lbailly/infrastructure
1
0
Fork 0
forked from DGNum/infrastructure
Code Pull requests Activity

feat(meta): Add more assertions

Browse source
This commit is contained in:
Tom Hubrecht 2024-05-14 23:47:20 +02:00
parent e49ab86364
commit a559d2e0c0
1 changed files with 27 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

31
meta/options.nix
View file

@ -333,6 +333,8 @@ in
membersExists = nameExists members; membersExists = nameExists members;
groupsExists = nameExists groups; groupsExists = nameExists groups;
extract = name: builtins.mapAttrs (_: builtins.getAttr name);
in in
{ {
assertions = builtins.concatLists [ assertions = builtins.concatLists [
@ -342,14 +344,35 @@ in
) org.groups) ) org.groups)
# Check that all node admins exist # Check that all node admins exist
(membersExists (name: "A member of the ${name} admins was not found in the members list.") ( (membersExists (name: "A member of the node ${name} admins was not found in the members list.") (
builtins.mapAttrs (_: builtins.getAttr "admins") config.nodes extract "admins" config.nodes
)) ))
# Check that all node adminGroups exist # Check that all node adminGroups exist
(groupsExists (name: "A member of the ${name} adminGroups was not found in the groups list.") ( (groupsExists (name: "A member of the node ${name} adminGroups was not found in the groups list.") (
builtins.mapAttrs (_: builtins.getAttr "adminGroups") config.nodes extract "adminGroups" config.nodes
)) ))
# Check that all services admins exist
(membersExists (name: "A member of the service ${name} admins was not found in the members list.") (
extract "admins" org.services
))
# Check that all services adminGroups exist
(groupsExists (
name: "A member of the service ${name} adminGroups was not found in the groups list."
) (extract "adminGroups" org.services))
# Check that all external services admins exist
(membersExists (
name: "A member of the external service ${name} admins was not found in the members list."
) org.external)
# Check that all members have a keyFile
(builtins.map (name: {
assertion = builtins.pathExists "${builtins.toString ../keys}/${name}.keys";
message = "No ssh keys file found for ${name}.";
}) members)
]; ];
}; };
} }