-
Notifications
You must be signed in to change notification settings - Fork 9
82 lines (77 loc) · 2.31 KB
/
Copy pathshared-access-controller.yml
File metadata and controls
82 lines (77 loc) · 2.31 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
name: "Shared Access Controller"
on:
workflow_call:
inputs:
runs-on:
description: "Overrides job runs-on setting (json-encoded list)"
type: string
required: false
default: '["ubuntu-latest"]'
user:
description: "User name"
type: string
required: true
permission:
description: "Permission to check. One of 'run_terratest'"
type: string
required: true
debug:
description: "Debug"
type: boolean
required: false
default: false
outputs:
granted:
description: If user granted access.
value: ${{ jobs.check.outputs.granted }}
jobs:
check:
runs-on: ${{ fromJSON(inputs.runs-on) }}
outputs:
granted: ${{ contains(fromJSON(steps.controller.outputs.users), inputs.user) }}
steps:
- name: Controller
id: controller
uses: cloudposse/github-action-yaml-config-query@8178e0c0d186f53de40f6bcf8e039f1e6a9aefc5 # v1.0.1
with:
query: .${{ inputs.permission }}
config: |-
run_terratest:
users:
- osterman
- goruha
- dudymas
- mcalhoun
- Nuru
- aknysh
- korenyoni
- milldr
- Benbentwo
- GabisCampana
- hans-d
- johncblandii
- kevcube
- Gowiem
- jamengual
- joe-niland
- nitrocode
- gberenice
- RoseSecurity
- oycyc
- mergify[bot]
create_feature_releases:
users:
- osterman
- goruha
- dudymas
- mcalhoun
- Nuru
- aknysh
- korenyoni
- milldr
- Benbentwo
- name: debug
if: ${{ inputs.debug }}
run: |-
echo "Users has '${{ inputs.permission }} permission' = ${{ steps.controller.outputs.users }}"
echo "User '${{ inputs.user }}' has permission '${{ inputs.permission }}' = ${{ contains(fromJSON(steps.controller.outputs.users), inputs.user) }}"