"""vault acl policy"""
from typing import Annotated, List
from fastmcp import Context
def create_update(
ctx: Context,
name: Annotated[str, 'Specifies the name of the policy to create.'],
policy: Annotated[str | dict[str, dict[str, dict[str, list[str]]]], 'Specifies the policy document. Can be a string (HCL) or dict (JSON).'],
pretty_print: Annotated[bool, 'If True and policy is a dict, send JSON with pretty formatting.'] = True,
) -> dict[str, bool | None]:
"""create or update a vault acl policy"""
result = ctx.request_context.lifespan_context['sys'].create_or_update_acl_policy(name=name, policy=policy, pretty_print=pretty_print)
return {'success': result.ok, 'error': result.error if not result.ok else None}
def delete(ctx: Context, name: Annotated[str, 'Specifies the name of the policy to delete.']) -> dict[str, bool | None]:
"""delete a vault acl policy"""
result = ctx.request_context.lifespan_context['sys'].delete_acl_policy(name=name)
return {'success': result.ok, 'error': result.error if not result.ok else None}
async def read(ctx: Context, name: Annotated[str, 'The name of the acl policy to retrieve.']) -> dict[str, str | dict]:
"""read a vault acl policy"""
return ctx.request_context.lifespan_context['sys'].read_acl_policy(name=name)['data']
async def list_(ctx: Context) -> list[str]:
"""list existing vault acl policies"""
policies: list[str] = ctx.request_context.lifespan_context['sys'].list_acl_policies()['data']['keys']
return policies if policies else []
async def example_policy() -> dict[str, dict[str, dict[str, List[str]]]]:
"""display an example vault acl policy"""
return {'path': {'secret/data/my-app/*': {'capabilities': ['read', 'list']}, 'secret/metadata/my-app/*': {'capabilities': ['list']}}}
async def generate_policy(
paths: Annotated[List[str], 'The list of Vault access paths to include in the generated policy.'],
) -> dict[str, dict[str, dict[str, List[str]]]]:
"""generate a vault acl policy example with input paths"""
# initialize policy dictionary
policy: dict[str, dict[str, dict[str, list[str]]]] = {'path': {}}
# iterate through paths and attach example capabilities
for path in paths:
policy['path'][path] = {'capabilities': ['read', 'list']}
return policy
