@@ -170,7 +170,7 @@ var (
170
170
Identifier : rbac.RoleIdentifier {Name : "provisionerd" },
171
171
DisplayName : "Provisioner Daemon" ,
172
172
Site : rbac .Permissions (map [string ][]policy.Action {
173
- rbac .ResourceProvisionerJobs .Type : {policy .ActionRead , policy .ActionUpdate },
173
+ rbac .ResourceProvisionerJobs .Type : {policy .ActionRead , policy .ActionUpdate , policy . ActionCreate },
174
174
rbac .ResourceFile .Type : {policy .ActionRead },
175
175
rbac .ResourceSystem .Type : {policy .WildcardSymbol },
176
176
rbac .ResourceTemplate .Type : {policy .ActionRead , policy .ActionUpdate },
@@ -1075,13 +1075,6 @@ func (q *querier) customRoleCheck(ctx context.Context, role database.CustomRole)
1075
1075
return nil
1076
1076
}
1077
1077
1078
- func (q * querier ) GetPendingProvisionerJobs (ctx context.Context , lastUpdatedSince time.Time ) ([]database.ProvisionerJob , error ) {
1079
- if err := q .authorizeContext (ctx , policy .ActionRead , rbac .ResourceProvisionerJobs ); err != nil {
1080
- return nil , err
1081
- }
1082
- return q .db .GetPendingProvisionerJobs (ctx , lastUpdatedSince )
1083
- }
1084
-
1085
1078
func (q * querier ) AcquireLock (ctx context.Context , id int64 ) error {
1086
1079
return q .db .AcquireLock (ctx , id )
1087
1080
}
@@ -1919,13 +1912,6 @@ func (q *querier) GetHealthSettings(ctx context.Context) (string, error) {
1919
1912
return q .db .GetHealthSettings (ctx )
1920
1913
}
1921
1914
1922
- func (q * querier ) GetHungProvisionerJobs (ctx context.Context , hungSince time.Time ) ([]database.ProvisionerJob , error ) {
1923
- if err := q .authorizeContext (ctx , policy .ActionRead , rbac .ResourceProvisionerJobs ); err != nil {
1924
- return nil , err
1925
- }
1926
- return q .db .GetHungProvisionerJobs (ctx , hungSince )
1927
- }
1928
-
1929
1915
func (q * querier ) GetInboxNotificationByID (ctx context.Context , id uuid.UUID ) (database.InboxNotification , error ) {
1930
1916
return fetchWithAction (q .log , q .auth , policy .ActionRead , q .db .GetInboxNotificationByID )(ctx , id )
1931
1917
}
@@ -2336,6 +2322,9 @@ func (q *querier) GetProvisionerJobsByIDsWithQueuePosition(ctx context.Context,
2336
2322
}
2337
2323
2338
2324
func (q * querier ) GetProvisionerJobsByOrganizationAndStatusWithQueuePositionAndProvisioner (ctx context.Context , arg database.GetProvisionerJobsByOrganizationAndStatusWithQueuePositionAndProvisionerParams ) ([]database.GetProvisionerJobsByOrganizationAndStatusWithQueuePositionAndProvisionerRow , error ) {
2325
+ if err := q .authorizeContext (ctx , policy .ActionRead , rbac .ResourceProvisionerJobs ); err != nil {
2326
+ return nil , err
2327
+ }
2339
2328
return fetchWithPostFilter (q .auth , policy .ActionRead , q .db .GetProvisionerJobsByOrganizationAndStatusWithQueuePositionAndProvisioner )(ctx , arg )
2340
2329
}
2341
2330
@@ -2346,6 +2335,13 @@ func (q *querier) GetProvisionerJobsCreatedAfter(ctx context.Context, createdAt
2346
2335
return q .db .GetProvisionerJobsCreatedAfter (ctx , createdAt )
2347
2336
}
2348
2337
2338
+ func (q * querier ) GetProvisionerJobsToBeReaped (ctx context.Context , arg database.GetProvisionerJobsToBeReapedParams ) ([]database.ProvisionerJob , error ) {
2339
+ if err := q .authorizeContext (ctx , policy .ActionRead , rbac .ResourceProvisionerJobs ); err != nil {
2340
+ return nil , err
2341
+ }
2342
+ return q .db .GetProvisionerJobsToBeReaped (ctx , arg )
2343
+ }
2344
+
2349
2345
func (q * querier ) GetProvisionerKeyByHashedSecret (ctx context.Context , hashedSecret []byte ) (database.ProvisionerKey , error ) {
2350
2346
return fetch (q .log , q .auth , q .db .GetProvisionerKeyByHashedSecret )(ctx , hashedSecret )
2351
2347
}
@@ -3538,14 +3534,14 @@ func (q *querier) InsertProvisionerJob(ctx context.Context, arg database.InsertP
3538
3534
}
3539
3535
3540
3536
func (q * querier ) InsertProvisionerJobLogs (ctx context.Context , arg database.InsertProvisionerJobLogsParams ) ([]database.ProvisionerJobLog , error ) {
3541
- if err := q .authorizeContext (ctx , policy .ActionCreate , rbac .ResourceProvisionerJobs ); err != nil {
3537
+ if err := q .authorizeContext (ctx , policy .ActionUpdate , rbac .ResourceProvisionerJobs ); err != nil {
3542
3538
return nil , err
3543
3539
}
3544
3540
return q .db .InsertProvisionerJobLogs (ctx , arg )
3545
3541
}
3546
3542
3547
3543
func (q * querier ) InsertProvisionerJobTimings (ctx context.Context , arg database.InsertProvisionerJobTimingsParams ) ([]database.ProvisionerJobTiming , error ) {
3548
- if err := q .authorizeContext (ctx , policy .ActionCreate , rbac .ResourceProvisionerJobs ); err != nil {
3544
+ if err := q .authorizeContext (ctx , policy .ActionUpdate , rbac .ResourceProvisionerJobs ); err != nil {
3549
3545
return nil , err
3550
3546
}
3551
3547
return q .db .InsertProvisionerJobTimings (ctx , arg )
0 commit comments