrequest.TypedHandler<interfaces.requests.IReq_GetSecrets>(
+        'getSecrets',
+        async (dataArg) => {
+          await requireValidIdentity(this.opsServerRef.adminHandler, dataArg);
+          const provider = this.opsServerRef.gitopsAppRef.connectionManager.getProvider(
+            dataArg.connectionId,
+          );
+          const secrets = dataArg.scope === 'project'
+            ? await provider.getProjectSecrets(dataArg.scopeId)
+            : await provider.getGroupSecrets(dataArg.scopeId);
+          return { secrets };
+        },
+      ),
+    );
+
+    // Create secret
+    this.typedrouter.addTypedHandler(
+      new plugins.typedrequest.TypedHandler<interfaces.requests.IReq_CreateSecret>(
+        'createSecret',
+        async (dataArg) => {
+          await requireValidIdentity(this.opsServerRef.adminHandler, dataArg);
+          const provider = this.opsServerRef.gitopsAppRef.connectionManager.getProvider(
+            dataArg.connectionId,
+          );
+          const secret = dataArg.scope === 'project'
+            ? await provider.createProjectSecret(dataArg.scopeId, dataArg.key, dataArg.value)
+            : await provider.createGroupSecret(dataArg.scopeId, dataArg.key, dataArg.value);
+          return { secret };
+        },
+      ),
+    );
+
+    // Update secret
+    this.typedrouter.addTypedHandler(
+      new plugins.typedrequest.TypedHandler<interfaces.requests.IReq_UpdateSecret>(
+        'updateSecret',
+        async (dataArg) => {
+          await requireValidIdentity(this.opsServerRef.adminHandler, dataArg);
+          const provider = this.opsServerRef.gitopsAppRef.connectionManager.getProvider(
+            dataArg.connectionId,
+          );
+          const secret = dataArg.scope === 'project'
+            ? await provider.updateProjectSecret(dataArg.scopeId, dataArg.key, dataArg.value)
+            : await provider.updateGroupSecret(dataArg.scopeId, dataArg.key, dataArg.value);
+          return { secret };
+        },
+      ),
+    );
+
+    // Delete secret
+    this.typedrouter.addTypedHandler(
+      new plugins.typedrequest.TypedHandler<interfaces.requests.IReq_DeleteSecret>(
+        'deleteSecret',
+        async (dataArg) => {
+          await requireValidIdentity(this.opsServerRef.adminHandler, dataArg);
+          const provider = this.opsServerRef.gitopsAppRef.connectionManager.getProvider(
+            dataArg.connectionId,
+          );
+          if (dataArg.scope === 'project') {
+            await provider.deleteProjectSecret(dataArg.scopeId, dataArg.key);
+          } else {
+            await provider.deleteGroupSecret(dataArg.scopeId, dataArg.key);
+          }
+          return { ok: true };
+        },
+      ),
+    );
+  }
+}