From 68bb27c1599516acff9bd799f0fededbe3e14782 Mon Sep 17 00:00:00 2001
From: dcore94 <m.lettere@gmail.com>
Date: Wed, 24 Mar 2021 15:40:52 +0100
Subject: [PATCH] added workflow for role deletion

---
 defaults/main.yaml             |  1 +
 templates/role_deleted.json.j2 | 77 ++++++++++++++++++++++++++++++++++
 2 files changed, 78 insertions(+)
 create mode 100644 templates/role_deleted.json.j2

diff --git a/defaults/main.yaml b/defaults/main.yaml
index 46acdb2..871626f 100644
--- a/defaults/main.yaml
+++ b/defaults/main.yaml
@@ -9,6 +9,7 @@ workflows:
    - user-group_deleted
    - user-group-role_deleted
    - delete-user-account
+   - role_deleted
    - role_created
    - add_role_policy_permission 
 keycloak_host: "https://accounts.dev.d4science.org/auth"
diff --git a/templates/role_deleted.json.j2 b/templates/role_deleted.json.j2
new file mode 100644
index 0000000..06436f1
--- /dev/null
+++ b/templates/role_deleted.json.j2
@@ -0,0 +1,77 @@
+{
+	"ownerApp" : "Orchestrator",
+	"name" : "role_deleted",
+	"createBy" : "Marco Lettere",
+	"description": "Handle workflow related to Portal event role_deleted",
+	"version" : 1,
+	"ownerEmail" : "marco.lettere@nubisware.com",
+	"inputParameters" : ["role"],
+	"tasks" : [
+    {
+		  "name": "LAMBDA_TASK",
+		  "taskReferenceName": "init",
+		  "type": "LAMBDA",
+		  "inputParameters": {
+			  "keycloak": "{{ keycloak }}/{{ keycloak_realm }}",
+			  "keycloak_admin" : "{{ keycloak_admin }}/{{ keycloak_realm }}",
+			  "scriptExpression": "1 == 1"
+		  }
+		},
+		{
+			"name" : "pyrest",
+			"taskReferenceName" : "authorize",
+			"type" : "SIMPLE",
+			"inputParameters" : {
+				"url" : "{{ keycloak }}/master/protocol/openid-connect/token",
+				"method" : "POST",
+				"headers" : {
+					"Accept" : "application/json"
+				},
+				"body" : {
+					"client_id" : "orchestrator", 
+					"client_secret" : "{{ keycloak_auth_master }}",
+					"grant_type" : "client_credentials"
+				}
+			}
+		},
+		{
+      "name" : "pyrest",
+      "taskReferenceName" : "get_all_vres",
+      "type" : "SIMPLE",
+      "inputParameters" : {
+          "url" : "${init.input.keycloak_admin}/clients?clientId=%252F&search=true&first=0&max=500",
+          "method" : "GET",
+          "headers" : {
+              "Authorization" : "Bearer ${authorize.output.body.access_token}",
+              "Accept" : "application/json"
+          }
+      }
+    },
+    {
+      "name": "LAMBDA_TASK",
+      "taskReferenceName": "build_delete_role_tasks",
+      "type": "LAMBDA",
+      "inputParameters": {
+        "role" : "${workflow.input.role}",
+        "vres" : "${get_all_vres.output.body}",
+        "scriptExpression": "inputs={};tasks=[];for(var i=0;i<$.vres.length;i++)vre=$.vres[i],tasks.push({name:'pyrest',type:'SIMPLE',taskReferenceName:'delete_role_'+i}),inputs['delete_role_'+i]={url:'${init.input.keycloak_admin}/clients/' + vre.id + '/roles/' + $.role,method:'DELETE', expect:Java.to([204,404],'int[]'),headers:{Authorization:'Bearer ${authorize.output.body.access_token}'}};return {tasks:Java.to(tasks,'java.util.Map[]'),inputs:inputs};"
+      }
+    },
+    {
+      "name" : "fork_dynamic",
+      "type" : "FORK_JOIN_DYNAMIC",
+      "taskReferenceName" : "parallel_delete_role",
+      "inputParameters" : {
+          "tasks" : "${build_delete_role_tasks.output.result.tasks}",
+          "inputs" : "${build_delete_role_tasks.output.result.inputs}"
+      },
+      "dynamicForkTasksParam": "tasks",
+      "dynamicForkTasksInputParamName": "inputs"
+    },
+    {
+        "name" : "join",
+        "type" : "JOIN",
+        "taskReferenceName" : "join_parallel_role_deletion"
+    }
+	]
+}