atlantis/server/events/external_team_allowlist_checker.go

package events

import (
	"fmt"
	"strings"

	"github.com/runatlantis/atlantis/server/core/runtime"

	"github.com/runatlantis/atlantis/server/events/models"
)

type ExternalTeamAllowlistChecker struct {
	Command                     string
	ExtraArgs                   []string
	ExternalTeamAllowlistRunner runtime.ExternalTeamAllowlistRunner
}

func (checker *ExternalTeamAllowlistChecker) HasRules() bool {
	return true
}

func (checker *ExternalTeamAllowlistChecker) IsCommandAllowedForTeam(ctx models.TeamAllowlistCheckerContext, team string, command string) bool {
	cmd := checker.buildCommandString(ctx, []string{team}, command)
	out, err := checker.ExternalTeamAllowlistRunner.Run(ctx, "sh", "-c", cmd)
	if err != nil {
		return false
	}

	return checker.checkOutputResults(out)
}

func (checker *ExternalTeamAllowlistChecker) IsCommandAllowedForAnyTeam(ctx models.TeamAllowlistCheckerContext, teams []string, command string) bool {
	cmd := checker.buildCommandString(ctx, teams, command)
	out, err := checker.ExternalTeamAllowlistRunner.Run(ctx, "sh", "-c", cmd)
	if err != nil {
		return false
	}

	return checker.checkOutputResults(out)
}

func (checker *ExternalTeamAllowlistChecker) AllTeams() []string {
	return []string{}
}

func (checker *ExternalTeamAllowlistChecker) buildCommandString(ctx models.TeamAllowlistCheckerContext, teams []string, command string) string {
	// Build command string
	// Format is "$external_cmd $external_args $command $repo $teams"
	cmdArr := append([]string{checker.Command}, checker.ExtraArgs...)
	orgTeams := make([]string, len(teams))
	for i, team := range teams {
		orgTeams[i] = fmt.Sprintf("%s/%s", ctx.BaseRepo.Owner, team)
	}

	teamStr := strings.Join(orgTeams, " ")
	return strings.Join(append(cmdArr, command, ctx.BaseRepo.FullName, teamStr), " ")
}

func (checker *ExternalTeamAllowlistChecker) checkOutputResults(output string) bool {
	lines := strings.Split(strings.TrimSpace(output), "\n")
	lastLine := lines[len(lines)-1]
	return strings.EqualFold(lastLine, "pass")
}