awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-10 01:28:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update 20250218020306_backfill-secret-permissions-with-readvalue.ts

Browse Source
This commit is contained in:
Daniel Hougaard
2025-03-05 22:47:40 +04:00
parent a86a951acc
commit 96046726b2
1 changed files with 57 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/db/migrations/20250218020306_backfill-secret-permissions-with-readvalue.ts
+57 -31
View File
@@ -81,6 +81,8 @@ const $updatePermissionsDown = (permissions: unknown) => {
}; };
}; };
const CHUNK_SIZE = 1000;
export async function up(knex: Knex): Promise<void> { export async function up(knex: Knex): Promise<void> {
const projectRoles = await knex(TableName.ProjectRoles).select(selectAllTableCols(TableName.ProjectRoles)); const projectRoles = await knex(TableName.ProjectRoles).select(selectAllTableCols(TableName.ProjectRoles));
const projectIdentityAdditionalPrivileges = await knex(TableName.IdentityProjectAdditionalPrivilege).select( const projectIdentityAdditionalPrivileges = await knex(TableName.IdentityProjectAdditionalPrivilege).select(
@@ -89,6 +91,7 @@ export async function up(knex: Knex): Promise<void> {
const projectUserAdditionalPrivileges = await knex(TableName.ProjectUserAdditionalPrivilege).select( const projectUserAdditionalPrivileges = await knex(TableName.ProjectUserAdditionalPrivilege).select(
selectAllTableCols(TableName.ProjectUserAdditionalPrivilege) selectAllTableCols(TableName.ProjectUserAdditionalPrivilege)
); );
const serviceTokens = await knex(TableName.ServiceToken).select(selectAllTableCols(TableName.ServiceToken)); const serviceTokens = await knex(TableName.ServiceToken).select(selectAllTableCols(TableName.ServiceToken));
const updatedServiceTokens = serviceTokens.reduce<typeof serviceTokens>((acc, serviceToken) => { const updatedServiceTokens = serviceTokens.reduce<typeof serviceTokens>((acc, serviceToken) => {
@@ -105,20 +108,25 @@ export async function up(knex: Knex): Promise<void> {
}, []); }, []);
if (updatedServiceTokens.length > 0) { if (updatedServiceTokens.length > 0) {
await knex(TableName.ServiceToken) for (let i = 0; i < updatedServiceTokens.length; i += CHUNK_SIZE) {
.whereIn( const chunk = updatedServiceTokens.slice(i, i + CHUNK_SIZE);
"id",
updatedServiceTokens.map((t) => t.id) // eslint-disable-next-line no-await-in-loop
) await knex(TableName.ServiceToken)
.update({ .whereIn(
// @ts-expect-error -- raw query "id",
permissions: knex.raw( chunk.map((t) => t.id)
`CASE id
${updatedServiceTokens.map((t) => `WHEN '${t.id}' THEN ?::text[]`).join(" ")}
END`,
updatedServiceTokens.map((t) => t.permissions)
) )
}); .update({
// @ts-expect-error -- raw query
permissions: knex.raw(
`CASE id
${chunk.map((t) => `WHEN '${t.id}' THEN ?::text[]`).join(" ")}
END`,
chunk.map((t) => t.permissions)
)
});
}
} }
const updatedRoles = projectRoles.reduce<typeof projectRoles>((acc, projectRole) => { const updatedRoles = projectRoles.reduce<typeof projectRoles>((acc, projectRole) => {
@@ -162,21 +170,30 @@ export async function up(knex: Knex): Promise<void> {
}, []); }, []);
if (updatedRoles.length > 0) { if (updatedRoles.length > 0) {
await knex(TableName.ProjectRoles).insert(updatedRoles).onConflict("id").merge(["permissions"]); for (let i = 0; i < updatedRoles.length; i += CHUNK_SIZE) {
const chunk = updatedRoles.slice(i, i + CHUNK_SIZE);
// eslint-disable-next-line no-await-in-loop
await knex(TableName.ProjectRoles).insert(chunk).onConflict("id").merge(["permissions"]);
}
} }
if (updatedIdentityAdditionalPrivileges.length > 0) { if (updatedIdentityAdditionalPrivileges.length > 0) {
await knex(TableName.IdentityProjectAdditionalPrivilege) for (let i = 0; i < updatedIdentityAdditionalPrivileges.length; i += CHUNK_SIZE) {
.insert(updatedIdentityAdditionalPrivileges) const chunk = updatedIdentityAdditionalPrivileges.slice(i, i + CHUNK_SIZE);
.onConflict("id")
.merge(["permissions"]); // eslint-disable-next-line no-await-in-loop
await knex(TableName.IdentityProjectAdditionalPrivilege).insert(chunk).onConflict("id").merge(["permissions"]);
}
} }
if (updatedUserAdditionalPrivileges.length > 0) { if (updatedUserAdditionalPrivileges.length > 0) {
await knex(TableName.ProjectUserAdditionalPrivilege) for (let i = 0; i < updatedUserAdditionalPrivileges.length; i += CHUNK_SIZE) {
.insert(updatedUserAdditionalPrivileges) const chunk = updatedUserAdditionalPrivileges.slice(i, i + CHUNK_SIZE);
.onConflict("id")
.merge(["permissions"]); // eslint-disable-next-line no-await-in-loop
await knex(TableName.ProjectUserAdditionalPrivilege).insert(chunk).onConflict("id").merge(["permissions"]);
}
} }
} }
@@ -263,20 +280,29 @@ export async function down(knex: Knex): Promise<void> {
); );
if (updatedRoles.length > 0) { if (updatedRoles.length > 0) {
await knex(TableName.ProjectRoles).insert(updatedRoles).onConflict("id").merge(["permissions"]); for (let i = 0; i < updatedRoles.length; i += CHUNK_SIZE) {
const chunk = updatedRoles.slice(i, i + CHUNK_SIZE);
// eslint-disable-next-line no-await-in-loop
await knex(TableName.ProjectRoles).insert(chunk).onConflict("id").merge(["permissions"]);
}
} }
if (updatedIdentityAdditionalPrivileges.length > 0) { if (updatedIdentityAdditionalPrivileges.length > 0) {
await knex(TableName.IdentityProjectAdditionalPrivilege) for (let i = 0; i < updatedIdentityAdditionalPrivileges.length; i += CHUNK_SIZE) {
.insert(updatedIdentityAdditionalPrivileges) const chunk = updatedIdentityAdditionalPrivileges.slice(i, i + CHUNK_SIZE);
.onConflict("id")
.merge(["permissions"]); // eslint-disable-next-line no-await-in-loop
await knex(TableName.IdentityProjectAdditionalPrivilege).insert(chunk).onConflict("id").merge(["permissions"]);
}
} }
if (updatedUserAdditionalPrivileges.length > 0) { if (updatedUserAdditionalPrivileges.length > 0) {
await knex(TableName.ProjectUserAdditionalPrivilege) for (let i = 0; i < updatedUserAdditionalPrivileges.length; i += CHUNK_SIZE) {
.insert(updatedUserAdditionalPrivileges) const chunk = updatedUserAdditionalPrivileges.slice(i, i + CHUNK_SIZE);
.onConflict("id")
.merge(["permissions"]); // eslint-disable-next-line no-await-in-loop
await knex(TableName.ProjectUserAdditionalPrivilege).insert(chunk).onConflict("id").merge(["permissions"]);
}
} }
} }